Privacy Policy
This policy explains how Corridor collects, uses, and protects personal data in connection with corridor.systems and the services we provide.
Who we are
Corridor is a GTM advisory and software service operated by Thomas Dratler, based in Tel Aviv, Israel. You can reach us at thomas@corridor.systems.
What data we collect
When you submit the discovery call request form on this website, we collect:
- Your name
- Your work email address
- Your company name and funding stage
- Your target market (corridor direction)
We use a cookie consent banner to control optional visitor-identification tracking. Only with your consent do we load the tracking tool described under "Visitor identification" below; if you decline, no tracking script is loaded. We do not use cookies for advertising.
How we use your data
The information you submit is used solely to:
- Respond to your discovery call request
- Schedule and conduct a call about Corridor services
- Follow up on our commercial conversation
We do not sell your data, share it with third parties for marketing purposes, or use it for automated profiling.
B2B prospecting data
As part of our GTM advisory work, Corridor processes publicly available professional information (names, job titles, company names, LinkedIn profiles) for B2B prospecting purposes. This data is sourced from professional networks and third-party enrichment tools. It is used exclusively for direct outreach relevant to the professional role of the individual contacted.
If you have received outreach from Corridor and wish to be removed from our contact list, email thomas@corridor.systems and we will remove your data within 5 business days.
Visitor identification
With your consent (collected via the cookie banner on this website), we use a visitor-identification tool to recognise B2B visitors:
- Provider: a B2B visitor-identification provider (category listed at corridor.systems/legal/sub-processors)
- Purpose: identifying B2B visitors through LinkedIn matching
- Data processed: IP address, cookies, device ID, and LinkedIn profile where a match is found
- Legal basis: legitimate interest (B2B)
- Opt-out: Opt-out link
The tool is loaded only after you accept tracking in the cookie banner. If you decline, the script is never loaded. You can withdraw consent at any time by clearing the consent cookie or using the opt-out link above.
Your account and the onboarding assistant
If you are invited to set up a Corridor space, we create an account for you from your invitation link. We collect your name, your company name, your work email address and a password (stored in hashed form by our authentication service, never readable by us). When you open or use the invitation link we also record the event and a one-way fingerprint of your IP address, to protect the link against misuse.
In "My mandate", an AI assistant helps you describe your business and your targets. The messages you type there, and the draft mandate built from them, are sent to an AI model provider acting as our processor so that it can reply to you. Please do not enter bank or card details, passwords or sensitive personal data. The assistant never confirms or approves anything on your behalf: you confirm each point and approve the final version yourself, and our team reads it before anything goes live.
- Purpose: to create your account, secure your invitation and prepare your mandate at your request.
- Legal basis: steps taken at your request before a contract, and our legitimate interest in securing invitations.
- Processors: the categories of providers involved (hosting, database, authentication, AI model provider) are listed at corridor.systems/legal/sub-processors.
- Retention: unused invitation: if you do not create an account, the invitation and the email address it is linked to are deleted 30 days after it was created; the invitation security log then keeps only the type and date of each event, without any email address or IP address fingerprint. Account created: for as long as your account exists; the invitation's email address and the fingerprints in its security log are however erased 30 days after the account is created. You can ask us to delete your account and your answers at any time by writing to thomas@corridor.systems.
Contract and billing
When you become a client, we process your company details (company name, legal form, registration number, tax identifier, registered and billing addresses, currency, language) and those of the people you designate (signatory, billing contact, legal contact: name, job title, business email address). This information comes from you, in your "My mandate" space. We do not collect any payment card or bank account number.
- Purpose: to prepare and perform our contracts (non-disclosure agreement, service agreement) and our invoices.
- Legal basis: performance of the contract, and our legal obligation for invoicing.
- Processors: the categories of providers involved (hosting, database, authentication) are listed at corridor.systems/legal/sub-processors.
- Retention: for the duration of the contract. You can ask for access, correction or deletion of this data by writing to thomas@corridor.systems.
Data storage and security
Form submissions are sent directly to thomas@corridor.systems and are not stored in a database on this website. Prospect data used in our advisory operations is stored in a secure cloud database hosted in the EU (Ireland), which is compliant with GDPR data residency requirements.
Your rights under GDPR
If you are located in the European Economic Area or the UK, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing of your data for direct marketing
- Request restriction of processing
To exercise any of these rights, contact us at thomas@corridor.systems. We will respond within 30 days.
Data retention
Contact form submissions are retained for the duration of our commercial relationship and deleted upon request. Prospecting data (professional contact details of business decision-makers) is retained for up to 24 months from the last contact with the person. Unused invitations are deleted 30 days after they were created (see "Your account and the onboarding assistant"). Company and billing details are kept for the duration of the contract (see "Contract and billing"). You can ask for earlier deletion at any time at thomas@corridor.systems.
Third-party services
This website is hosted in the USA, with EU edge nodes. The live demo feature uses an AI content generation service to generate content. No personal data is sent to that service. Fonts are loaded from a third-party service. With your consent, a B2B visitor-identification tool is loaded for B2B visitor identification (see "Visitor identification" above). No other third-party services are used on this website.
For our GTM System services, we use a number of sub-processors. A categorised list of these sub-processors, including their data locations and transfer mechanisms, is available at corridor.systems/legal/sub-processors.
Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after an update constitutes acceptance of the revised policy.
AI-Generated Content Disclaimer
The AI features within Corridor generate content automatically based on publicly available data and user inputs. This content is provided for informational purposes only and does not constitute legal, financial, or commercial advice. Corridor makes no representations as to the accuracy or completeness of AI-generated outputs. Users are solely responsible for verifying any information before acting on it.