ARCH 360 Pvt. Ltd. (“ARCH 360”, “we”, “us”, or “our”) operates ARCH 360 ERP, a business management platform for architecture, interior design, construction workflows, project management, team management, finance, marketing, communication, and related operations.
This Privacy Policy explains how we collect, use, store, protect, disclose, and delete information when you visit our website https://arch360.com.pk or use ARCH 360 ERP (including https://new.arch360.com.pk) and its integrated services such as TikTok.
1. Information We Collect
Account information
- Name, email address, phone number
- Employee profile details, job title, department
- User role, permissions, login and authentication data
Business information entered into the ERP
- Projects, clients, invoices, documents
- Attendance, time-tracking, staff requests
- Payroll-related and performance information
- Internal communications and marketing records
- Media files and captions prepared for social publishing
Technical information
- Device/browser type, IP address, timestamps, security logs
- Cookies, local storage, and similar technologies needed for login and session security
Social / TikTok information (only if you connect an account)
When an authorized user voluntarily connects TikTok (or another platform), ARCH 360 ERP may receive only the data and permissions the user grants through that platform’s OAuth / authorization flow — for example account identifiers, basic profile fields, and tokens required to create or manage content as permitted by the approved TikTok products and scopes.
2. How We Use Information
- Operate, secure, and improve ARCH 360 ERP
- Authenticate users and enforce role-based access
- Manage projects, clients, finance, HR, and marketing workflows
- Provide customer / internal support
- Connect authorized third-party accounts and publish content when the user requests it
- Prevent fraud, abuse, and unauthorized access
- Comply with law and respond to lawful requests
We do not sell personal information.
3. TikTok Integration
ARCH 360 ERP includes an internal social publishing tool. Authorised ARCH 360 marketing staff use it to publish ARCH 360's own project videos to ARCH 360's own TikTok account using TikTok Login Kit and the Content Posting API. The tool is not offered to the public.
TikTok data we access and why
| Scope / data | What we receive | Why we use it |
|---|---|---|
| user.info.basic | TikTok open ID, display name and avatar of the connected account | To show which TikTok account is connected before anything is posted |
| video.upload | Permission to send a video to the connected account's TikTok inbox as a draft | So staff can finish and post the video in the TikTok app |
| video.publish | Permission to publish a video, plus creator info (privacy options, interaction settings, max duration) and publish status | To publish the video the user selected, with the privacy and interaction settings the user chose |
| Access / refresh tokens | OAuth tokens issued by TikTok | To make the API calls above on behalf of the connected account |
- Connecting TikTok is optional, and a staff member must authorise it on TikTok's own consent screen.
- We use TikTok data only to show the connected account and to publish the content the user chose. Nothing is posted without the user's action.
- We do not sell, rent or share TikTok data with advertisers or data brokers, and we do not use it for profiling or ad targeting.
- We do not read, download or store other users' TikTok content, followers or messages.
- Tokens are stored on our own server, are visible only to the system and are never shown in the interface.
- TikTok is an independent platform. ARCH 360 is not affiliated with, operated by or endorsed by TikTok.
- Users must also follow TikTok's Terms of Service, Community Guidelines and Developer Terms.
4. Other Third-Party Services
We may use hosting, authentication, storage, communication, analytics (if enabled), and social platforms such as Facebook, Instagram, LinkedIn, Google services, and TikTok. Those providers process data under their own terms and privacy policies.
5. Information Sharing
We may share information only with:
- Authorized employees/admins according to role permissions
- Service providers who help us operate the ERP (under confidentiality/security expectations)
- Third-party platforms when a user authorizes an integration
- Professional advisers where reasonably necessary
- Authorities when required by applicable law
- Parties needed to protect rights, safety, security, or property
6. Role-Based Access
ARCH 360 ERP uses role-based permissions. Sensitive employee, financial, payroll, project, and client information is restricted to authorized users. Users must not attempt to access data outside their role.
7. Data Security
We use reasonable technical and organizational measures (access controls, authenticated sessions, transport security where configured, and operational safeguards) to protect information. No online system can guarantee absolute security.
8. Data Retention
We retain information only as long as reasonably needed to provide the service, keep business records, meet legal/accounting obligations, resolve disputes, and protect security. When no longer required, information may be deleted or securely disposed of.
TikTok authorization tokens are retained while the connection remains active and are removed or invalidated when disconnected, revoked, or expired.
9. Account & Data Deletion
You may request deletion of your ARCH 360 ERP account or personal information by emailing:
info@arch360.com.pk with subject line “Data Deletion Request — ARCH 360 ERP”.
Please include:
- Full name
- Account email
- Organization / employer name (if applicable)
- What you want deleted (account, personal profile data, and/or TikTok connection data)
We will verify the request and respond within a reasonable period (typically within 30 days). Some records may be retained where required for legal, employment, accounting, security, or contractual reasons. Disconnecting TikTok does not automatically delete historical ERP business records you created.
10. Your Rights
Depending on applicable law, you may have rights to:
- Access personal information we hold about you
- Correct inaccurate information
- Request deletion or restriction (subject to legal exceptions)
- Withdraw consent for optional integrations such as TikTok
- Object to certain processing where applicable
Contact info@arch360.com.pk to exercise these rights.
11. Cookies & Similar Technologies
We use cookies/local storage for authentication, security, preferences, and core functionality. Disabling them may break login or session features.
12. Children’s Privacy
ARCH 360 ERP is a business service and is not directed to children. We do not knowingly collect personal information from children where prohibited by law.
13. International Processing
Information may be processed or stored via service providers in Pakistan or other countries. We take reasonable steps to protect information during such processing.
14. Changes
We may update this Privacy Policy. The updated version will be posted on this page with a revised “Last updated” date. Continued use of ARCH 360 ERP after changes means you acknowledge the updated policy.
15. Contact Us
ARCH 360 Pvt. Ltd.
Office C15–C19, Arbab Tower, Nasir Bagh Road, Peshawar, Pakistan
Office No. 01, Silver City, G-11 Markaz, Islamabad, Pakistan
Ibne Abi Khalid – Bryman Dist 23641, Jeddah, Kingdom of Saudi Arabia
Email: info@arch360.com.pk
Phone: +92 331 3333360
Website: https://arch360.com.pk/
ERP: https://new.arch360.com.pk
Related: Terms of Service