Mehrana Marketing ("Mehrana", "we", "us", or "our") respects your privacy. This policy explains what personal information we collect when you visit mehrana.agency or work with us, how we use it, and the choices you have. It is written to align with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Information we collect
We collect information you give us directly — such as your name, business name, email address, phone number, and any details you include in a form, audit request, or message. When you use our site we also collect limited technical information automatically, including your IP address, browser type, pages viewed, and referring URLs, through privacy-respecting analytics.
We do not knowingly collect sensitive information such as financial account numbers, government identifiers, or health data through this website, and we ask that you do not submit it through our forms.
How we use your information
We use your information to respond to enquiries and audit requests, to provide and improve our services, to send you information you have asked for, to operate and secure our website, and to meet legal and accounting obligations. We process this information on the basis of your consent and our legitimate interest in running our business.
Cookies and analytics
We use a small number of cookies and similar technologies to keep the site working and to understand, in aggregate, how it is used. You can decline non-essential cookies through the banner shown on your first visit and control cookies through your browser settings. Declining them will not break the core site.
How we share information
We do not sell your personal information. We share it only with service providers who help us operate (for example hosting, email delivery, and analytics), and only to the extent they need it to perform that work. We may also disclose information where required by law or to protect our rights. Where providers are located outside Canada, your information may be processed in those jurisdictions.
Messages, lead forms and social accounts we handle for businesses
Some businesses use our platform, Patrick, to answer their customer messages on channels such as WhatsApp, Facebook Messenger, Instagram, and website chat. If you message one of those businesses, we receive the content of your message and basic profile details (such as your name and platform identifier) through the messaging platform's APIs — for example Meta's WhatsApp Business Platform and Messenger APIs — and we process them on behalf of that business.
This information is used only to generate a reply (message text is processed by an AI service, Google's Gemini API, to draft the response), to let the business's staff view and take over the conversation, and to keep a record of the conversation for that business. It is not used for advertising, is never sold, and is shared only with the service providers that make this work possible — such as our hosting provider and the AI service above.
Businesses can also connect their Facebook and Instagram lead forms (Lead Ads) to Patrick. If you fill in one of those forms, we receive what you entered — such as your name, email address, phone number and answers — through Meta's Lead Ads API and keep it for that business so its staff can follow up with you. For leads that came from a Meta ad, we may also tell Meta how the enquiry progressed (for example, that a meeting was booked), identified by Meta's lead ID and a hashed copy of your email address and phone number, so the business can measure and improve its ads.
Some businesses also use Patrick to schedule and publish posts on their Facebook Pages, Instagram accounts and Threads accounts. When someone authorises such a connection, we keep the account's name, an encrypted access token, and the ID Meta gives the person who authorised it, and we use them only to publish posts and read their results for that business.
The business you messaged or sent a form to controls those records. To have your messages or form details corrected or deleted, contact that business directly, or contact us using the details below and we will action it with them. If you remove our app in your Facebook, Instagram or Threads settings and ask Meta to delete your data, Meta tells us and we automatically delete the account connections and access tokens you authorised; Meta then gives you a link showing what was deleted. Meta identifies lead form submissions and messages differently, so that request does not reach them — contact the business or us to have those deleted.
Data retention
We keep personal information only as long as needed for the purposes described here or as required by law, after which we securely delete or anonymise it.
Your rights
You may ask us to access, correct, or delete the personal information we hold about you, and you may withdraw your consent at any time, subject to legal and contractual limits. To make a request, contact us using the details below. You also have the right to complain to the Office of the Privacy Commissioner of Canada.
Security
We use reasonable administrative, technical, and physical safeguards to protect your information. See our Security & Privacy page for more detail on how we protect data.
Changes to this policy
We may update this policy from time to time. The "last updated" date above reflects the most recent change. Material changes will be posted on this page.
Contact us
If you have any questions about this policy or your information, contact us: Mehrana Marketing, 120 Eglinton Ave E, Toronto, Ontario, Canada. Email [email protected] or call +1 (647) 800-9345.