Privacy Policy

In short: ARCR Tools is a work app for ARCR staff and partners. It keeps almost nothing on your phone, you sign in with your Google account, and the panel records what it needs to keep accounts and customer systems secure. We do not sell personal information, show ads, or track you.

Who we are

ARCR Technologies Private Limited ("ARCR", "we") runs tools.1radius.com, the operations panel our staff and partners use to look after the internet service systems we manage for our customers, and the ARCR Tools app, which opens that panel on a phone. Both are business tools for people ARCR has given a panel account. Neither creates accounts or is meant for the general public.

What the app keeps on your phone

• Whether you have turned on the app lock.
• While you are signing in or connecting Google, a random one-time secret that proves the sign-in was started by your phone. It is deleted as soon as it is used, and thrown away if it is not used within ten minutes.
• The panel's sign-in cookie, kept by the phone's web view the same way a browser keeps one.

Nothing else. The app does not read your contacts, location, photos or files, has no advertising identifiers, and contains no analytics, tracking or advertising software.

Face ID, Touch ID and fingerprint

If you turn on the app lock, your phone's operating system checks your face or fingerprint and tells the app only whether the check passed. Your biometric data never leaves your phone's secure hardware and is never sent to us.

Signing in with Google

You sign in on Google's own pages, in your phone's browser; we never see your Google password. Google tells us your name, your email address and that the address is verified. We use the email address only to find your panel account. If there is no account for it, sign-in is refused; we do not create accounts from it.

Connecting Google for the server credentials sheet

Some pages read server credentials from a Google Sheet owned by ARCR. To read it, the app asks Google, with your permission, for a read-only Google Sheets token (the "See all your Google Sheets spreadsheets" permission). We check the token with Google, hold it on our server for at most two minutes while it is handed to the app, and the app then keeps it only until you close the app or Google expires it (about an hour). It is used only to read that sheet, is never written to our database and is never shared. You can withdraw the permission at any time at myaccount.google.com/permissions.

ARCR Tools' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What the panel records about you

• Your account: name, email address, role, and a profile photo if you upload one.
• Sign-ins and sessions: when you sign in, your IP address and the country it belongs to, and the kind of device or browser. This keeps accounts secure, shows colleagues who is online, and signs out sessions left idle for four hours.
• Actions on customer systems: commands run, updates, installs and restores, with who did them and when, kept as an audit trail.
• Web server logs: the standard record of IP address, time and page requested.

Business information shown in the app

The panel holds ARCR's business records: our customers, their servers and network equipment, support tickets and accounts. ARCR processes these to provide its services to those customers. The app shows each record only to accounts whose role allows it, and adds nothing to them beyond what you enter.

How we use information

To sign you in and keep your account secure; to run the panel and the services ARCR provides to its customers; to keep an audit record of changes to customer systems; and to diagnose problems. We do not use it for advertising or profiling.

Who we share it with

We do not sell or rent personal information. We share it only with Google, to sign you in and, when you connect it, to read the credentials sheet; with the hosting provider that runs the panel's servers; and with authorities when the law requires it.

Security

All traffic is encrypted with HTTPS. Access is limited by role. A sign-in started from the app is completed with a one-time code that works only together with the secret your phone holds, and expires within two minutes. Sessions end after four hours without activity, and the app can be locked with your face or fingerprint.

How long we keep it

Account details are kept while you have an account and removed when ARCR removes your access. Sign-in, session and audit records are kept for as long as security, audit and legal obligations need them, then deleted. What the app keeps on your phone is deleted when you uninstall it.

Your choices and rights

You can turn the app lock on or off, sign out from the panel's menu, uninstall the app, and withdraw Google's permission as described above. To see, correct or delete the personal information we hold about you, or to have your account removed, email privacy@oneradius.com. We reply within 30 days, in line with applicable law, including India's Digital Personal Data Protection Act, 2023.

Children

ARCR Tools is a work app for ARCR staff and partners and is not intended for children.

Changes to this policy

When this policy changes, we update the date at the top of this page.

Contact

ARCR Technologies Private Limited
privacy@oneradius.com