Privacy Policy

Cannect is a platform for licensed cannabis brands, retailers, and their authorized representatives to manage activations, bookings, sales reporting, and communications. It also includes Cannections (cannections.cannect.io), a public consumer-facing directory of cannabis pop-ups, events, and deals. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Account information: Name, email, phone number, company name, role, license numbers, and authentication credentials.

Business data: Store and dispensary information, event schedules, sales reports, inventory data, product catalogs, pricing, orders, and messages exchanged between users.

Usage data: Log data, device/browser information, IP address, pages viewed, and actions taken within the platform.

Location data: With permission, we collect location data for features like rep check-in and route planning.

Communications: Emails, SMS messages, and in-app messages sent or received through the platform.

We use the information we collect to:

• Provide, operate, and improve the Service;
• Authenticate users and manage accounts;
• Facilitate scheduling, reporting, and communications between brands and retailers;
• Process payments and invoices (where enabled);
• Send service notifications, reminders, and support responses;
• Monitor platform health, security, and fraud; and
• Comply with legal obligations and enforce our agreements.

We process personal information based on the necessity to perform our contract with you, comply with legal obligations, protect legitimate business interests (such as security and fraud prevention), and where you have given consent (for example, for location access or marketing communications).

We do not sell personal information. We share information only in the following circumstances:

• Between users: Information you add to events, orders, or messages is shared with the other party (brand or retailer) as needed for the Service to function.
• Service providers: We use trusted third-party providers for hosting, authentication, email, SMS, payments, analytics, and cloud services. These providers are contractually bound to use information only to perform services on our behalf.
• Legal compliance: We may disclose information if required by law, subpoena, or to protect our rights and safety.
• Business transfers: If Cannect is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

Cannect relies on the following categories of service providers to host and operate the platform. Current providers include, but are not limited to:

• Cloud infrastructure and database: Lovable Cloud / Supabase
• Email and messaging: Gmail, Twilio, and connected email providers
• Payments and accounting: Stripe and QuickBooks Online (where connected by a brand)
• Analytics and error reporting: Google Analytics, Lovable analytics
• Maps and geolocation: Google Maps Platform

The list of subprocessors may change as we add or replace providers. We will update this page when we make material changes.

We use cookies and similar technologies to keep you signed in, remember preferences, understand how the platform is used, and improve the experience. You can control cookies through your browser settings. Analytics data is aggregated and not used to identify individual users.

We retain your information for as long as your account is active and as needed to provide the Service. After account closure, we generally delete or anonymize personal information within 30 days, unless a longer retention period is required by law, tax obligations, or to resolve disputes. Business records such as invoices and audit logs may be kept longer where legally required.

We use industry-standard security measures, including encryption in transit, role-based access controls, and regular access review. However, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information. To exercise these rights, contact us at admin@cannect.io. We will respond within a reasonable timeframe and in accordance with applicable law.

The Service is intended for users who are at least 21 years old. The Cannections consumer directory is age-gated at entry and is not intended for anyone under 21. The business tools are intended for authorized representatives of licensed cannabis businesses. We do not knowingly collect information from individuals under 21.

The Service is operated in the United States. If you access the Service from outside the United States, you consent to the transfer, storage, and processing of your information in the United States.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy-related questions or requests, contact admin@cannect.io.