Privacy Policy

Off Market Match Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform for off-market real estate transactions in Canada.

By using Off Market Match, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the platform.

Personal Information

• Name, email address, and phone number
• Mailing address and property addresses
• Financial information for transaction verification
• Government-issued identification for verification purposes
• Business entity information (if applicable)

Transaction Information

• Property listing details and preferences
• Communication history with other users
• Offer and negotiation records
• Signed agreements and legal documents

Technical Information

• IP address and device information
• Browser type and operating system
• Usage patterns and platform interactions
• Cookies and similar tracking technologies

• To facilitate real estate transactions between buyers and sellers
• To verify user identities and prevent fraud
• To process payments and manage subscriptions
• To provide customer support and respond to inquiries
• To send transactional notifications (e.g. password resets, email verification, deal updates)
• To improve our platform and develop new features
• To comply with legal obligations and enforce our terms
• To protect against unauthorized access and misuse

Commercial Electronic Messages (CASL)

Under Canada's Anti-Spam Legislation (CASL), we only send commercial electronic messages — such as the weekly market digest, Academy drip lessons, and promotional announcements — to users who have provided express or implied consent. Every commercial email we send includes a clearly visible, one-click unsubscribe link. We honour unsubscribe requests promptly (within 10 business days as required by CASL) and maintain a suppression list to ensure unsubscribed users are not contacted again.

Strictly transactional messages (password resets, email verification, deal room updates, billing receipts) are not subject to CASL and are sent as necessary to operate the platform.

We do not sell your personal information.

We may share your information in the following circumstances:

Third-Party Service Providers

We share the minimum necessary data with the following service providers to operate the platform. None of these providers may use your data for their own purposes beyond the service they provide to us:

Off Market Match uses artificial intelligence to power several platform features, including property valuations, market analytics, buyer-seller matching, an AI chatbot assistant, and the AI Negotiator. Understanding how your data is processed by these tools is important to us.

Data Sent to AI Providers

When you use AI-powered features, the information you provide (such as property details, deal context, negotiation preferences, and chat messages) is sent to third-party AI service providers (currently Anthropic Claude as our primary provider, with OpenAI as a fallback) for processing. We send only the data necessary to generate a response. We do not send your name, email, or account credentials to AI providers.

AI Negotiator Sessions

If you save a negotiation session, your deal context, BATNA details, conversation history, and calculated scores are stored in our database and associated with your account. You can delete saved sessions at any time, which permanently removes the stored data.

No Automated Decision-Making

AI features on our platform provide suggestions, analysis, and educational guidance only. No AI-generated output constitutes legal, financial, or professional advice. No automated decisions are made about your account, access, or transactions without human involvement.

Data Retention by AI Providers

Our AI providers may temporarily process your inputs to generate responses but do not use your data to train their models. We use API configurations that opt out of data training. Please refer to our providers' privacy policies for their specific data handling practices.

We implement industry-standard security measures to protect your personal information, including:

• SSL/TLS encryption for data transmission
• Secure data storage with access controls
• Regular security audits and monitoring
• Employee training on data protection

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Under Canadian privacy laws, including PIPEDA, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate information
• Withdraw consent for certain data processing
• Request deletion of your personal information (subject to legal requirements)
• Receive information about how your data is used
• File a complaint with the Privacy Commissioner of Canada
• Unsubscribe from commercial emails at any time (one-click link included in every marketing message)

Data Export

You can download a copy of your personal data at any time from your Account Settings page. The export includes your profile information, property listings, deal records, and saved items in JSON format. Exports are available up to 5 times per day.

Exercising Your Rights

To request access, correction, or deletion of your personal data, contact our Privacy Officer at privacy@offmarketmatch.ca. We will respond within 30 days of receiving your request.

Cookies We Set

We set one browser cookie:

With your permission, we use HeyCatch to understand visits, clicks, and completed sign-ups and purchases. HeyCatch stores analytics identifiers in browser local storage, not analytics cookies. For signed-in users who allow analytics, we may share your internal account ID, name, email address, membership plan, and sign-up date with HeyCatch to connect activity to your account. Text and element attributes are masked, URL query parameters are removed, and private account, document, and deal-room pages are excluded from browser event reporting. We do not send passwords, uploaded documents, payment card details, or private messages as business event properties.

Browser Local Storage

We also store certain preferences in your browser's local storage (not cookies). Account cache entries are cleared when you log out; preferences may remain. Items stored include:

• omm_user — your name and email address, used to display your profile while the app loads. Cleared on logout.
• omm_current_user_id — your internal user ID for client-side routing. Cleared on logout.
• omm_language — your language preference (no PII).
• ui-theme — your dark/light mode preference (no PII).
• vo_* keys — voice settings for the AI voice rehearsal feature (no PII).
• list-property-* — draft state for a property listing you have not yet submitted (cleared on submission or logout).
• omm_waitlist_source — referral source if you came from a referral link (cleared after registration).
• Miscellaneous UI state keys — sidebar state, welcome wizard progress, banner dismissals (no PII).
• HeyCatch analytics identifiers — stored only after you allow analytics; your identity is reset on logout.

Your Analytics Choice

Optional analytics starts disabled. Choose “Allow analytics” or “No thanks” in the analytics notice. A first-party preference cookie, omm_analytics_consent, remembers your choice for up to one year. Signed-in account preferences are also saved so server-side business events respect your choice.

Use “Analytics preferences” to change your choice at any time. Withdrawing consent stops future analytics; it does not delete events already sent. We also honour your browser's Do Not Track setting. Declining analytics does not limit access to the platform.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Transaction records may be retained for legal and audit purposes.

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware of such collection, we will delete the information promptly.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us: