Skip to main content
FR DE IT EN
Brokers’ area

Privacy policy

Last updated: 14 November 2026

This policy explains which personal data ImmGate SA collects on this site, why, and what your rights are. It is based on the Swiss Federal Act on Data Protection (FADP). This English version is a translation: in case of doubt, the French version prevails.

Who is responsible?

ImmGate SA, Rue Saint-François 4, 1003 Lausanne, Switzerland (UID CHE-107.916.018).

For any question about your data: [email protected].

What data do we collect?

Only the data you send us, and what is needed to run the site:

  • “Pioneer partner” form: full name, agency or property management firm, work email, phone (optional), canton, listing volume, software used and, if you wish, what you pay for your listings today.
  • “Founding member” form: full name, email, phone (optional), profile, amount considered and message (optional).
  • Enquiry to a broker, from a listing: name, email, phone (optional) and your message. Or, at your request, through your artificial intelligence assistant: the same data, and the broker sees that the enquiry comes from an assistant.
  • Account: email address, username, language and password. The password is stored in a scrambled form that nobody can read back, not even us. And, if you use them, your favourites and saved searches.
  • Application file, if you create one: what you enter (identity, Swiss citizenship or permit, profession and employer, income bracket, household, desired move-in date, and for a purchase the budget, own funds and financing) and the documents you upload (debt collection register extract, payslips, identity document, certificates). It does not ask for marital status, religion, a specific foreign nationality or your current rent.
  • AI assistant connected to your account, if you connect one: its name, the date of the connection and the access tokens that let it act for you, within the limits you accepted.
  • Professionals: the data in your agency or broker profile, and the listings your software sends us, including the address for receiving enquiries.
  • Technical data: like any site, our hosting provider keeps connection logs (IP address, date, browser) for security and for the site to work properly. To curb abuse, the IP address of anyone sending a form, or querying the MCP server through which artificial intelligence agents search listings, is kept for one hour. For an enquiry sent by an assistant, an encrypted, unreadable fingerprint of your email address is kept for seven days at most, to prevent repeated submissions.

Why do we use it?

  • To get back to you about the pioneer partner offer and the launch of ImmGate.
  • To prepare the connection of your software to ImmGate.
  • To follow up on your interest in becoming a founding member.
  • To pass your enquiry on to the broker or agency publishing the listing, and send you a copy.
  • To run your account: signing you in, keeping your favourites and searches, and sending you the alerts you asked for, at most once a day and only when there is something new.
  • Keep your application file and send it, only when you ask, to the agency you are writing to.
  • Let the AI assistant you connected read and complete your file, manage your favourites and write to advertisers in your name.
  • To publish professionals’ listings and profiles.
  • To produce anonymised internal statistics, for example the number of registrations per canton.

We never sell, rent or hand over your data to third parties, and we do not use it for third-party advertising.

Who has access to it?

Only the people at ImmGate SA who need it. An enquiry written from a listing goes to the broker who publishes it and to their agency, and also, if the agency has asked for it, to the receiving address of its management software. They use it to reply to you, under their own responsibility.

Your application file is only sent if you tick “Attach my complete file”, or ask your assistant to. The agency then receives a link that only opens with a code sent to one of the addresses that received your request, for 30 days at most. You see who opened and downloaded it, and you can withdraw access at any time. The agency then processes this data under its own responsibility: the Federal Data Protection Commissioner asks it to destroy the copies of applicants it does not choose.

If you use “Apply with ImmGate” on an agency’s website, you authorise that share yourself, on ImmGate. The agency receives the chosen file for thirty days at most. Every reading is shown to you, and you withdraw access whenever you like. It then processes it under its own responsibility.

On professionals’ listings and profiles, the broker’s name, position, phone number and photo are public. Their email address is shown only after a click.

Two technical service providers process your data on our behalf, solely according to our instructions:

  • Infomaniak Network SA, Geneva: hosting of the site, the database and email. The data is hosted in Switzerland.
  • Cloudflare, Inc., United States: content delivery network and protection of the site against attacks. Your requests, including your IP address, pass through its international network.

The transfer to Cloudflare relies on its certification under the Swiss–US Data Privacy Framework, supplemented by the standard contractual clauses in its data processing agreement.

We use no other service provider: no audience measurement tool, no marketing service, and no processing of your data by artificial intelligence.

If you use your own artificial intelligence assistant, its provider, whom you chose, passes your data on to us, under its own privacy policy.

Maps and 360° tours

The maps on listings are provided by the Federal Office of Topography swisstopo, in Wabern (BE). To display them, your browser requests the map images directly from its servers, in Switzerland: swisstopo then receives your IP address, as does any site you visit.

A 360° tour is loaded only if you start it. It is then provided by its publisher, currently Matterport, Inc., in the United States. It receives your IP address, may set its own cookies and applies its own privacy policy. As long as you do not start the tour, the page sends it nothing.

Neither swisstopo nor Matterport processes data on our behalf, and we receive nothing from them.

How long do we keep it?

As briefly as possible:

  • “Pioneer partner” and “Founding member” forms: until the launch of ImmGate, then at most 24 months if no contractual relationship is established.
  • Enquiries to a broker: twelve months, after which they are deleted automatically.
  • Account, favourites and saved searches: as long as the account exists. An account that is opened but never activated is deleted after thirty days. You can delete it yourself at any time, from “My account”: an email asks you to confirm, then everything is erased, application file and documents included.
  • Application file and documents: until you delete it, and at the latest twelve months after your last update. You are warned two weeks before.
  • File links sent to agencies: 30 days. Log of openings and downloads: twelve months.
  • Share with an agency (“Apply with ImmGate”): thirty days at most, or until you withdraw it.
  • Connected AI assistant: until you disconnect it on the “My connected assistants” page. If unused, its tokens expire after 30 days.
  • IP address kept to curb abusive submissions: one hour.
  • Encrypted fingerprint of the email address of a submission sent by an AI assistant: seven days at most.

You can ask for your data to be deleted at any time.

Cookies and audience measurement

This site uses no audience measurement tool and no tracking cookie. A visitor without an account receives no cookie at all, not even a technical cookie from our content delivery network.

When you sign in to your account, a single cookie is set: the session cookie, strictly necessary, which keeps you signed in. It disappears when you sign out, and after 23 days at the latest.

An agency opening an application file receives the same strictly necessary session cookie, for two hours at most.

The only exception: a 360° tour, if you start it, may set its publisher’s cookies (see “Maps and 360° tours”).

If this changes, we will update this policy and ask for your consent where the law requires it.

Your rights

You can at any time:

  • find out what data we hold about you and obtain a copy
  • have it corrected or deleted
  • object to its processing
  • ask for it to be handed over in a common format.

You can delete your account yourself, from “My account”. For anything else, write to us at [email protected]. You can also contact the Federal Data Protection and Information Commissioner (FDPIC). If you live in the European Union, you also have the rights provided by the GDPR.

Security

Your data is transmitted encrypted (HTTPS) and access to it is limited to the people who need it.

Documents in application files are also encrypted on our servers, with a key kept separately: a copy of the files would not be enough to read them. An AI assistant connected to your account never receives their content.

Changes

We may adapt this policy. The version in force is always the one published on this page, with its update date.