Privacy policy.

Who we are

Mentioned.ca (“Mentioned,” “we,” “our,” or “us”) is a Canadian business directory operated by Culturis. We are based in Ottawa, Ontario. Our contact email is hello@mentioned.ca.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the rights you have over it under the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial equivalents.

What we collect

Information you actively provide

• Account information when you claim or create a business listing: your name, email, business name, business category, address, phone number, website, and optional founder profile fields.
• Cultural community identification if you choose to self-declare on your business profile. This is always optional.
• Funding match data when you complete the funding match form: business stage, ownership, age bracket, province, and capital needed. This data is stored under a separate consent and never joined to your public profile.
• Contact and newsletter signups: your email address.

Information about businesses without your action

Mentioned seeds the directory with “ghost profiles”. Basic business records compiled from publicly available sources such as municipal business registries, the Canada411 directory, chamber of commerce listings, and Google Business listings. These ghost profiles contain only public business information: business name, category, address, phone number, and website. No personal information about owners is included until a business owner actively claims their profile.

Information collected automatically

• Standard server logs (IP address, browser type, referring page, timestamps) for security and basic analytics.
• Cookies and similar technologies as described in our Cookies Policy.

Why we collect it

We collect personal information only for the purposes identified at the time of collection. Specifically:

• To operate your business listing and account.
• To match your business with relevant funding programs through our funding match engine.
• To send you transactional emails (claim confirmations, mention notifications, edge confirmations).
• To send Mentioned Weekly newsletter content only if you have opted in.
• To respond to your contact form submissions.
• To improve the platform, identify security threats, and prevent fraud.

We do not sell personal information. We do not share personal information with advertisers. We do not use personal information to train artificial intelligence models. We do not use personal information for purposes other than those listed in this section without your additional consent.

How we store and protect it

Personal information is stored on Canadian servers hosted by Rebel.com in compliance with Canadian data residency expectations. The funding match data table is isolated from the public profile data and accessible only to authenticated users viewing their own records.

We use industry-standard security measures including HTTPS encryption for all data in transit, password hashing for account credentials, server-level firewall protection through Imunify360, and regular security audits.

No system is completely secure, but we will notify affected users within 72 hours if a data breach affecting personal information occurs, in accordance with PIPEDA’s mandatory breach notification requirements.

Who we share it with

We share personal information only with service providers necessary to operate the platform, and only the minimum information required:

• Rebel.com. Hosting infrastructure (server-side data, Canadian jurisdiction)
• Brevo. Email and newsletter delivery (Culturis-shared CRM; contacts stored with explicit consent timestamps)
• Stripe. Payment processing for paid subscriptions (only payment information, governed by Stripe’s own privacy policy)
• Google Fonts. Typeface delivery (no personal data. Only your browser’s font requests)

We do not share personal information with Anthropic, OpenAI, or any AI model provider for training purposes.

Your rights under PIPEDA

You have the following rights regarding your personal information:

• Right to access: You can request a copy of all personal information we hold about you.
• Right to correction: You can correct inaccurate or incomplete information.
• Right to deletion: You can request full deletion of all personal data at any time. We will execute deletion within 30 days of a verified request.
• Right to withdraw consent: You can withdraw consent for any optional use of your information at any time.
• Right to complain: You can file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

To exercise any of these rights, email hello@mentioned.ca with the subject line “Privacy request.”

What happens when you delete your account

When you delete your Mentioned account, the following occurs in a single transaction:

• All founder profile fields are cleared
• Your funding match records are deleted
• Your business-to-business relationship records are anonymized (the structure is retained for other users’ graph integrity, but your business name and identifying information are removed)
• Your community recommendations remain in the count totals but are not attributable to you
• Your active subscription is cancelled
• Your WordPress user account is deleted
• The business listing reverts to a ghost profile (public business information only, no personal data)

You can also request complete removal of the business listing entirely. In which case the ghost profile is also deleted.

Changes to this policy

We may update this Privacy Policy as the platform evolves. If we make material changes, we will notify registered users by email at least 30 days before the changes take effect. The “Last updated” date at the top of this page always reflects the current version.

Contact

For any privacy-related questions or to exercise your rights, contact:

Mentioned.ca Privacy
Culturis
Ottawa, Ontario
hello@mentioned.ca