How we collect, use, protect, and give you control over your personal information when you use the Hostbala platform.
This Privacy Policy explains how Hostbala LLC ("Hostbala", "we", "us", or "our") collects, uses, stores, shares, and protects your personal information when you visit hostbala.com, create an account at portal.hostbala.com, or subscribe to and use any of our managed SaaS platform solutions.
We are committed to transparency and data protection. By using our services, you consent to the practices described in this policy.
We collect the following categories of personal information:
Configure, operate, and support your managed platform as part of your subscription.
Authenticate your identity, manage your subscription, and provide portal access.
Process payments, issue invoices, handle renewals, and manage failed payment retries.
Send onboarding steps, platform updates, security alerts, billing notices, and support responses.
Analyze usage patterns, find bugs, and improve performance, features, and reliability.
Comply with applicable laws, respond to lawful authority requests, and enforce our Terms.
If you are in the EEA or a similar jurisdiction, we rely on the following legal bases:
Processing necessary to deliver your subscription and manage your account.
Compliance with applicable laws such as financial record-keeping and lawful authority requests.
Fraud prevention, security monitoring, service improvement, and direct marketing of our own products (with opt-out).
For optional cookies and marketing communications. You may withdraw consent at any time.
We do not sell or rent your personal data. We share it only as follows:
All data between your browser and our servers is encrypted via TLS (HTTPS).
Sensitive data stored in our systems uses AES-256 encryption or equivalent.
Customer data is restricted to authorized Hostbala personnel on a need-to-know basis. All access is logged.
Your platform data is backed up regularly to prevent data loss.
We monitor for suspicious activity, unauthorized access, and potential vulnerabilities continuously.
We notify you of any breach affecting your personal data as required by law, without undue delay.
Depending on your location, you may have the following rights over your personal data:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your data, subject to legal retention obligations.
Receive your data in a structured, machine-readable format to transfer to another service.
Object to processing based on legitimate interests, including direct marketing.
Limit how we use your data while a dispute or review is in progress.
To exercise any right, contact privacy@hostbala.com. We respond within 30 days. Identity verification may be required.
We use cookies and similar technologies on our website and client portal:
Manage cookies through your browser settings. We do not use cookies for third-party targeted advertising.
The Hostbala platform and portal are intended for businesses and adults (18+). We do not knowingly collect personal information from individuals under 18.
If you subscribe to our Schools platform (e.g., student management system), you — as the data controller — are responsible for complying with all applicable laws on student data collection, including obtaining necessary parental consents. Hostbala acts as a data processor in this context and processes student data only on your behalf and per your instructions.
If you believe we have inadvertently collected data from a minor, contact privacy@hostbala.com and we will delete it promptly.
California residents have the following additional rights:
Request disclosure of categories and specific pieces of personal data collected in the past 12 months, including sources, purposes, and third-party sharing.
Request deletion of personal information we collected, subject to exceptions such as completing transactions or legal obligations.
We will not discriminate against you for exercising your CCPA rights — no denial of services, different pricing, or reduced service quality.
Hostbala does not sell personal information as defined by the CCPA. No opt-out is needed.
Submit CCPA requests to privacy@hostbala.com or via our contact form.
Hostbala is based in the United States. If you access our services from outside the US, your data may be transferred to and processed in the US or other countries where our infrastructure providers operate.
When transferring personal data of EEA residents to third countries, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.
Our website and platforms may link to third-party websites or services (e.g., payment processors, social media, integration partners). This Privacy Policy does not apply to those external services. We encourage you to review their own privacy policies.
Hostbala is not responsible for the privacy practices or content of third-party sites.
We may update this Privacy Policy periodically. For material changes we will:
Continued use of our services after the effective date constitutes acceptance of the updated policy.