Current Future Labs Inc. ("we," "our," or "the Company") operates getcurrent.ca, app.getcurrent.ca, api.getcurrent.ca, and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Services.
By using our Services, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use our Services.
1. Information We Collect
1.1 Information You Provide
Account Information: When you create an account using third-party authentication, we receive your name, email address, and profile photo from the authentication provider. During onboarding, we collect your role, use case, and how you heard about us.
Contact Form Submissions: If you contact us through forms on our website, we collect your first name, last name, email address, and message.
Payment Information: Payment processing is handled entirely by our payment processor. We do not receive or store your credit card numbers. We maintain records of credits purchased and searches conducted.
1.2 Information Collected Automatically
When you use our Services, we automatically collect:
- Device information (browser type, operating system, device type)
- IP address and approximate location
- Pages visited and features used
- Session duration and referral sources
- Cookies and similar tracking technologies
1.3 Information from Third Parties
- We receive authentication data from our authentication provider when you sign in
- Our analytics providers provide aggregated usage data
- Our marketing platform provides form submission and interaction data
1.4 Business Data Retrieved Through the Service
Our Services retrieve information about businesses from Canadian business registries and other public sources. This Third Party Data (as defined in our Terms of Service) may include business names, registration numbers, director names, owners names, registered addresses, and other publicly available corporate information. We store your search history and results to provide the Service.
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve our Services
- Process transactions and send related communications
- Respond to your inquiries and provide customer support
- Send marketing communications (with your consent, where required)
- Analyze usage patterns to improve user experience
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations
- Enforce our Terms of Service
3. How We Share Your Information
We do not sell or rent your personal information. We share information only with:
Service Providers: We use third-party service providers to help operate our Services, including providers for:
- Cloud hosting and database infrastructure (primary hosting in Canada)
- Search and data processing infrastructure
- Authentication services
- Analytics and performance monitoring
- Customer relationship management
- Payment processing
- Internal communications
These providers are contractually bound to protect your information and use it only to provide services to us. A detailed list of our current service providers is available upon request by contacting privacy@getcurrent.ca.
Legal Requirements: We may disclose information if required by law, subpoena, court order, or government request, or to protect our rights, property, or safety.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
4. Data Storage and International Transfers
Our primary databases are hosted in Canada. However, some service providers operate globally and may process data in the United States or other jurisdictions.
When your data is transferred outside Canada, we ensure protection through:
- Contractual obligations with service providers requiring equivalent privacy protections
- Selection of providers that maintain appropriate security certifications and standards
- Data processing agreements that restrict use of your information to providing services to us
Your data remains subject to the privacy practices described in this Policy regardless of where it is processed.
5. Data Retention
We retain your information according to the following schedule:
| Data Type | Retention Period |
|---|---|
| Active Accounts | Account data retained while account remains active |
| Search History | 12 months from the date of each search |
| Inactive Accounts | Deleted or anonymized after 12 months of no activity |
| Terminated Accounts | 90 days for export/recovery, then deleted or anonymized |
| Billing Records | 7 years (Canadian tax requirements) |
| Server Logs | 90 days (security and debugging) |
| Marketing Contacts | Until unsubscribe, plus 30 days to process |
6. Cookies and Tracking Technologies
Cookies
We use cookies for the following purposes:
| Cookie Type | Purpose |
|---|---|
| Essential | Required for Services to function, including authentication and security |
| Functional | Remember your preferences and settings |
| Marketing | Track interactions with our marketing content |
You can control cookies through your browser settings. Disabling certain cookies may affect functionality.
Cookie Consent: When you first visit our website, you will be presented with a cookie notice allowing you to accept or decline marketing cookies. You can change your preferences at any time through your browser settings.
Analytics
We use privacy-friendly analytics that do not store cookies on your device.
Do Not Track: Our Services do not currently respond to "Do Not Track" browser signals. You can manage tracking preferences through your browser's cookie settings or by contacting us directly.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL)
- Secure authentication through trusted third-party providers
- Access controls limiting data access to authorized personnel
- Regular security assessments of our systems
- Secure hosting infrastructure with our service providers
No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
7.1 Breach Notification
In the event of a security breach involving your personal information that poses a real risk of significant harm, we will:
- Notify you as soon as feasible, and in any event consistent with the requirements of applicable law
- Report the breach to the Office of the Privacy Commissioner of Canada and any other applicable regulators
- Provide information about what occurred, the types of information involved, and steps you can take to protect yourself
We maintain records of all security incidents involving personal information for at least 24 months as required by PIPEDA.
8. Your Privacy Rights
Under Canadian privacy law (PIPEDA) and applicable provincial laws, you have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information (subject to legal retention requirements)
- Withdraw consent for certain processing activities
- Request information about our privacy practices
To exercise these rights, contact us at privacy@getcurrent.ca. We will respond within 30 days.
9. Marketing Communications
With your consent, we may send promotional emails about our Services. You can opt out at any time by:
- Clicking the unsubscribe link in any marketing email
- Contacting us at privacy@getcurrent.ca
Opting out of marketing does not affect transactional communications related to your account.
10. Children's Privacy
Our Services are intended for business professionals and are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly. If you believe we have collected information from a child, please contact us.
11. Third-Party Links
Our Services may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies before providing any information.
12. Additional Rights for Quebec Residents
If you are a resident of Quebec, you have additional rights under Law 25, including:
- The right to data portability in a commonly used format
- Enhanced consent requirements for certain processing
- The right to be informed of automated decision-making affecting you
Automated Decision-Making: We do not currently use fully automated decision-making that produces legal effects or significantly affects you without human involvement. Our Services provide decision support tools, but all final decisions remain with you. If this changes, we will update this Policy and provide appropriate notice.
To exercise these rights, contact us using the information below.
13. Additional Information for EU Residents
If you are located in the European Economic Area, you may have additional rights under the GDPR, including the right to lodge a complaint with a supervisory authority.
Our legal basis for processing includes:
- Performance of a contract: Providing the Services
- Legitimate interests: Improving our Services, security
- Consent: Marketing communications
- Legal obligations: Tax records, regulatory compliance
For EU-related inquiries, contact privacy@getcurrent.ca.
14. Additional Information for California Residents
If you are a California resident, you have rights under the CCPA/CPRA, including:
- The right to know what personal information we collect
- The right to delete your information
- The right to opt out of sales (we do not sell personal information)
- The right to non-discrimination for exercising your rights
To exercise these rights, contact privacy@getcurrent.ca.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email to the address associated with your account and by updating the "Last Updated" date above. Continued use of the Services after changes constitutes acceptance of the updated Policy.
16. Contact Information
For questions about this Privacy Policy or to exercise your privacy rights:
To contact the person responsible for the protection of personal information at Current Future Labs Inc., email privacy@getcurrent.ca.
We will respond to privacy inquiries within 30 days.
17. Additional Disclosures
Sensitive Personal Information: We do not intentionally collect sensitive personal information such as health data, religious beliefs, sexual orientation, or biometric data. Our Services are designed for business verification and do not require such information.
Profile Photos: When you authenticate via a third-party provider, we may receive your profile photo. This is used for display within your account interface and to identify you to teammates within your organization's shared workspace. Profile photos are not shared with third parties outside your organization or used for any other purpose.