Privacy Policy

1. Introduction

MatchMade ("we," "our," or "us") operates the MatchMade professional real-estate matching platform accessible at gomatchmade.com (the "Platform"). This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.

By creating an account or using the Platform, you agree to the practices described in this policy. If you do not agree, please do not use the Platform.

2. Information We Collect

2.1 Information you provide directly

• Account information — name, email address, password, and role (Owner, Broker, Agent, or Client) when you register.
• Professional profile — brokerage affiliation, PRC/PRB license number (optional), contact details, and profile photo.
• Listings — property details, descriptions, photos, pricing, and location information you submit.
• Requirements — buyer or tenant search criteria you enter to participate in matching.
• Communications — messages, deal-room notes, documents, and any other content you exchange through the Platform.

2.2 Information collected automatically

• Log data — IP address, browser type, operating system, pages visited, and timestamps.
• Device information — hardware model, unique device identifiers, and browser settings.
• Usage data — features used, search queries, clicks, and session duration.
• Cookies and similar technologies — session tokens required for authentication, and analytics cookies (you may opt out of analytics cookies in your browser).

2.3 Information from third parties

If you sign in using a third-party OAuth provider (e.g., Google), we receive your name, email, and profile photo from that provider in accordance with their own privacy policy.

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account and professional profile.
• Operate the matching engine — comparing your listings against buyer requirements to surface relevant matches.
• Facilitate introductions and deal-room communications between matched parties, subject to your disclosure choices.
• Send transactional emails — account verification, match notifications, disclosure requests, and security alerts.
• Detect and prevent fraud, abuse, and violations of our Terms of Service.
• Improve platform features through aggregate, anonymised analytics.
• Comply with applicable legal obligations.

We do not sell your personal information to third parties, and we do not use your listing or requirement data to train external AI models without your explicit consent.

4. Private Listings & Disclosure

MatchMade is designed around controlled disclosure. Private listings are matched by our engine but their details — address, photos, and broker identity — are never revealed to a matched party without your explicit approval. When you approve a disclosure request, the requesting party receives the details you have chosen to share, and a timestamped record of that event is stored in your deal room.

Location data for private listings is stored at city/region precision only. Exact GPS coordinates are never stored for private listings, and all EXIF metadata (including GPS tags) is stripped from uploaded photos before storage.

5. Sharing Your Information

We share personal information only in the following circumstances:

• With matched counterparties — limited profile information is shared only after you approve a disclosure request or initiate contact through the Platform.
• Service providers — infrastructure partners (Supabase for database and storage, Vercel for hosting, Resend for email) who process data on our behalf under data-processing agreements.
• Legal requirements — when we believe in good faith that disclosure is required by law, court order, or to protect rights and safety.
• Business transfers — if MatchMade is acquired or merges with another entity, your information may transfer to the successor as part of that transaction, subject to the same privacy commitments.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account, we begin a 30-day grace period after which your profile, listings, and associated personal data are purged from our live systems. Anonymised aggregate records and legal-hold data may be retained longer where required by law.

7. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security on our database so each user can only access their own data, and strict separation of service-role credentials from client-accessible API keys. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take it seriously.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request erasure of your personal data (subject to legal retention requirements).
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to certain processing activities.

To exercise any of these rights, contact us at privacy@gomatchmade.com. We will respond within 30 days. For users in the Philippines, we comply with the Data Privacy Act of 2012 (Republic Act 10173) and the rules of the National Privacy Commission.

9. Cookies

We use strictly necessary cookies to keep you logged in and maintain your session. We also use analytics cookies (via Vercel Analytics) to understand aggregate platform usage — these do not identify you personally. You can disable cookies in your browser settings, but some Platform features require session cookies to function.

10. Children's Privacy

The Platform is intended for professionals aged 18 and over. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us at privacy@gomatchmade.com and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will notify you by email or by a prominent notice in the Platform at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact our Privacy team: