Privacy Policy

Homematch Studio is operated by peak intelligence AG, Im Langacher 42, 8805 Richterswil, Switzerland. This policy describes how we handle data on studio.homematch.ch and within the Homematch Studio web application. It complies with the Swiss Data Protection Act (DSG). Studio is a B2B product intended for real-estate agencies, property managers, and landlords. The privacy policy that governs how we handle the personal data of tenants and applicants on the consumer-facing platform is available at homematch.ch/privacy.

Who This Policy Covers

This policy concerns personal data we process about agency users — the people who sign in to Homematch Studio on behalf of an agency, property management company, or landlord (account owners, agents, brokers, assistants, and other team members). It also explains the relationship between us and the agency when tenant or applicant data is processed through Studio.

What We Collect About You

Account data — Name, work email address, password, role within your agency, profile photo, and language preference.

Company data — Agency name, commercial register number (UID), address, billing address, VAT number, contact phone, and logo.

Phone number — Optional. Used for two-factor authentication and so that tenants can reach you when you are listed as a contact person on a property.

Listing content — Property data, photos, floor plans, descriptions, and other media you upload or import to publish listings.

Pipeline and messaging data — Communications with applicants, internal notes, status changes, scheduled visits, and uploaded documents (e.g. dossiers received from applicants).

Subscription and billing data — Plan tier, invoice history, VAT status, and the reference IDs we receive from Stripe. Card numbers and bank details are processed directly by Stripe and never stored on our servers.

Team and access data — Invitations you send to colleagues, permission roles, last-login timestamps, and a list of active sessions for your account.

Usage data — How you interact with the application: pages visited, features used, search filters, and pipeline actions. Used to operate the product, debug issues, and improve usability.

Support data — Messages, screenshots, and metadata you share with us via support channels (in-app chat, email, contact form).

Technical data — Standard server logs: IP address, browser, operating system, device type, referrer, and timestamp.

Tenant and Applicant Data

When applicants reach out to one of your listings or send a dossier through Homematch, their personal data flows into your Studio workspace. In that context, your agency is the data controller for the applicant data shown in your pipelines, and we act as the data processor on your behalf.

We process applicant data only as instructed by you and as necessary to provide Studio: storing pipeline records, delivering messages, hosting documents, and surfacing analytics. We do not use applicant data from your pipelines to advertise to applicants, train commercial AI models for unrelated products, or sell it to third parties. The terms governing this processing are part of our agreement with your agency; if you require a separate Data Processing Agreement (DPA), contact us.

The collection of applicant data on the consumer side of Homematch — what we tell tenants when they sign up — is governed by the consumer privacy policy at homematch.ch/privacy.

What We Don't Do

• No Meta Pixel, TikTok Pixel, or Google Ads tracking on the Studio app
• No retargeting cookies of any kind in the authenticated app
• No selling or sharing of your data, your listings, or applicant data with advertisers
• No cross-agency profiling — your data is not used to benefit competing agencies

Cookies & Local Storage

• Auth cookies — HttpOnly session cookies (`homematch-studio-*`) for authentication. Required.
• Token expiry — A readable cookie that records when your session expires, used for proactive token refresh.
• Language preference — Stores whether you use German, English, French, or Italian.
• Vercel Analytics & Speed Insights — Privacy-friendly product analytics, no cookies, no personal data collected.

Marketing pages (the public studio.homematch.ch site) may set additional cookies for site analytics. These are described in the cookie banner shown on first visit.

How We Use Your Data

We use your data to operate Studio, manage your account and team, publish your listings to the consumer Homematch platform and connected portals, deliver pipeline and messaging functionality, process subscription payments, send transactional emails (invoices, account notifications), provide support, prevent abuse, improve the product, and meet legal obligations.

Legal Basis

• Contract performance — Account, company, listing, pipeline, and billing data are processed to provide Studio under our agreement with your agency.
• Consent — Optional features (phone verification, marketing emails, optional analytics) are processed only with your consent. You can withdraw it at any time.
• Legitimate interest — Technical logs for security and debugging, product analytics, fraud prevention, and direct communication with existing customers about Studio features.
• Legal obligation — Accounting and tax retention obligations; cooperation with lawful authority requests.

Multi-Portal Publishing

When you publish a listing, Studio can syndicate it to the consumer Homematch platform and to other property portals you have connected (e.g. Homegate, ImmoScout24, Newhome, Flatfox). The listing data and images are transmitted to those portals according to their interfaces. The portals act as independent data controllers for the listing once it is published on their platforms; their own terms and privacy notices apply.

Third-Party Services

We work with the following providers to operate Studio:

• Microsoft Azure — Cloud infrastructure, database hosting, and file storage. Microsoft Ireland Operations Limited (Ireland).
• Vercel — Frontend hosting, web analytics, and speed insights. Vercel Inc. (USA).
• Stripe — Subscription payment processing. Stripe Payments Europe Ltd. (Ireland), sub-processor: Stripe Inc. (USA).
• Resend — Transactional email delivery (invoices, notifications, invitations). Resend Inc. (USA).
• Twilio — SMS delivery for two-factor authentication. Twilio Inc. (USA).
• Sentry — Error tracking and diagnostics. Functional Software Inc. (USA).
• Supabase — Database and backend services. Supabase Inc. (USA).
• HERE Technologies — Geocoding and address search. HERE Global B.V. (Netherlands).
• Mapbox — Map rendering. Mapbox Inc. (USA).
• OpenStreetMap — Map tiles routed through our own server. OpenStreetMap Foundation (UK).
• Connected portals — Where you enable a syndication integration: Homegate, ImmoScout24, Newhome, Flatfox, and other Swiss real-estate portals.

Where providers are located outside Switzerland or the EEA, we rely on standard contractual clauses or other lawful transfer mechanisms.

Data Retention

We retain account, company, and pipeline data for as long as your subscription is active. After termination, data is marked for deletion and removed after a transition period unless we are legally required to retain it (e.g. ten-year accounting retention for invoices). Backups are retained on a rolling 30-day window and then overwritten.

Listing content remains visible only as long as the listing is published. Pipeline records are retained as long as the related property is active in your account, plus a residual period to comply with our records-keeping obligations.

Security

All traffic is encrypted via TLS. Authentication uses HttpOnly cookies. Passwords are hashed with industry-standard algorithms. We support optional two-factor authentication. You can review and revoke active sessions from your account settings. Access to production systems by our staff is restricted, logged, and limited to what is necessary for operation and support.

Your Rights

Under Swiss law, you can:

• Request information about what data we hold about you
• Have incorrect data corrected
• Request deletion of your data
• Receive a copy of your data in a portable format
• Object to processing, in particular for marketing purposes
• Withdraw consent at any time

Contact us via our contact form or email us at studio@homematch.ch. We may need to verify your identity before processing your request. If your request relates to applicant data inside an agency's pipeline, we will normally forward it to the responsible agency, who is the controller for that data.

You can also file a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Changes

We may update this policy. Material changes affecting your rights are communicated by email at least 30 days before they take effect. The version on this page is always the current one.

Contact

peak intelligence AG
Im Langacher 42, 8805 Richterswil, Switzerland
studio@homematch.ch / info@peakintelligence.ch