Privacy Policy

Last updated May 2, 2026

We are Third Frontier Ventures Ltd. trading as Arcla (“we”, “us”, “our”), a company registered in England and Wales. We operate the Arcla sales enablement platform, which provides real-time AI coaching and conversation intelligence tools for sales teams.

This policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over it. If you have any questions, please contact us at support@arcla.com.

1. Who this policy applies to

This policy applies to three groups:

• Users — sales representatives, managers, and administrators who access the Arcla platform directly.
• Visitors — people who visit our marketing website at arcla.com.
• Third-party data subjects — people whose personal data is captured as part of a sales call processed by Arcla (for example, a prospect speaking with a sales representative). These individuals typically have no direct relationship with Arcla. If this applies to you, see section 9 below.

If you are a sales representative using Arcla as part of your employer’s subscription, your employer (the “Customer”) is the data controller for data processed within the platform on their behalf. Arcla acts as their data processor. Please also refer to your employer’s own privacy policy.

2. What data we collect

Account and profile data

When you register for or use Arcla, we collect your name, work email address, job title, and organisation name. If your employer sets up your account, we receive the information they provide.

Call and conversation data

The core function of Arcla is to listen to and analyse sales calls in real time. When you use the platform during a call, we process:

• Audio from your call sessions (where recording is enabled)
• Transcripts generated from that audio
• Notes and annotations you create during or after calls
• Call metadata such as duration, date, and connected platform (e.g. Zoom, Google Meet, Microsoft Teams)

Important: calls may include conversations with people who are not Arcla users (such as prospects and customers). You are responsible for ensuring that all parties to a call are aware of and have consented to any recording or AI analysis, in accordance with applicable law.

Usage and technical data

We collect information about how you use the platform, including feature interactions, session duration, browser type and version, IP address, and device information. We use this to operate, maintain, and improve the service.

Integration data

If you connect Arcla to third-party tools such as Salesforce, HubSpot, Slack, or your video call platform, we receive data from those integrations as necessary to provide the service (for example, pulling in CRM records relevant to an active call).

3. How we use your data

We use your data to:

• Provide the Arcla service — running real-time call coaching, surfacing scripts and playbooks, detecting questions, and generating AI-assisted responses.
• Improve the platform — analysing aggregated usage patterns and model performance to make the product better.
• Train and improve our AI models — we may use transcripts and call data to improve our speech recognition, classification, and response generation models. We will not use your data for this purpose if your Customer account has opted out. We do not use data obtained through Google Workspace APIs to develop or train generalised AI or ML models.
• Communicate with you — sending product updates, support responses, and account notifications.
• Ensure security — monitoring for abuse, fraud, and unauthorised access.
• Meet legal obligations — retaining records as required by law.

We do not sell your personal data to third parties, and we do not use it for advertising.

4. Legal basis for processing (GDPR)

If you are in the UK or European Economic Area, we rely on the following legal bases:

• Contract — processing necessary to provide the service you or your employer has contracted for.
• Legitimate interests — improving the platform, ensuring security, and communicating about the service.
• Legal obligation — where we are required to retain or disclose data by law.
• Consent — where we have asked for and you have given consent (for example, for optional analytics).

5. How we share your data

We share your data only as necessary to provide the service:

• Sub-processors — we use third-party service providers for infrastructure, AI processing, analytics, and customer support. All sub-processors are bound by data processing agreements and may not use your data for their own purposes. See the full list below.
• Your employer (the Customer) — your call recordings, transcripts, and performance data are accessible to your organisation’s account administrators.
• Integration partners — data is shared with the third-party tools you or your employer connects to Arcla (e.g. CRM, Slack), but only to the extent necessary to power those integrations.
• Legal requirements — we may disclose your data if required by law, court order, or to protect the rights and safety of Arcla, our customers, or others.
• Business transfers — if Arcla is acquired or merged, your data may transfer to the acquiring entity, subject to equivalent privacy protections.

Sub-processors

The following third-party organisations process personal data on our behalf. All are bound by data processing agreements. Where data is transferred outside the UK/EEA, we rely on UK International Data Transfer Agreements or EU Standard Contractual Clauses.

We review this list at least annually. To request our Data Processing Agreement (DPA), contact support@arcla.com.

6. Data retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations and resolve disputes. Call recordings and transcripts are retained according to the retention settings configured by your Customer administrator. You may request deletion at any time (see section 8).

7. Data security

We implement technical and organisational measures to protect your personal data, including:

• Encryption in transit — all data is transmitted over TLS 1.2 or higher.
• Encryption at rest — databases and object storage are encrypted at rest using AES-256.
• Access controls — production systems are access-controlled with multi-factor authentication and least-privilege principles. Access is logged and reviewed.
• Network security — our infrastructure is protected by Cloudflare’s web application firewall and DDoS mitigation.
• Audit logging — application and access logs are retained and monitored for anomalous activity.
• Vulnerability management — we conduct regular dependency and code scanning. Security findings are triaged and remediated according to severity.

No method of internet transmission is completely secure, and we cannot guarantee absolute security.

Reporting a vulnerability

If you discover a security vulnerability in our systems, please report it responsibly to security@arcla.com. We aim to acknowledge reports within 2 business days and will work with you to understand and address the issue. Please do not publicly disclose the issue until we have had a reasonable opportunity to remediate it.

8. Your rights (platform users)

If you are an Arcla user, depending on your location you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (subject to legal retention requirements).
• Restrict or object to certain processing.
• Port your data to another service.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at support@arcla.com. We will respond within 30 days. If you are in the UK or EEA and are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority (in the UK, the ICO at ico.org.uk).

9. Rights of third-party data subjects (prospects and call participants)

Arcla processes call recordings and transcripts on behalf of its customers (sales organisations). If you are a prospect, lead, or other individual whose voice or personal data was captured during a sales call processed by Arcla, the following applies to you.

Who controls your data?

The sales organisation that recorded the call is the data controller for your personal data. Arcla processes that data on their behalf as a data processor. The organisation’s own privacy policy governs how they use your data and should be your first point of contact.

Your rights

You have the same rights as described in section 8 — access, correction, deletion, objection, and portability. To exercise these rights:

1. Contact the organisation that recorded the call in the first instance. They have administrative tools to locate and delete your data within Arcla.
2. If you cannot identify or reach that organisation, or if you believe your request has not been handled appropriately, contact us directly at support@arcla.com. We will work with the relevant Customer to process your request within 30 days.

What data we hold

Your personal data may include your voice (in audio recordings), a transcript of your conversation, and any associated metadata such as the date and duration of the call. We do not hold your name, contact details, or other identifying information unless it was mentioned during the call or provided by the Customer via an integrated CRM.

Deletion

When a Customer deletes a call recording or transcript — whether at your request or as part of their own data retention policy — we permanently delete the associated data from our systems within 30 days, subject to any legal retention requirements.

10. Cookies

We use a small number of strictly necessary cookies to keep you logged in and maintain session state. We do not use advertising or tracking cookies. We use analytics cookies only with your explicit consent. For a full list of cookies we set, their purpose, and how to control them, see our Cookie Policy.

11. Changes to this policy

We may update this policy from time to time. We will post any changes on this page and, where changes are material, notify you by email.

12. Contact

Questions about this policy or your data should be directed to:

Third Frontier Ventures Ltd. trading as Arcla support@arcla.com