Privacy Policy
Last updated October 12, 2026
This Privacy Policy explains how AtriumKit (“AtriumKit”, “we”, “us”) handles information through AtriumKit: the Chrome extension, the dashboard at app.atriumkit.com, demos we host at atriumkit.com, demos embedded on other websites, and this website (together, the “Services”).
The short version
- The extension only captures while you are recording, and only the tabs you record.
- Sensitive text it detects (emails, phone numbers, names in profile-like elements, personal form fields) and any area you mark is blurred in your browser before a screenshot is stored or uploaded.
- Demos you publish can be seen by anyone with the link, or anywhere you embed them.
- Demo analytics use a random identifier, not advertising cookies.
- We do not sell personal information or use advertising trackers.
1. Scope and our role
For your account, billing and our website, we decide how information is used. For content you create in AtriumKit (recordings, demos) and for information your demos collect from viewers (analytics and leads), we act on behalf of the workspace that owns the demo. If you viewed a demo and have questions about it, contact the company that shared it; we will help them respond.
2. Information we collect
Information you give us
- Account: your name, email address and password (stored only as a salted hash).
- Workspace: workspace name, team members and invitations, roles, folders and themes (including logos you upload).
- Billing: plan, seat count and subscription status. Card details are entered on Stripe’s pages and handled by Stripe; we receive only limited details such as the card brand, last four digits and expiry.
- Support: what you send us when you contact us.
Content you create
Recordings and demos: screenshots, page addresses and titles, the text and position of elements you clicked or that were visible, tooltip copy, edits, blur areas, settings and the published versions of your demos. We keep the unedited capture of each screen privately so you can change edits later; only the edited version is published.
Information collected automatically
When you use the dashboard we process technical information such as your IP address, browser and device type to keep you signed in, secure the Services (for example, by limiting repeated sign-in attempts) and fix problems.
3. The Chrome extension
- The extension does nothing on a page until you start a recording, and stops when you click Done or Discard.
- While recording, it captures screenshots of the tab you record (or the active tab of the window, if you choose “Whole window”), the page address and title, where you click, labels of the elements you interact with, visible text (so you can edit it later), and text you type into fields you then click away from. It never reads password fields, payment card fields or one-time codes.
- Sensitive text it detects and any “Blur area” you draw are pixelated in your browser before the screenshot is saved. You can review, remove or discard every step before anything is uploaded.
- Recorded steps stay in the extension’s storage on your device until you open them in the editor or discard them.
- The extension stores a sign-in token so it can upload recordings to your workspace.
Automatic blurring helps, but it cannot recognise every kind of personal information. Review your steps before publishing, and use the editor’s blur tool for anything it missed.
4. People who view demos
When someone views a demo (on atriumkit.com or embedded on another site) we record, for the demo’s owner:
- Views, steps or screens seen, hotspot and button clicks, and whether the demo was completed.
- A random visitor identifier kept in the browser’s local storage and a per-visit identifier, the referring website’s domain, whether the demo was embedded, and an approximate country derived from the request. We do not store IP addresses with analytics.
- If the demo asks for it (an email gate or a lead form): the email address and any other details the viewer enters, such as name, company or phone number. These go to the demo’s owner and, if they set it up, to their CRM.
5. How we use information
- Provide the Services: turn recordings into demos, host and display them, and show analytics and leads to their owners.
- Run your account and workspace, process payments and send service messages.
- Keep the Services secure, prevent abuse and fix problems.
- Understand and improve how the Services are used, in aggregate.
- Comply with law and enforce our Terms.
6. How we share information
- The public, as you choose: published demos are visible according to their access setting (public, unlisted or email gate).
- Your workspace: members of a workspace can see its demos, analytics and leads according to their role.
- Service providers: Cloudflare (hosting, database and storage), Stripe (payments) and Google Fonts (typefaces loaded by our pages). They process information only to provide their services to us.
- Your CRM: if a workspace admin adds a webhook, new leads are sent to that address.
- Legal and safety: when required by law, or to protect people, the Services or our rights.
- Business changes: as part of a merger, acquisition or sale of assets, under this policy’s protections.
7. Cookies and local storage
- The dashboard uses one essential cookie to keep you signed in.
- The player stores a random visitor identifier in local storage, and an access token in session storage after a viewer passes an email gate.
- We do not use advertising or cross-site tracking cookies.
8. How long we keep information
We keep account and workspace information while your account is active. Deleting a demo removes its screens and published versions from our storage; deleting a lead removes it from your workspace. Analytics are kept while the demo exists. When you close your account we delete or anonymise your information within a reasonable period, except where we must keep it for legal, tax or security reasons. Billing records are kept as required by law.
9. Your choices and rights
You can update your account details in the dashboard, and delete demos and leads at any time. Depending on where you live, you may also have the right to access, correct, export or delete personal information, or to object to or restrict how we use it. Email privacy@atriumkit.com and we will respond within the time the law requires. Viewers of a demo can contact the company that shared it, or us.
10. Security
We use encryption in transit, hashed passwords, access controls and private storage for unpublished content. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Children
The Services are for businesses and are not directed to children under 16. We do not knowingly collect their information.
12. Changes to this policy
We will update this page when our practices change, and notify account holders of material changes by email or in the dashboard before they take effect.
13. Contact us
Questions or requests: privacy@atriumkit.com.