Your information, handled with purpose

1. Scope and who controls your information

This Privacy Policy explains how EdgeiT Marketing, the operator of CoreMatch, handles personal information when you visit CoreMatch, create an account, publish or respond to a Home Request, communicate, submit a bid or review, upload content, or contact us. It does not control a contractor's independent handling of information after it is lawfully shared.

2. Information you provide

• Account and identity information, including name, email address, account type, authentication records, and policy acceptance records.
• Homeowner profile and Request information, including approximate service area, budget, requested services, preferred timing, and exact address stored separately from the public Request.
• Contractor profile, contact, licensing, insurance, bonding, certification, service-area, equipment, portfolio, website, and external-listing information.
• Messages, bids, signed-agreement attachments, photos, videos, reviews, support requests, reports, and other content you choose to submit.
• Subscription and transaction records if paid CoreMatch services are introduced. Payment-card data should be handled by the payment processor rather than stored directly by CoreMatch.

3. Information collected automatically

CoreMatch and its infrastructure providers may process IP address, device and browser information, timestamps, requested pages, referring pages, security events, authentication cookies, and diagnostic logs. The current beta uses essential cookies for authentication, security, and session continuity. If nonessential analytics or advertising technologies are introduced, this Policy and any legally required consent controls will be updated first.

4. How information is used

• Create accounts, maintain sessions, provide dashboards, and operate marketplace workflows.
• Match Requests with potentially relevant contractors and explain match factors.
• Enable protected communication, bids, agreements, reviews, support, moderation, and address release.
• Verify accounts and contractor-submitted credentials, investigate misuse, prevent fraud, and protect the service.
• Maintain, troubleshoot, measure, and improve CoreMatch and comply with legal obligations.
• Send transactional account, security, match, and service communications. Marketing messages will include legally required choices where applicable.

5. AI-assisted features

CoreMatch may send limited content to an AI service provider to draft contractor profiles from public business websites and generate grounded match explanations. Users must review AI suggestions before publishing or relying on them. CoreMatch is designed not to send exact street addresses, insurance policy numbers, or other unnecessary private credentials into match-explanation prompts.

Do not submit sensitive personal information to AI-assisted fields unless CoreMatch specifically requests it for that purpose. AI output may be inaccurate and is not a licensing, legal, safety, or hiring determination.

6. When information is shared

• With the homeowner or contractor involved in a mutual match, but only as needed for the Request and subject to address controls.
• With the awarded contractor only after the homeowner separately releases the exact address.
• With infrastructure, authentication, storage, email, AI, review, monitoring, and payment providers acting to support CoreMatch.
• With professional advisers, insurers, auditors, or authorities when reasonably necessary to protect rights, investigate harm, comply with law, or respond to valid process.
• In connection with a merger, financing, acquisition, reorganization, or sale, subject to appropriate confidentiality and notice obligations.

CoreMatch does not sell personal information for money and does not currently share personal information for cross-context behavioral advertising. We will update this Policy and provide legally required choices before materially changing that practice.

7. Address and credential protections

Exact Request addresses are stored separately from public Request data. Matching or accepting a bid does not reveal the address; the homeowner must award a contractor and then separately release it. Contractor insurance policy numbers, private evidence, and direct contact information are restricted to authorized workflows and administrators. Public license information may be displayed where contractors elect or applicable law requires advertising disclosure.

8. Google, Yelp, and social profiles

If a contractor connects a Google or Yelp listing, CoreMatch may retrieve current public rating, review-count, and provider-selected excerpt information under the provider's terms. Google Places content is subject to Google Maps Platform Terms and Google's Privacy Policy. Yelp content is subject to Yelp's terms and privacy practices. Social-profile links send users to the relevant third-party service, whose policies apply there.

CoreMatch stores listing identifiers and contractor-submitted public website and social URLs. Adding a LinkedIn, Facebook, or Instagram link does not give CoreMatch a password, access token, or permission to publish, message, or manage the contractor's account. Provider content is requested and displayed with required attribution; availability, ordering, and completeness are controlled by the provider.

9. Retention

We retain personal information only as reasonably necessary to operate CoreMatch, maintain transaction and acceptance records, resolve disputes, enforce agreements, prevent fraud, satisfy tax or legal requirements, and maintain secure backups. Retention depends on the record and applicable law. When information is no longer reasonably needed, we will delete, deidentify, or securely isolate it. Users should keep their own copies of contracts and important project records.

10. Security

CoreMatch uses role-based access controls, database row-level security, restricted storage, encrypted transport, protected server credentials, and separate treatment of exact addresses and private contractor credentials. No internet service can promise absolute security. Report suspected unauthorized access promptly and do not send passwords or complete payment-card information by message.

11. Your choices and privacy requests

You may update many profile fields from your account. You may request access, correction, deletion, or a copy of applicable personal information, object to or restrict certain processing, withdraw consent where processing depends on consent, or appeal a privacy-request decision where applicable law provides those rights. We may verify your identity and retain information where legally permitted or required.

To make a request, use the legal contact below with the subject “CoreMatch privacy request.” We will not discriminate against you for exercising applicable privacy rights. Authorized-agent requests must include legally sufficient authority and may require direct verification.

12. Children

CoreMatch is for adults and is not directed to children under 18. We do not knowingly create marketplace accounts for children. Contact us if you believe a child submitted personal information so we can investigate and take appropriate action.

13. United States operation and state rights

CoreMatch is operated from the United States. Privacy rights and required disclosures differ by state and may depend on legal thresholds and how the service operates. EdgeiT Marketing will honor applicable rights and update region-specific notices as CoreMatch expands. Before nationwide launch, qualified counsel should confirm which state privacy, breach-notification, contractor-marketplace, and record-retention rules apply.

14. Changes to this Policy

We may update this Policy as CoreMatch, its providers, or legal requirements change. We will post the new effective date and provide reasonable notice of material changes. When required, we will request a new acknowledgment or consent.

Privacy Policy version 2026-09-15.