● CORRID · PRIVACY
Privacy Policy
Effective 10 November 2026 · Last updated 12 November 2026
1. Who we are
Corrid Inc. ("Corrid", "we", "us") operates corrid.ai and the Corrid web app at app.corrid.ai, including its AI assistant, June. We are based in Mississauga, Ontario, Canada.
This policy explains what personal information we collect, how we use, share and protect it, how long we keep it, and the choices and rights you have. It applies to visitors to our website and to people who use Corrid on behalf of a business, in Canada, the United States and elsewhere. If you received a message sent through Corrid, our Notice for Message Recipients explains how we handle your information. How June uses AI is described in our AI Use Policy.
We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25), and the privacy laws of the US states that apply to us.
Corrid is built for businesses. The business that signs up (our "customer") controls the data it brings into Corrid, and we process that data to provide the service to them. Where we act on a customer's behalf, we follow the customer's instructions and our agreement with them; see section 12.
Person in charge of protecting personal information. Our privacy officer is Hemanth Nunna, CEO, who is responsible for our compliance with this policy and with privacy law. You can reach him at hello@corrid.ai or at Corrid Inc., 350 Burnhamthorpe Rd W, Suite 200, Mississauga, ON L5B 3J1, Canada.
2. Information we collect
We collect only what we need to run Corrid for you.
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Name, work email, business name, role, sign-in details from Google or Microsoft if you use them | You, your sign-in provider |
| Business information | What you make, capacity, sites and addresses, suppliers, customers, purchase orders, costs, goals, notes and files you add or tell June | You and your team |
| Connected accounts | Data from services you choose to connect: Google Drive files you pick; Microsoft Outlook mail and OneDrive/SharePoint files; Xero and QuickBooks records such as suppliers, items, bills and purchase orders | The provider, with your permission |
| Forwarded email | Emails you forward or copy to your private Corrid forwarding address, including attachments, and replies from suppliers to messages you approved | You, your suppliers |
| Phone and texts | Your mobile number, your consent to receive texts, and replies you send to June by text | You, if you turn texts on |
| Billing | Plan, credits, billing contact, invoices. Card details are handled by our payment processor; we never see or store full card numbers | You, our payment processor |
| Public and reference data | Company registration details (legal name, status, address, business number, and directors where published) from public business registries in Canada and the United States and international company identifiers; supplier details found on the public web; sanctions and export-control lists; exchange rates, price indexes and tariff schedules | Public sources |
| Usage and device | Pages used, actions taken, notification preferences, browser and device type, IP address, error logs | Your use of Corrid |
Corrid is not designed to collect sensitive personal information about individuals, such as health information, personal financial account numbers or government identification numbers, and we ask that you don't add it to Corrid. Corrid is not meant for personal or household use.
3. How we use information
We use your information to provide Corrid and the features you ask for:
- Build and update your business model ("Arc"): products, capacity, suppliers, customers and value estimates.
- Let June answer questions, spot risks, draft requests for quote, follow-ups and other work.
- Read connected accounts and forwarded emails to keep your Arc current.
- Verify that businesses and suppliers are real using public registries, and screen them against public sanctions and export-control lists.
- Send you service emails and, if you turn them on, browser notifications and text messages.
- Bill you, prevent fraud and abuse, keep the service secure, and fix problems.
- Meet legal obligations, and establish or defend legal claims.
We use personal information only for the purposes described here, or for purposes a reasonable person would consider appropriate in the circumstances. If we want to use it for a new purpose, we will ask for your consent unless the law permits otherwise.
Nothing is sent or done on your behalf without your approval. June drafts; you decide what goes out.
AI processing. To answer and draft, Corrid sends the relevant parts of your data to our AI provider, which processes it only to return a response to us. We do not use your data, or data from connected accounts, to train or fine-tune AI models, and our AI provider does not use it to train its models.
We do not sell personal information, and we do not use it for advertising. We may use aggregated, de-identified statistics (for example, how many Arcs were created) to run and improve Corrid. De-identified information is not used to identify any business or person.
Privacy by default. Features that share more of your information are off until you turn them on. Text messages, browser notifications and connected accounts each need your choice, and Corrid staff may review conversations with June to improve her only if your account's owner switches that on in Settings.
4. Connected accounts and Google user data
You choose which accounts to connect, and you can disconnect them at any time in Corrid's Settings or in the provider's own account settings. Corrid reads from your accounts, with one exception you control: if you switch it on, Corrid can create a purchase order in Xero or QuickBooks, and only after you approve that exact order in Corrid. Corrid never sends email from, changes or deletes anything in your Google or Microsoft accounts, and never pays, edits or deletes accounting records. QuickBooks grants apps broader access than Corrid uses; Corrid's software limits itself to the actions described here.
| Provider | What Corrid does | Why |
|---|---|---|
| Google Drive | Reads only the files you pick with Google's file picker, and watches them for changes if you ask | Read quotes, price lists, purchase orders and other documents you choose, and notice when a watched spreadsheet changes |
| Microsoft Outlook | Reads email messages and attachments | Find quotes, orders, invoices and supplier conversations |
| Microsoft OneDrive / SharePoint | Reads files you have access to, or files you pick to watch | Same as Google Drive |
| Xero, QuickBooks | Reads suppliers, items, bills and purchase orders; creates a purchase order only if you switch this on and approve it | Understand costs and who you buy from, and place orders you approve |
Corrid does not connect to Gmail mailboxes. Gmail users can forward or copy emails to their private Corrid address instead, and Corrid sees only those emails.
Google API Services disclosure. Corrid's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, for data from Google APIs:
- We use it only to provide and improve the user-facing features of Corrid that you can see.
- We transfer it only as needed to provide those features (for example, to our AI provider and hosting providers acting on our behalf), to comply with law, for security, or as part of a merger or acquisition with your notice.
- We do not use it for advertising, and we do not sell it.
- We do not use it to train or improve generalized AI or machine-learning models.
- No person at Corrid reads it unless you give us permission for a specific message or file, it is needed for security or to comply with law, or it is aggregated and anonymized for internal operations.
The same limits apply to data from Microsoft, Xero and QuickBooks.
5. Service providers we share data with
We share personal information only with providers that help us run Corrid, under contracts that limit their use to providing their service to us and require them to protect it. We don't sell it to anyone.
| Type of provider | What they do for Corrid | Where |
|---|---|---|
| Cloud hosting and database | Store and run Corrid. Your Corrid database is stored in Canada | Canada, United States |
| AI processing | Generate June's answers and drafts | United States |
| Email and text messaging | Send Corrid emails and texts, and receive emails forwarded to Corrid | United States |
| Payments | Process payments, subscriptions and credits | United States, Canada |
| Search, maps and screening | Search the public web for supplier information, turn addresses into map locations, and screen supplier and customer names against sanctions and export-control lists | United States, global |
Corrid also looks up public reference data from government and international sources, such as company registries, statistics agencies and central banks. Those requests contain only company names, registration numbers, product codes or similar identifiers, never your private business records.
A current list of our service providers is available on request at hello@corrid.ai.
We may also disclose information if required by law, to protect people's safety or our rights, or to a buyer as part of a merger or sale of our business, with notice to you. When we receive a legal demand for a customer's data, we will tell the customer unless the law prevents us.
6. Processing outside Canada
Your Corrid database is stored in Canada. Some providers, including our app hosting and AI processing, work with data outside Canada, mainly in the United States. That data is protected by our contracts with them, but while it is outside Canada it is subject to the laws of those countries and may be accessible to courts, law enforcement and national security authorities there. By using Corrid, you acknowledge that your information may be processed in this way. If you are in Quebec, this notice also informs you that your personal information may be communicated outside Quebec.
7. Security and breach notification
Security. We use administrative, technical and physical safeguards appropriate to the sensitivity of the information. Data is encrypted in transit (HTTPS) and at rest, and credentials for connected accounts receive an additional layer of encryption. Access to production systems is limited to staff who need it and protected by multi-factor authentication. Two-step sign-in is available for every Corrid user. Our Trust and Security page describes our practices in more detail.
Breach notification. No system is perfectly secure. If a breach of security safeguards involving personal information creates a real risk of significant harm, we will notify affected customers and individuals and the Office of the Privacy Commissioner of Canada, as the law requires. If a confidentiality incident affecting people in Quebec presents a risk of serious injury, we will notify the Commission d'accès à l'information and the people affected. For people in the United States, we will give the notices that applicable state breach-notification laws require. We keep a record of every breach, as the law requires. Where we process data on a customer's behalf, we will tell that customer without undue delay so it can meet its own obligations.
8. Retention
We keep personal information only as long as we need it for the purposes in this policy, or as the law requires.
| Information | How long we keep it | Notes |
|---|---|---|
| Account and business information | While your account is open | Deleted or anonymized within 31 days after you close your account or ask us to delete it |
| Connected-account credentials | Until you disconnect the account | Deleted immediately when you disconnect; we stop reading from the account at once |
| Records of approved actions | After account closure, in de-identified form | Records of messages, orders and other actions your business approved, kept as a record of what was done, with names removed |
| Billing records | Generally up to 7 years | Kept for tax and legal reasons |
| Phone number and text consent | Until you remove your number, or close your account | Your choice to stop texts is kept so we can honour it |
| Message recipients' preferences | As long as needed to honour them | A choice to limit or stop messages must be kept to be respected |
| Usage, security and error logs | For a limited period | Used for security, troubleshooting and preventing abuse |
| Backups | Expire within 35 days | Deleted data leaves our backups when they expire |
9. Cookies and similar technologies
Corrid uses cookies and similar browser storage only to sign you in, keep you signed in, keep the service secure and remember your settings. These are necessary for the service to work. We don't use advertising or cross-site tracking cookies, and we don't sell or share browsing data with advertisers. You can clear cookies in your browser at any time, but you will need to sign in again.
10. Your rights
Wherever you are, you can:
- Access the personal information we hold about you, and ask how we use and share it.
- Correct information that is inaccurate or incomplete.
- Delete items in Corrid at any time, or ask us to delete your account and data.
- Withdraw consent to how we use your information, subject to legal or contractual limits. This may mean we can no longer provide parts of the service.
- Export your business's data. Owners and approvers can export it from Corrid at any time in structured, commonly used formats. Where the law provides a right to data portability, including in Quebec, you can also ask us to provide your personal information in such a format.
To make a request, email hello@corrid.ai. We may need to confirm your identity before we act on it. We will respond within 30 days, and tell you if we need more time or cannot meet a request, and why. If a business added you to Corrid, we may refer your request to that business, which controls its data.
Disconnecting accounts. Google users can also remove Corrid's access at myaccount.google.com/permissions; Microsoft users at myapps.microsoft.com.
Complaints. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada. If you are in Quebec, you can also contact the Commission d'accès à l'information du Québec.
11. United States residents
Corrid serves businesses, and the personal information we handle is mainly the business contact information of people acting for their employers. Many US state privacy laws treat that information differently from consumer data. Whether or not a state law applies to you, we will:
- respond to requests from US individuals to access, correct or delete their personal information, sent to hello@corrid.ai, as described in section 10;
- not discriminate against you for making a request.
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined in US state privacy laws. We have not done so in the past 12 months. We honour opt-out preference signals, such as Global Privacy Control, where the law requires. The categories of personal information we collect, their sources, our purposes and the categories of providers we share them with are described in sections 2 to 5; how long we keep them is in section 8.
If you live in a state that allows you to appeal our decision on a request, you can do so by replying to our decision or emailing hello@corrid.ai with the subject "Privacy appeal". You may also use an authorized agent where state law allows; we may ask the agent for proof of authority.
12. Customers' data and data processing agreements
For the data a customer brings into Corrid, the customer decides why and how it is processed, and Corrid processes it on the customer's behalf to provide the service, as set out in our Terms of Service. The customer is responsible for having the notices and consents needed to bring that data into Corrid. A data processing agreement is available to customers on request at hello@corrid.ai.
13. Automated decision-making
Corrid doesn't make decisions about individuals based solely on automated processing that have legal or similarly significant effects for them. June prepares analysis and drafts, and people at the customer's business decide. When Corrid flags something that needs judgement, such as a possible match on a sanctions list, a person reviews it. Our AI Use Policy explains how June works. If you think a decision about you was made by automated means, you can ask us about it at hello@corrid.ai.
14. Children
Corrid is a service for businesses and is not directed at anyone under 18. We don't knowingly collect personal information from anyone under 18. If you believe a person under 18 has given us personal information, contact us and we will delete it.
15. Changes to this policy
We will post changes to this policy here with a new updated date. For material changes, we will tell account holders by email, and in Corrid where appropriate, before the changes take effect. If a change requires your consent under the law, we will ask for it.
16. Contact us
Questions, requests or complaints about privacy: hello@corrid.ai, attention Hemanth Nunna, CEO and privacy officer.
Corrid Inc., 350 Burnhamthorpe Rd W, Suite 200, Mississauga, ON L5B 3J1, Canada · hello@corrid.ai