Introduction

WeedShelf (“we,” “us,” or “our”) operates a cannabis brand intelligence platform that provides market data, analytics, and actionable insights to licensed cannabis brands. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at weedshelf.net and related services.

Information We Collect

• •Account information: Name, email address, company/brand name, and role when you create an account or request a demo.
• •Payment information: When you subscribe, card details are tokenized by Authorize.net and never touch our servers. We store only the last four digits of your card and card brand for display purposes.
• •Usage data: Chat queries, the pages you open and how long they are on screen, the links and buttons you click, and the settings you change, to improve our service and provide accurate billing. For a text field we record its label and how many characters were entered, never what you typed. Password and payment fields are never recorded. See “Product analytics and session recording” below.
• •Wholesale data you provide: If you upload sales invoices or wholesale data, we store and process this information to enhance your analytics and insights.
• •Contact form submissions: Name, email, brand name, state, and message when you submit our contact or demo request form.

How We Use Your Information

• •To provide, maintain, and improve our cannabis brand intelligence platform
• •To process subscriptions, billing, and payments
• •To generate personalized market intelligence, alerts, and recommendations for your brand
• •To send email digests, alerts, and service communications
• •To respond to your inquiries and provide customer support
• •To comply with legal obligations

Cannabis Industry Data

WeedShelf collects publicly available product and pricing information from licensed dispensary menus across Rhode Island. This data is publicly listed by dispensaries and includes product names, prices, quantities, and availability. We do not collect personal information about dispensary customers or patient data. All market intelligence is derived from publicly accessible dispensary menu information.

Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• •Service providers: With third-party providers who help operate our platform (Supabase for data storage, Authorize.net for payment processing, Resend for email delivery, Vercel for hosting, and PostHog for masked session recordings only).
• •Legal compliance: When required by law, regulation, or legal process.
• •Business transfer: In connection with a merger, acquisition, or sale of assets, with appropriate notice.

Product Analytics and Session Recording

We measure how our products are used in our own database rather than with a third-party analytics service. When you visit our pages we record which pages you open, how long they are visible, the links and buttons you click, where your visit came from (the referring site’s domain and any campaign tags in the link), and your device type, screen size and language. On our public pages a random visitor identifier is kept in your browser’s local storage, and a session identifier in its session storage that resets after 30 minutes of inactivity. Neither is a cookie, and clearing your browser’s site data removes them. When you are signed in, these records are tied to your account. We do not keep your IP address in these records.

When you are signed in, we also record your sessions with PostHog so we can see how the product is used and fix what is confusing. Recordings mask every input and all text on screen, block payment fields entirely, and identify you only by a random identifier, never your name or email address. We do not record sign-in, password or shared report pages. PostHog receives these recordings and nothing else. An AI model (Anthropic’s Claude) may write a short summary of a session for our internal review; those summaries are never shown to other customers.

WeedShelf Intelligence and the WeedShelf sales app are run by one team. If you use both, we may combine your usage records from the two to understand how they are used together. These records are for our own use in running and improving the products. They are never sold or shown to other customers, and activity in the dispensary portal is never shared with or aggregated into anything a brand sees. We keep usage records for 13 months.

Cookies & Tracking

We use essential cookies for authentication (Supabase session cookies) and age verification. Our product analytics use your browser’s local and session storage, not cookies. We do not use third-party advertising cookies or tracking pixels. We do not sell data to advertisers or participate in ad networks.

Data Security

We implement industry-standard security measures to protect your data. All data is transmitted over HTTPS with 256-bit SSL encryption. Payment data is handled in compliance with PCI DSS standards via Authorize.net's Accept.js — your card information is tokenized client-side and never passes through our servers. Database access is controlled through Row Level Security policies.

Your Rights

You have the right to:

• •Access and receive a copy of the personal data we hold about you
• •Request correction of inaccurate personal data
• •Request deletion of your personal data (subject to legal retention requirements)
• •Cancel your subscription at any time

To exercise any of these rights, contact us at the email address below.

Age Requirement

WeedShelf is a B2B platform designed for licensed cannabis industry professionals. Our service is restricted to individuals 21 years of age or older. We do not knowingly collect personal information from individuals under 21. If we learn that we have collected information from someone under 21, we will delete it promptly.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of WeedShelf after changes constitutes acceptance of the updated policy.