Privacy policy

Version of November 6, 2026

1. Controller

1.1. Controller: ИП Тарасов Антон Александрович, tax ID (INN) 771400940452, registration (OGRNIP) 325774600160069.

1.2. Address: Россия, Москва.

1.3. Contact e-mail: support@imb.house.

1.4. This policy applies to IMB.HOUSE (https://imb.house) and its subdomains, including sign-in, file storage and legal pages.

1.5. For users in the European Economic Area processing is described under Regulation (EU) 2016/679 (GDPR). The controller is established in the Russian Federation.

2. Categories of data

2.1. For registration and sign-in: e-mail, login, session identifiers, authentication provider data (if you use such a method).

2.2. For the profile: display name, contacts you provide, account status.

2.3. For real-estate listings: property address or area, price, description, property attributes, photos and other files you upload.

2.4. For chats: message content and technical metadata of conversations between users.

2.5. For paid promotion: payment details needed to confirm the payment, service composition and status.

2.6. For support requests: e-mail, request content and attachments you send.

2.7. When visiting the site: IP address, cookies, browser, device, OS, visit time and on-site activity.

2.8. We do not request special categories of personal data or biometric data for identity verification.

3. Purposes and legal bases

3.1. Account, listing and chat data are processed to perform the user agreement: registration, sign-in, publishing and displaying listings, messaging (Art. 6(1)(b) GDPR).

3.2. Paid promotion data are processed to perform the paid-services contract, take payment and meet legal duties (Art. 6(1)(b) and (c) GDPR).

3.3. Support data are processed to reply and fix service issues (Art. 6(1)(b) or (f) GDPR).

3.4. Technical data are processed for security, abuse prevention and troubleshooting (Art. 6(1)(f) GDPR).

3.5. Analytics and marketing cookies are used only after consent in the cookie banner (Art. 6(1)(a) GDPR).

4. How we process data

4.1. Processing may be automated, non-automated or mixed.

4.2. Data may be stored in the service infrastructure, file storage, payment and messaging providers engaged by the controller.

4.3. We apply organisational and technical safeguards, limit access and keep records of processing activities where required.

5. Recipients and international transfers

5.1. Data may be shared only as needed with:

  • hosting and file-storage providers;
  • payment providers for promotion;
  • authentication providers if you sign in with them;
  • e-mail and notification services;
  • analytics services after consent to analytics cookies;
  • public authorities where required by law.

5.2. We do not sell personal data or share it for third-party advertising.

5.3. Processing occurs primarily in Russia. Russia is not covered by an EU adequacy decision. Transfers from the EEA rely on GDPR Chapter V safeguards (for example standard contractual clauses and additional measures where appropriate) or another lawful ground.

6. Retention

6.1. Account data are kept until the account is deleted, except data that must be retained by law or that relate to paid services.

6.2. Listing and chat data are kept while needed for the service and the agreement, or until deleted by you or by us under the service rules.

6.3. Payment and accounting data are kept for the periods required for the contract, tax and accounting duties and defence of legal claims.

6.4. Support requests are kept until closed and for 30 more calendar days, unless another legal basis requires longer retention.

6.5. Security logs are kept for 90 calendar days.

6.6. Analytics data are kept until the cookie expires, consent is withdrawn or data are deleted in the analytics settings.

7. Cookies

7.1. Cookie use is described in the cookie policy.

7.2. Strictly necessary cookies support sign-in, security and core features.

7.3. Analytics and marketing cookies are enabled only after consent in the cookie banner. Declining them does not block browsing listings.

8. Your rights

8.1. You may request access, rectification, erasure, restriction, portability, object to processing, and withdraw consent. You may lodge a complaint with your local EEA supervisory authority.

8.2. Contact: support@imb.house. We may ask for information needed to verify identity and find your data.

8.3. Withdrawal of consent does not affect processing that is necessary for a contract, legal obligation or defence of legal claims.

9. Changes

9.1. A new version applies from publication or from a later date stated in it.

9.2. The current version is published at /privacy/policy.