Privacy Policy

Last updated: 24 July 2026

This Privacy Policy explains how ArzaLink handles data when a merchant connects a marketplace account and uses our platform. ArzaLink is operated by PT Arzana Teknologi Nusantara ("ArzaLink", "we", "us").

ArzaLink is a business tool used by merchants ("you") to manage their own marketplace stores. When we access data from a marketplace such as TikTok Shop, we do so on your behalf and under your authorization, solely to provide the features you use. In respect of your store data, you are the controller and we act as your processor.

1. Information we access

Through official marketplace APIs, and only after you authorize the connection, ArzaLink may access:

• Order data — order identifiers, status, line items, quantities, and amounts, plus the shipping details attached to an order (recipient name, phone number, and address) as provided by the marketplace for fulfilment.
• Product data — listing and product information such as titles, SKUs, variants, and prices.
• Inventory data — stock levels per product and warehouse.
• Account & authorization data — the store/shop identifiers and the access tokens or credentials needed to call the marketplace API on your behalf.

We access only what is necessary to provide order management, product synchronization, inventory management, and analytics. We do not collect payment card numbers, and we do not access data unrelated to operating your store.

2. How we use it

• To display and manage your orders, products, and inventory across connected marketplaces.
• To synchronize information you request between your systems and the marketplace.
• To produce sales and fulfilment analytics for your own store.
• To operate, secure, and troubleshoot the service.

We do not sell your data, and we do not use it for advertising or share it with third parties for their own purposes.

3. How we store and protect it

• Data is stored on secured servers and transmitted over encrypted connections (HTTPS/TLS).
• Marketplace credentials and access tokens are stored encrypted at rest (AES-256) and are never shown back in plain text.
• Each merchant's data is isolated; one merchant can never read another merchant's data.
• Access to production data is restricted to authorized personnel for operating the service.

4. Sharing

We share data only:

• with the marketplace itself, as required to perform the actions you request through its official API;
• with infrastructure providers (e.g. hosting) that process data on our behalf under confidentiality obligations, solely to run the service;
• where required by law or to protect rights and safety.

5. Retention and deletion

We retain your store data for as long as your account is connected and as needed to provide the service. When you disconnect a marketplace or close your account, the associated access tokens are revoked and your data is deleted or anonymized within a reasonable period, except where retention is required by law. You may request deletion of your data at any time by emailing admin@arzalink.id.

6. Your rights

Subject to applicable law, you may request to access, correct, export, or delete the data we hold on your behalf, or to withdraw a marketplace authorization. To exercise any of these, contact us at admin@arzalink.id.

7. International use

ArzaLink operates from Indonesia. If you access the service from elsewhere, your data may be processed on servers located in the regions where our infrastructure runs, protected by the measures described above.

8. Changes

We may update this policy as the platform evolves. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to connected merchants.

9. Contact

PT Arzana Teknologi Nusantara — operator of ArzaLink.
Email: admin@arzalink.id