Effective Date: April 1, 2026 · Last updated: May 13, 2026
CardOutpost is operated by Arcade Processing LLC ("we," "our," or "us"), a company incorporated under the laws of Delaware, USA. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have in relation to it. Please read this policy carefully. By using CardOutpost (the "Platform"), you acknowledge that you have read and understood this Privacy Policy.
We collect information in several ways depending on how you interact with our Platform:
Account Information
Payment Information
KYC & Verification Data
Usage & Activity Data
Device & Technical Data
Cookies & Tracking Technologies
We use the information we collect for the following purposes:
We work with trusted third-party services to operate the Platform. Each has their own privacy practices:
We are not responsible for the privacy practices of these third-party services and encourage you to review their respective privacy policies.
We use the following types of cookies and tracking technologies on the Platform:
You can disable non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of the Platform. For advertising pixels specifically, you may also opt out through Meta's and TikTok's ad preference settings in their respective applications.
Global Privacy Control (GPC). We honor the Global Privacy Control signal as a valid opt-out request under the California Consumer Privacy Act (CCPA) and other applicable U.S. state privacy laws. When we detect a GPC signal from your browser, we treat it as a request to opt out of the sale and sharing of your personal information for cross-context behavioral advertising, including the use of the Meta Pixel and TikTok Pixel for that browser and any account linked to it. You do not need to be a verified user for us to honor the signal.
User names and addresses are screened at onboarding and on an ongoing basis against the OFAC Specially Designated Nationals (SDN) List and consolidated sanctions lists, as well as politically exposed persons (PEP) and adverse media databases. Screening occurs at signup, KYC completion, and continuously thereafter. This screening is performed for AML compliance and fraud prevention. Confirmed sanctions matches result in immediate account suspension and reporting to OFAC where required.
We retain your personal information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.
Transaction records, KYC files, sanctions and PEP screening results, and AML escalation logs are retained for a minimum of 5 years from the date of the relevant transaction or account closure, whichever is later, to comply with financial, tax, and AML regulations. Aggregated, anonymized analytics data may be retained indefinitely.
Where a user submits a deletion or erasure request under applicable privacy law (e.g., CCPA, GDPR), we honor the request only to the extent it does not conflict with our regulatory recordkeeping obligations. AML, KYC, and sanctions records are retained for the full statutory period regardless of any deletion request, and the user is informed of this carve-out in writing.
We take the security of your personal information very seriously and implement appropriate technical and organisational measures to protect it, including:
No method of transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
Breach notification. If we confirm a data breach affecting your personal information, we will notify you and applicable regulators without undue delay and, where feasible, within seventy-two (72) hours of confirming the breach. The notice will describe the categories of personal information affected, the steps we have taken in response, and any actions you can take to protect yourself. Where applicable law requires a shorter notification period or different content, we will comply with that law.
Depending on your jurisdiction, you may have the following rights with respect to your personal information:
To exercise any of these rights, please contact us at support@cardoutpost.com. We will respond to your request within 30 days.
CardOutpost is not intended for use by anyone under the age of 18 and we are very strict about our minor policy. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at support@cardoutpost.com and we will take steps to delete that information promptly.
CardOutpost is operated from the United States. If you are located outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. By using the Platform, you consent to this transfer. Where required by law, we will implement appropriate safeguards for cross-border transfers of personal data.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will update the "Last updated" date at the top of this page when we do so. For material changes, we may notify you by email or by posting a prominent notice on the Platform. Your continued use of the Platform after any changes take effect constitutes your acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: support@cardoutpost.com
Arcade Processing LLC
2810 North Church Street
Wilmington, DE 19802, USA