Privacy Policy

Working draft — subject to final legal review. Placeholders in brackets are to be completed.

1. Who is responsible for your data

Koridora (“the Platform”, “we”, “us”) is operated by [COMPANY LEGAL NAME], [COMPANY REG. NUMBER], [REGISTERED ADDRESS], the controller of your personal data. For anything related to your data, contact us at info@koridora.com.

2. What we collect

Account data: your name, email address and password (stored only as a secure hash), plus — if you provide them — your phone number (used for WhatsApp/Viber contact between users), company name, postal address, EU VAT number together with the legal name returned by the official VIES check, and your language preference.

Listing data: the trips you post (origin and destination city, dates, vehicle, capacity note, and the driving route computed between the cities) and the shipments you post (cities, the precise pickup and drop-off addresses if you choose one, item title and description, weight, dates, budget).

Activity data: the introductions made between you and other users, your clicks on WhatsApp/Viber contact buttons (which channel and when — the conversation itself happens outside the Platform), the quotes you send and receive, and the reviews you write and receive.

Technical data: session information such as your IP address and browser type, kept only to run secure logins. Analytics and advertising data are collected only if you consent (see section 5).

3. Why we process it (legal bases)

To provide the service (contract performance, Art. 6(1)(b) GDPR): running your account, publishing your listings, matching trips and shipments along route corridors, exchanging quotes, introducing senders and carriers, and sending the transactional emails that these features need.

Legitimate interest (Art. 6(1)(f) GDPR): keeping the marketplace trustworthy and safe — reviews, verification badges, abuse prevention, and recording contact click-throughs so the introduction flow works.

Consent (Art. 6(1)(a) GDPR): analytics and advertising cookies. These are off by default and only activate if you accept them. You can withdraw consent at any time.

4. Who processes data for us

We use Google Maps Platform (Places, Directions, Maps) to look up addresses and compute driving routes — the locations you enter are sent to Google for this purpose. The contact form is protected by Google reCAPTCHA. If you consent to cookies, Google Analytics 4 and Google Ads measure how the site is used.

The Platform runs on servers we control, with regular encrypted backups stored with a cloud storage provider. Transactional emails (verification, notifications) are delivered through an email service provider. All processors act on our instructions under data processing agreements.

Conversations you start on WhatsApp or Viber happen outside the Platform and are governed by those services’ own privacy policies.

5. Cookies, analytics and consent

We use one essential cookie to keep you logged in. Analytics and advertising cookies are denied by default (Google Consent Mode v2) and only activate after you accept them in the cookie banner.

Your cookie choice is stored in your own browser (localStorage), not on our servers. To change it, clear the site data in your browser and choose again when the banner reappears.

6. How long we keep data

We keep your account data for as long as your account exists. When you delete your account, it is anonymized: your open trips and shipments are removed, and your name, email, phone, company, address and VAT details are permanently overwritten. Records of completed transports and the reviews other users wrote remain — no longer linked to an identifiable person, shown as “Deleted user”.

Backup copies expire automatically on a rolling schedule, so anonymized data also disappears from backups over time.

7. Your rights

You can access and take your data with you: download everything we store about you as a JSON file from Settings → Security (“Download my data”). You can correct your details at any time in Settings, and erase your personal data by deleting your account (see section 6).

You also have the right to object to or restrict processing based on legitimate interest, to withdraw consent at any time, and to lodge a complaint with the data protection supervisory authority in your country. To exercise any right, email info@koridora.com.

8. No sale of data, no automated decisions

We never sell your personal data. We make no automated decisions and build no profiles that produce legal or similarly significant effects for you.

9. Contact and changes

Questions about this policy or your data: info@koridora.com. If we change this policy materially, we will announce it on this page with a new version and date.