Privacy notice

What we collect

Your account. Email address, and a password we never store in readable form. Your name and country of residence if you give them, your interface language, and whether you have turned on two-step sign-in. If you have, the shared secret is encrypted before it is stored.

Your answers. Everything entered in the questions: what you plan to study or do, what it costs, where your money is, who is sponsoring you, the accounts it sits in and the deposits into them.

Your documents. Bank statements, letters, admission and identity documents you upload.

Payments. Amount, currency, tier and the payment provider's reference. Card details never reach Corridor; the payment is taken by Paystack on their own pages.

A record of access. Every time a document is read, we write down who read it and when, including the address they read it from. That includes your own reads. The question worth answering later is not only who else looked, but who looked at all.

How documents are held

• They go into a private store, and every upload must be encrypted at rest — an unencrypted file cannot be written even by mistake.
• They are reached only through links that expire, issued when someone with permission asks for them.
• They are scanned for malware before anything reads them. If the scanner cannot be reached, the upload fails rather than skipping the scan.
• Every read is recorded, as above.

How documents are read

A generated PDF is read from the text layer inside it and never goes near character recognition. A photograph or a scan is read by recognition software running on our own server. Only pages that software cannot read may be sent to an outside recognition service, and only where the operator has configured one.

A figure the software is not confident about does not reach the assessment. It goes to a review queue instead, and a statement that fails reconciliation drags down every figure taken from it.

The AI layer, and your consent

The assessment itself is arithmetic. Rules calculate every number you see; no language model produces a figure that reaches you. The AI layer only puts the result into sentences.

Nothing is sent to it without your explicit consent, recorded with the time you gave it. You can withdraw that consent in Settings, and the explanations stop; the assessment still works, because it never depended on them.

Your data is not used to train any model unless you separately switch that on. It is off unless you turn it on.

Who else sees it

• The payment provider, for payments you make.
• The AI provider, for explanation only, and only with your consent.
• The email provider, to send you the messages you expect.
• The storage provider, which holds the encrypted files and an encrypted copy of the database.
• An outside recognition service, only for pages our own software could not read, and only if one is configured.
• An adviser, only where you engage one, and only for your case.
• Corridor staff, whose reads are recorded like anyone else's.

We do not sell your information, and we do not share it for advertising.

Cookies

Two, both necessary: __Host-corridor_session keeps you signed in, and corridor_locale remembers whether you are reading in English or French. Corridor sets no advertising or analytics cookies.

How long we keep it

You choose. The default is one year, and you can set anything between 30 and 3650 days in Settings. The period counts from your last activity. When it passes, we email you and your account is deleted 14 days later, exactly as if you had asked, unless you sign in and cancel.

You can ask us to delete your account at any time. There is a 14-day grace period, during which you can change your mind and cancel. After it, your documents leave the store before any database row is touched, and your account record is emptied of everything personal. What remains is an anonymous row, kept so that payments and the record of who accessed what still have a valid owner — a deletion that erased the audit trail would destroy the very thing that protects you. One exception: if an adviser ended work on your file because they came to suspect a document was not genuine, that case is kept with the record of which document and why, so that a deletion cannot erase the reason for that decision.

The database is copied every night so that a fault cannot lose your file. Each copy is kept for 14 days, on our server and, encrypted, with the storage provider, and then deleted. So a deletion reaches every copy 14 days after it takes effect, not on the day.

What you can do

• See and correct your answers, at any point before an assessment is paid for and locked.
• Download a copy of what we hold about you, from Settings, as one file. Your documents and printed reports are listed in it, with what was read from each; the files themselves open from their application.
• Withdraw consent for AI explanation, and switch off any use for model training.
• Change how long we keep your data.
• Ask for deletion, and cancel that request during the grace period.
• Sign out everywhere, which ends every other session immediately.

Keeping it safe

Traffic runs over TLS. Passwords are hashed, not stored. Two-step sign-in is available and worth turning on. Sessions can be revoked everywhere at once. Secrets such as the two-step key are encrypted before they are written down.

Ghana's data protection law

Corridor is operated from Ghana by BizAccess Consult, which is the data controller for everything described on this page: it decides what is collected and why, and it is answerable for it. The Data Protection Act 2012 (Act 843) applies, and gives you rights over your own data, including access, correction and deletion. The section above is how to exercise them inside the product, including downloading a copy of what we hold about you.