Corridome LLC runs Corridome, a register of private-equity advisers, broker-dealers and the deals they work on, built from public filings and firms' own websites. This policy covers two groups of people: the people who use Corridome, and the people who appear in the register. If you're in the second group, the section People in the register is written for you.
Who we are
Corridome is run by Corridome LLC, a Delaware limited liability company based in New York, NY. It decides how the personal data described here is used (in GDPR terms, it's the controller). For anything about privacy, including legal notices, write to support@corridome.com.
Our representatives in the European Union and the United Kingdom will be appointed when Corridome has customers there.
What we collect from users
We collect only what the service needs. By category:
- Account: your email address, and your first name if you give one. We create the account the first time you sign in.
- Signing in: we email you a one-time code that lasts 10 minutes. Our sign-in provider, WorkOS, receives your email address, and the IP address and browser of the request so it can spot abuse. If your firm has its own single sign-on on a Team plan, your firm's identity provider confirms who you are and tells us your email address and name.
- Security: a short-lived count of how many pages and searches come from your IP address or your account, so we can slow down automated copying. When a check is needed, Cloudflare Turnstile confirms you're a person; it sees your IP address and browser signals, under Cloudflare's own privacy policy.
- Billing: if you become a member, Stripe takes your card and billing address in its own form inside our page, and works out sales tax from the address. Corridome LLC is the seller, and Stripe processes the payment. Your card number never reaches our servers. Stripe tells us your plan, its status and renewal date, and your card's brand, last four digits and expiry date.
- How you use Corridome: the firms you follow, your saved searches, how often you want the follows email, how many contacts you've opened and which people, how many rows you've exported, and how many different records you opened today. We use these to run the features and the allowances on your plan.
- API (coming soon to the Member and Team plans): the keys you create, and a log of your requests, kept up to 90 days.
- Messages: what you send us through the contact form or by email, and your email address if you subscribe to the newsletter.
We don't use analytics or advertising trackers, and we don't buy data about our users from anyone.
The AI connector
The Corridome connector, part of the Member and Team plans, lets you use Corridome from Claude or ChatGPT. When you connect it, we receive a sign-in token for your Corridome account, and then only the requests the assistant sends to our tools: the search terms, firm names and filters it passes in, and the results we return. When you ask for people’s contact details, the results include them and the assistant receives them; each counts against your monthly contact allowance, as on corridome.com. We keep those requests for 30 days to run the service and investigate problems.
We do not receive or store your conversations, chat history, the assistant's memory, or files you upload to it. Anthropic and OpenAI handle those under their own policies. You can disconnect at any time in Claude or ChatGPT, or on your account page, which lists your connected assistants and removes any of them.
Cookies
Corridome sets only the cookies the service needs to work:
- a sign-in cookie that keeps you signed in;
- a 10-minute cookie while you sign in through your firm's single sign-on, removed when you're back;
- a 12-hour cookie after you pass a human check, so you aren't asked again.
There are no analytics or advertising cookies. On the pages that use them, Stripe's payment form and Cloudflare's human check run their own code and may set their own cookies, under their own policies.
Why we use it
For the people who use Corridome, under the GDPR's terms:
- to provide the service you signed up for: your account, plan and features (performing our contract with you);
- to keep the service secure and stop abuse and automated copying (our legitimate interest);
- to bill you and keep tax records (our contract with you, and the law);
- to send the newsletter, only if you subscribed (your consent, which you can withdraw at any time);
- to answer you when you write to us (our legitimate interest in replying).
Publishing the register is covered in People in the register.
Who receives it
Service providers that run parts of Corridome for us, each only for that part:
- Amazon Web Services: hosting, databases and storage;
- WorkOS: accounts and sign-in;
- Stripe: payments and sales tax;
- Resend: email (sign-in codes, the follows email, the newsletter);
- Cloudflare: the human check on forms and heavy use;
- Microsoft: the support mailbox.
If you use the AI connector, Anthropic or OpenAI receive the tool results you ask for, including any contact details you ask for, and nothing else from us.
We don't sell account data or use it for advertising. We'd disclose data if the law required it, and it would pass to a buyer if Corridome LLC were sold, under this policy.
How long we keep it
| Data | Kept |
|---|---|
| Account, follows, saved searches | While you have an account, then 30 days after you delete it |
| Billing records | 7 years, for tax |
| Server, security and API logs | Up to 90 days |
| Security counts (pages and searches per address) | Under 2 hours |
| Records you opened today | 2 days |
| Contacts opened and rows exported | While you have an account, then 30 days after you delete it |
| AI connector tool requests | 30 days |
| Support email | 2 years |
| The register | While its source still states it, or until a valid objection |
Your choices and rights
You can ask us to show you the personal data we hold about you, correct it, delete it, send you a copy you can take elsewhere, or stop using it for a purpose you object to. You can unsubscribe from the newsletter and the follows email from the link in each one, and change your follows, saved searches and email settings on your account page.
To ask, write to support@corridome.com from the address on your account, so we know the request is yours. We answer within one month (the GDPR's limit), and California residents within 45 days. You can also complain to the data protection authority where you live.
California residents have the right to know, delete, correct and opt out of the sale or sharing of personal information. We don't sell or share it in the sense of that law, and we won't treat you differently for using any of these rights. An agent you authorize can ask on your behalf.
People in the register
If you work at a firm in the register, this part explains what we hold about you, as the GDPR asks of data we didn't collect from you directly.
- What we hold: your name, your title or role, the firm you're at, and the business contact details your firm or a filing published (a work email, phone number or LinkedIn profile address).
- Where it comes from: SEC filings (Form ADV Schedules A and B, the SEC's investment adviser representative records, Form D, proxy statements and 8-K exhibits, Form CRS), SBA loan records, and the team and contact pages of firms' own websites; a few contact details come from the public LinkedIn page or SEC filing that lists them. Every fact on a page names the kind of document it comes from.
- Why: business research on the firms that advise on, finance and arrange private-company deals, so professionals know who works on which deals.
- Our legal basis: our legitimate interest in publishing business information already made public, balanced against yours.
- Who sees it: names and titles on a small sample of firm pages are open to everyone and to search engines; the rest open to people with a free account. Contact details open only to paying members, counted against a monthly allowance: on corridome.com, through the API when it opens, and through an AI assistant a member connects, which then receives them.
- How long: while the source still states it, or until you object.
- We don't hold sensitive data about you (health, beliefs, or any other special category).
To object, correct something, or be removed, write to support@corridome.com with your name and firm. We remove your contact details first, then your name, and answer within one month.
Where it's processed
Corridome runs in the United States, and our providers process data there. When data comes from the European Economic Area, the UK or Switzerland, we rely on the safeguards the law provides for transfers, such as the European Commission's Standard Contractual Clauses in our providers' data processing terms.
Security
Every connection to corridome.com uses TLS 1.2 or newer. Account data and stored files are encrypted at rest, and our storage refuses unencrypted connections. Card numbers go straight to Stripe and never reach our servers. The website reads the register through a read-only role that can see only the published records, and each part of the system has only the access it needs.
Children
Corridome is a service for professionals and isn't directed to children under 13. We don't knowingly collect their data; if you think we have, write to us and we'll delete it. The register holds business records only, nothing unsuitable for readers aged 13 to 17.
Changes and contact
When we change this policy in a way that matters, we'll email account holders and post a notice on the site 30 days before the change takes effect, and update the effective date above.
Questions and legal notices: support@corridome.com.