Privacy Policy

1. Who we are

iMatch (“iMatch”, “we”, “us”, “our”) is a broker-to-broker matchmaking platform operated by iMatch LLC, registered in Dubai, United Arab Emirates. This Privacy Policy explains what personal data we collect from real estate brokers and brokerages who use our service, how we use it, and your rights over it.

2. What data we collect

We only collect data that helps brokers match listings with inquiries faster:

• Account data — name, email, mobile/WhatsApp number, brokerage name, RERA/BRN number, role.
• Listing & inquiry data — property details, locations, budgets, bedroom counts, and other criteria you post into iMatch WhatsApp groups or our dashboard.
• Match activity — references to listings/inquiries you posted, matches surfaced to you, and which matches you acted on.
• In-app messages — the text, photos and documents you send to other brokers in iMatch Chat, and who you sent them to. In the app, only the people in a conversation can see it; authorised iMatch staff can open it only to handle a report or keep the service safe. Files are stored privately and open only through short-lived links.
• Stories and ratings — the photos, captions and listing tags you post as a story, which other brokers see for 24 hours, and the stars and comments you leave on another broker. A rating comment is shown only after our team has checked it.
• Copilot questions — what you ask iMatch Copilot and the answers it gives you.
• Reports and blocks — what you report and who you block, so our team can act on it.
• Communication metadata — timestamps and routing data for WhatsApp messages sent through our bot. We do not read or store the content of unrelated personal chats.
• Technical data — device, browser, IP address, and basic usage analytics for security and performance.

3. How we use it

• To match buyer inquiries with seller listings across the broker network.
• To send you WhatsApp and in-app notifications about new matches.
• To deliver your messages, stories and ratings, and to send you push notifications about them.
• To review reports of abusive or misleading content within 24 hours and remove it. When you report a message, our team can read that message and its files to decide on the report.
• To verify RERA/BRN status and keep the network broker-only.
• To improve matching quality, detect abuse, and operate the service.
• To contact you about your account, billing, and product updates.

4. Sharing your data

We never sell your data. We share it only in these limited cases:

• Other matched brokers — when your listing matches another broker's inquiry (or vice versa), the relevant ref number, criteria summary, and your contact handle are shared so the deal can move forward.
• Service providers — hosting, database, analytics, and WhatsApp Business API providers, all bound by data-processing agreements. These include OpenAI, which processes Copilot questions and listing text on our servers to write answers and summaries; Google Firebase, which delivers push notifications to your phone; Cloudflare, which stores photos and files; and Mapbox, which provides the maps on our website and in the Android app. To draw a map, your browser or phone sends Mapbox its map requests (which tiles to load), and Mapbox counts monthly active users. In the Android app Mapbox's optional telemetry is switched off, and the app does not collect your location for Mapbox.
• Legal requests — when required by law or to protect the rights and safety of users and the public.

5. Product analytics & cookies

We use Mixpanel, a third-party product-analytics provider, to understand how iMatch is used so we can improve it. Your analytics data is stored on Mixpanel's servers in the European Union. Mixpanel stores a random identifier in your browser's local storage rather than in a cookie of its own, and receives usage data such as your account ID, brokerage, pages viewed, and features used. We do not share listing contact details or message contents with Mixpanel.

Mixpanel also records session replays — a reconstruction of how a page was used, so we can see where the product is confusing or broken — and uses the clicks and scrolling within those recordings to build heatmaps. These recordings are masked at capture: all on-screen text and everything typed into a form is replaced with placeholder blocks before it leaves your browser, and images are not recorded. A replay therefore shows the shape of a page and where you clicked, not the names, prices, phone numbers or messages on it. Replays are stored in the European Union alongside the rest of your analytics data.

On our public website at imatch.ae — the marketing pages anyone can read without signing in — we also use Google Analytics 4 to see how many people find us and which pages they read. It does not run anywhere inside the signed-in product at app.imatch.ae, so your listings, inquiries, matches, contacts and messages are never seen by Google.

Google Analytics does use cookies, unlike Mixpanel above. On imatch.ae it sets two first-party cookies of its own, named _ga and _ga_<container>. They hold a random number so that a second visit from the same browser is counted as the same visitor coming back rather than a new person. They are not linked to your iMatch account and they hold no name, number or email address.

We run Google's Consent Mode v2 with advertising switched off by default: advertising storage, ad personalisation and ad-user-data sharing are all set to denied before any Google tag is allowed to run. In plain words — we count visitors, and that is all. No advertising cookies are set, no advertising profile is built about you, and nothing about your visit is passed to Google's advertising products.

Google Tag Manager is also present on that same public website. It is the container that loads and manages the tags described above; it is not an analytics product in its own right and collects nothing of its own on top of them.

6. WhatsApp messages

iMatch operates inside WhatsApp via the WhatsApp Business API. By using iMatch groups, you consent to our bot reading messages you post in those groups for the sole purpose of parsing listings, inquiries, and reference numbers. We do not access your personal WhatsApp chats. Group conversation content is processed on encrypted infrastructure and retained only as long as needed to deliver matches.

7. Data retention

Active listings are matched for 21 days; active inquiries are matched for 7 days. Match history is retained for 24 months for analytics and dispute resolution. You can request deletion of your account and associated data at any time — see Section 9.

8. Security

We use industry-standard encryption in transit (TLS) and at rest. Access to broker data is restricted to authorised iMatch staff on a need-to-know basis. Despite reasonable safeguards, no system is 100% secure — please use a strong password and report suspicious activity immediately.

9. Your rights

Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) you may:

• Access the personal data we hold about you.
• Correct inaccurate data or update outdated details.
• Request deletion of your account and personal data.
• Withdraw consent for marketing messages at any time.
• Export your listings, inquiries, and match history.

To exercise any of these rights, email privacy@imatch.ae. We respond within 30 days.

10. Children

iMatch is intended for licensed real estate professionals only. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

We may update this policy as the product evolves. Material changes will be notified via WhatsApp or email at least 14 days before they take effect. The “Last updated” date at the top of this page reflects the current version.

12. Contact

Questions about this policy or how we handle your data? Reach us at privacy@imatch.ae or via the contact page.