Privacy

Privacy Policy

Last updated: pending publication

Draft — pending final legal review

This page describes how the platform works today and is published ahead of launch so our consent notices have somewhere to point. The final, binding wording is under legal review and will replace this draft before public launch.

Who we are and who's accountable

Accountability (Principle 1)

matchclose operates this marketplace and is accountable for the personal information it holds.

Questions, access requests, and privacy concerns go to our privacy contact — the email address will be published here before public launch.

What we collect

Limiting Collection (Principle 4)

Account details: the email address and password you sign up with.

Your contact card: name, email, phone, and optionally where you live and a street address — stored privately and only ever shared as described below.

Listing preferences: the anonymized, city-level profile you post (budget band, intent, area) — deliberately non-identifying and public by design.

Agent details (for agents): licence number and jurisdiction, checked against the public regulator register.

Chat messages between a buyer and an agent after a connection is made.

Credit and transaction history for the actions you take on the platform.

Content you submit (such as stories or reviews): published anonymously, with the link between you and what you wrote stored privately and never shown.

Anonymous, cookieless usage and page-performance measurement, provided through our hosting provider's built-in analytics. It sets no cookies and never carries your contact details; query parameters and the entire URL fragment are stripped before measurement is sent, except a fixed list of our own link tags, such as which ad network and campaign a link belongs to. Ad click identifiers are always removed.

Product usage analytics and session replay, provided by PostHog: also cookieless — no persistent identifier is stored in a cookie or on your device — and never carries your name, contact details, or precise location. Session replay masks all on-screen text and everything you type; only pseudonymous, structural interaction data (such as which pages and buttons you use) is captured.

Ad campaign attribution: if you arrive from one of our ads while signed out, a first-party cookie (mk_acq) remembers which ad network and campaign it was, for 30 days. It holds only those two codes and no identifier. The first time you are signed in on that browser, the cookie is deleted; if your account is less than 7 days old, we first store the two codes privately with it, to learn which ads bring buyers, and keep that record until the account is deleted. Our analytics also see the two codes in the address of the page you arrived on, and once you are signed in, our product-analytics provider (PostHog) may link them to your account's pseudonymous analytics profile. We never send them to ad platforms. You can turn ad attribution off under “Your privacy choices” below.

Technical logs needed to run the service securely. We do not log your contact details.

Why we collect it

Identifying purposes (Principle 2)

To operate the marketplace: letting you post an anonymized profile, letting agents bid, and running the connection once you accept a bid.

Stated plainly: your contact details exist so that the agent whose bid you accept can pay to connect with you — by private chat by default, or by receiving your contact card if your listing is set that way — and nothing reaches an agent before you accept.

To keep the platform secure, prevent abuse, and meet our legal obligations.

When we disclose it

Consent / Limiting use & disclosure (Principles 3 & 5)

To an agent whose bid you accept, once they pay to unlock — never before. In the default mode this opens a private chat with you; if your listing is set to reveal contact details on unlock, your card is disclosed at that point instead.

When you choose to share your contact card inside a chat, to that counterparty.

We do not sell your personal information.

To the service providers that run the platform for us — our database and hosting providers, and PostHog, our product-analytics and session-replay subprocessor — under contract and only to operate the service.

Where your data lives

Transparency for meaningful consent

Our database and hosting run on infrastructure located in the United States. Storing data outside Canada means it can be subject to the laws of that country — we disclose this so your consent is informed. (We confirm the exact region before public launch.)

PostHog, our product-analytics and session-replay subprocessor, also runs on infrastructure in the United States (co-located with the same region as our database). Only the pseudonymous, PII-free behavioral data described above — never your name, contact details, or precise location — is transferred there, outside Canada, subject to that country's laws.

Your consent, and how to withdraw it

Consent (Principle 3)

You consent when you create an account and, for the sensitive step of disclosing your contact details, again through explicit actions: accepting a bid — where the confirmation states what that shares before you confirm — and choosing to share your contact card in a chat.

You can withdraw as you go: edit your contact card, archive a listing so it stops accepting bids, or permanently delete a story or review you posted. Those withdrawal paths are as easy as the action that started them.

Account data export and full account deletion are support-mediated at launch — contact us and we'll action it.

Your privacy choices

Consent (Principle 3)

Ad attribution can be turned off for this browser here. While it is off, we do not set the ad attribution cookie (mk_acq), we delete it if it is already there, and we do not store an ad network or campaign in our own record of your account from this browser.

Turning it off does not remove a record we already stored with your account; that record is kept until you delete your account.

We honor Global Privacy Control as an opt-out from ad attribution: while your browser sends that signal, ad attribution is off, as if you had turned it off here.

Turning it off stores a first-party cookie (mk_optout) on this browser for 365 days. It holds only that choice, the same for everyone, and no identifier. When it expires, or if you clear this site's cookies, ad attribution is on again; the choice does not carry over to another browser or device.

It does not change our usage analytics, which can still see the ad network and campaign code in the address of the page you arrived on, as described above.

If your browser's Global Privacy Control is on, ad attribution stays off either way.

How long we keep it, and how we protect it

Limiting retention / Safeguards (Principles 5 & 7)

We keep personal information only as long as needed for the purposes above or as the law requires.

Your contact details live in a separate, access-controlled store — not in the public part of the system — and every time a contact is revealed, we write an audit record. Access is limited to the specific, audited paths described here.

Your rights

Access / Accuracy / Challenging Compliance (Principles 9, 6 & 10)

You can ask to see the personal information we hold about you, ask us to correct it, and challenge how we've handled it, by contacting our privacy contact.

We'll respond within the timeframe the law requires.

Changes to this policy

Openness (Principle 8)

When this policy changes materially, we'll update it here and revise the date above.

See also our Terms of Service.