Privacy Policy

HABB One is operated by HABB Global (Pvt) Ltd (“HABB Global”, “we”, “us”). This policy explains how we collect, use, and safeguard information when you use the HABB One web application, admin console, and owner portal (the “Service”).

• Account data: name, work email, password hash, role, and company association.
• Business data entered by you: customer records, quotes, orders, invoices, employee records, schedules, and time entries — entered by your company’s users to operate the Service.
• Usage data: log-in timestamps, IP address, browser type, and audit-trail events (who did what and when) for security and support purposes.
• Cookies: session cookies required for authentication and to keep the kiosk lock/session state; we do not use third-party advertising cookies.

• To provide, maintain, and secure the Service.
• To authenticate users and enforce access control between tenants.
• To generate the reports, exports, and documents you request (invoices, payroll, PDFs, etc.).
• To send transactional emails (login codes, invoices, account notices) — never marketing without consent.
• To provide customer support and diagnose technical issues.

Your company (the “Customer”) is the data controller for the business and employee data it enters into the Service; HABB Global acts as the data processor. Data is processed under the Customer’s instructions as set out in our Terms & Conditions.

Data is stored on secure, access-controlled servers with daily backups. All connections are encrypted in transit (TLS). Sensitive actions are recorded in an audit trail. Support staff access to a tenant’s data (“owner impersonation”) requires an explicit, time-limited confirmation code sent to the Customer by email — it is never granted silently.

We do not sell personal data. We only share data with subprocessors that help us run the Service (e.g. hosting, database, email delivery, PDF generation) under confidentiality obligations, or where required by law. Enterprise customers may opt in to two-way sync with third-party accounting platforms (Bexio, Abacus, AbaNinja) — this only happens if explicitly configured by the Customer.

We retain Customer Data for as long as the subscription is active. After termination, data remains available for export for 30 days and is then deleted, except where retention is required by law (e.g. financial records for statutory retention periods).

Depending on your jurisdiction, you may have the right to access, correct, export, or request deletion of your personal data. Employees should raise such requests with their employer (the Customer), who controls the underlying records; employers can contact us directly for platform-level requests at support@habbglobal.com.

The Service is intended for business use by adults and is not directed at children. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice before taking effect.

Questions about this policy or a data request can be sent to support@habbglobal.com.