Legal
Effective date: May 1, 2026
HBA Compass is a school management Software-as-a-Service (SaaS) platform developed and operated by The HBA Company. This Privacy Policy explains how we collect, use, and protect personal information in connection with the HBA Compass platform.
By using HBA Compass, you agree to the practices described in this Policy. Questions or requests can be directed to support@thehbacompany.com.
School information
School name, postal address, board affiliation (CBSE/ICSE), and primary administrator contact details.
User data
Full name, email address, role/designation, phone number, date of birth, and gender for all staff accounts.
Student data
Name, class/section, date of birth, gender, attendance records, examination results and marks, and fee assignment/payment records — entered and managed by the school.
Parent data
Parent/guardian name, email, phone number, and linkage to student records (where parent portal is enabled by the school).
Usage data
Login timestamps, IP addresses, browser/device type, pages or features accessed, and activity logs — collected automatically for security and performance monitoring.
Payment data
Payments are processed by Razorpay. We do NOT store card numbers, CVVs, or bank account details. We retain only non-sensitive transaction metadata (ID, amount, status, date).
Service delivery
To provide, maintain, and improve the HBA Compass platform and its features.
Communication
To send important notices about your account, billing, feature updates, and policy changes.
Security & compliance
To detect and prevent fraud, unauthorised access, and abuse of the platform.
Analytics
To understand aggregate usage patterns and improve platform performance. We do not sell or share individual usage data with third parties for advertising.
We do not sell your personal data. We share data only with service providers who help us deliver the platform (e.g., Razorpay for payments, cloud hosting providers) and only to the extent necessary for those services.
All third-party processors are contractually bound to protect your data and may not use it for any purpose beyond the service they provide to us.
We retain school and user data for the duration of the subscription and for up to 12 months after termination, to allow for data export and legal compliance.
Upon written request, we will delete or anonymise your school's data within 30 days, subject to any legal obligations that require us to retain certain records.
We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.2+ in transit, role-based access controls, and daily automated backups.
Despite our best efforts, no method of internet transmission is 100% secure. We encourage you to use strong passwords and report any suspicious activity immediately.
Subject to applicable Indian data protection laws, you have the right to access, correct, or request deletion of your personal data. To exercise any right, contact support@thehbacompany.com. We respond within 30 days.
Access
Request a copy of the personal data we hold about you.
Correction
Request correction of inaccurate or incomplete data.
Deletion
Send a written deletion request to support@thehbacompany.com. Processed within 30 days subject to legal retention obligations.
Portability
Request your data in a machine-readable format for transfer to another service.
HBA Compass is a business-to-business platform. Student data — including data of minors — is entered and managed exclusively by the contracting school institution. The school acts as the data controller and is responsible for obtaining any required parental consent before uploading minor student data.
The HBA Company complies with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDPA).
The HBA Company may modify this Privacy Policy at any time. For material changes, school administrators will be notified via email at least 14 days before the change takes effect. Non-material updates will be reflected in the updated Effective Date.
Continued use of HBA Compass after any modification constitutes acceptance of the updated Policy.
For privacy-related questions, requests, or complaints, please contact:
HBA Compass by The HBA Company (2026)