Privacy notice

1. Who is responsible

The operator is the controller for the website, the accounts of brokerage firms and private sellers, demo requests and billing (see the imprint and the bottom of this page).

The brokerage firm running a transaction is the controller for that transaction's data (buyers, sellers, property). The operator processes this data only on the firm's behalf and instructions (processing by a processor, Art. 9 FADP). For a private sale without a broker, the operator is responsible for the platform and the selling person for the data they enter themselves.

Please direct questions about the data in a transaction to the brokerage firm. We forward requests we receive.

2. Which data

• In a transaction: personal details (name, address, date of birth, place of origin, nationality, civil status, marital property regime, country of residence), contact details, copies of ID card or passport and, if requested, health-insurance card (for the AHV number the land registry needs), financing, bank details, deposit and price, property data, electronic signatures with time, IP address and browser identifier.
• For accounts: name, business e-mail, phone, company name, address, UID, team role, login times.
• For billing: billing address, plan, payment status and invoices. Only the payment provider Stripe receives card data.
• When visiting the website: IP address, time and page in server logs, briefly also to prevent abuse (rate limiting).
• For a demo or contact request: name, company, e-mail, phone and your message.
• When a property is marketed (prospective buyers): name, e-mail, phone, your inquiry, viewing appointments, notes of the brokerage firm, any offer, and when you opened the sales documentation. The brokerage firm is the controller; we process the data on its behalf. The owners of the property see only aggregated figures and – where the firm releases them – viewing feedback and offer amounts, never your name or contact details.

3. Purposes

There are no automated individual decisions and no profiling. Data is neither sold nor used for advertising.

We analyse uploaded PDFs exclusively on our own servers (text layer and text recognition). Nothing is sent to external services for this – in particular, no content goes to providers of artificial intelligence such as Anthropic.

• Drafting, sending and having the reservation agreement signed electronically
• Collecting and checking the documents the land registry needs for the public deed and filing the application
• Estimating costs (transfer tax, land-registry fees)
• For the brokerage firm: recording inquiries from prospective buyers, sending them the sales documentation and arranging viewings
• Reminding of deadlines, appointments and open steps
• Proving who confirmed or signed what and when
• Running accounts, billing subscriptions and fees, answering requests, operating the platform securely

4. Where the data is stored

Database and documents are stored in a data centre in Zurich (Switzerland). The application itself runs on servers in Frankfurt am Main (Germany), a country with adequate data protection under Annex 1 of the Swiss Data Protection Ordinance.

5. Recipients

In a transaction: the brokerage firm and its staff; the other contracting party receives the reservation agreement and the documents it signs itself. Documents to be signed, such as the application to the land registry and the registry's own form, contain – like the purchase contract – the personal details of all parties: name, address, date of birth, place of origin, nationality, civil status, marital property regime, spouse or partner, ownership share, depending on the form phone, e-mail and sex, and the sellers' account for the balance of the purchase price. It does not see copies of the other side's IDs or the other documents the other side uploaded. On filing, the competent land registry in the cantons of St. Gallen or Graubünden, or the competent notary office (Notariat, Grundbuch- und Konkursamt) in the canton of Zurich, receives the data, by e-mail with the documents attached (including the ID copies).

Public services of the Confederation: for the address search and the parcel map, your browser calls the geodata services of the Federal Office of Topography swisstopo (geo.admin.ch) directly and sends them the address you type or the coordinates, as well as your IP address. At registration, our server queries the central business name index of the commercial register (Zefix) with the company name you enter, to take over the commercial register data (e.g. the UID). These bodies do not process the data on our behalf; their own data protection rules apply.

The following providers process data on our behalf:

• Supabase Inc., USA – database and document storage; data centre in Zurich (Switzerland)
• Skribble AG, Zurich (Switzerland) – electronic signing of the reservation agreement and other documents (e.g. the land registry form, a power of attorney); the document and the signatories’ name, email and mobile number; identification for the qualified signature by Skribble or its trust services
• DigitalOcean LLC, USA – application hosting; data centre in Frankfurt (Germany)
• Resend (Plus Five Five, Inc.), USA – e-mail delivery (login links, invitations, reminders, application to the land registry) via the EU region (Ireland); the e-mail to the land registry contains the application with all documents attached, including the ID copies
• Stripe Payments Europe Ltd., Ireland, with Stripe, Inc., USA – payments for subscriptions and fees
• Twilio Inc., USA – sending the SMS code when signing in the portal, only where signing is not done via Skribble

6. Disclosure abroad

Some providers are based in the USA, which does not generally offer adequate protection; access from there cannot be ruled out. We rely on the providers' data processing agreements with the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC) and, where the provider is certified, on the Swiss-U.S. Data Privacy Framework.

7. Retention

• Copies of ID cards, passports and health-insurance cards: deleted 90 days after the transaction is completed or cancelled; replaced copies immediately, rejected copies after 30 days.
• Other transaction data, signature evidence and logs: as long as the brokerage firm keeps its account and needs them as evidence. The firm can delete cancelled transactions. When the contract with the firm ends, we delete the data within 90 days unless a statutory retention duty applies.
• Account and billing data: as long as the account exists; accounting records 10 years (Art. 958f CO).
• Server logs: at most 30 days. Demo and contact requests: until handled, at most 12 months.
• Data of prospective buyers: deleted automatically 12 months after the last contact; the brokerage firm can delete it earlier at any time. Anyone who reserves becomes a party to a transaction – the above then applies.

8. Security

There are no passwords: access works through personal links that expire, and signatures are confirmed with a code sent to the mobile phone. Connections and stored data are encrypted. Each brokerage firm sees only its own transactions; buyers and sellers do not see the other side's IDs or uploaded documents, and bank details only where a document they sign contains them (section 5). Access to documents is logged.

9. Your rights

You have the right to access, rectification, erasure, receipt of your data in a common format, and to object (Art. 25 ff. FADP). Contact the brokerage firm or the address below; we usually reply within 30 days.

You may lodge a complaint with the FDPIC (www.edoeb.admin.ch).

10. Cookies

Only technically necessary cookies: a session identifier and the chosen language. No tracking, no analytics, no advertising cookies.

11. Changes

We update this notice when providers, locations or processes change. The version on this page applies.