Privacy Policy

1. Scope

This policy applies to information processed when you visit public CannaXchange pages, create or use an account, submit an operator application, list inventory, bid, manage deals, contact support, or otherwise use the marketplace service.

2. Information We Collect

Depending on how you use the service, we may collect:

• Account information such as name, email address, phone number, and password credentials processed through authentication systems.
• Business and company information such as legal or trade names, company type, addresses, and related operator details you submit.
• Cannabis license information such as license numbers, license type or status details, and uploaded license documentation provided for eligibility review.
• Profile and contact information associated with your user profile and company contacts.
• Listings and product information including inventory descriptions, quantities, pricing inputs, media, certificates of analysis, and related documents.
• Bids and marketplace activity such as bids, auction participation, deal records, and related marketplace events.
• Support communications you send through Help, Feedback, Support, or Contact flows.
• Technical and device information such as IP address, user agent, request metadata, and security or audit logs generated while operating the service.
• Cookies and session information used to maintain authenticated sessions and certain local browser preferences needed for the product experience.

We do not claim collection of categories of information that the application does not support.

3. How We Use Information

We use information to:

• create and operate accounts;
• review marketplace eligibility and operator applications;
• provide Buy and Sell marketplace functionality;
• operate listings, auctions, bids, and deal coordination features;
• send service, security, and account-related communications;
• support fraud prevention, abuse prevention, and platform security;
• maintain, troubleshoot, and improve the service;
• comply with legal obligations and enforce platform rules.

4. How Information Is Shared

We may share information with service providers that help host, authenticate, store, operate, secure, or communicate about the service. We may also share information when required by law, to protect rights and safety, or in connection with a business transfer if one occurs.

We do not sell personal information as a consumer data brokerage practice. Marketplace counterparties may receive information necessary to evaluate or complete marketplace activity as described below.

5. Marketplace Information

Certain information you intentionally submit for marketplace use—such as active listing details, bidding activity visible in product workflows, or deal coordination details—may be visible to eligible marketplace users according to then-current authorization rules.

Draft or otherwise non-public listing content remains subject to the product’s existing authorization controls and is not treated as broadly public marketplace content.

6. Service Providers

CannaXchange uses infrastructure and operational providers for hosting, database and authentication services, and transactional email delivery as needed to run the platform. These providers process information only as needed to provide their services to us.

7. Cookies and Similar Technologies

CannaXchange uses session cookies to maintain authenticated access. Session tokens are stored in HTTP-only cookies managed by the application backend. The browser may also store limited local preferences used by the product interface, such as temporary draft or UI state values. We do not currently operate a separate third-party marketing analytics pixel suite on the public site.

8. Data Security

We use administrative, technical, and organizational safeguards designed to protect marketplace information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain information for as long as needed to operate the service, support account and marketplace records, address disputes or security issues, and meet legal or operational requirements. Fixed retention periods are not published here because they may vary by record type and legal need.

10. Account Deletion / User Choices

You may update certain account and notification preferences through available product settings, including email notification preferences where offered. Password reset is available through the sign-in flow.

Self-service account deletion is not currently offered in the product interface. To request correction of account information or discuss account closure options, contact us through Support.

11. Children’s Privacy

CannaXchange is a business-to-business marketplace for licensed cannabis operators and is not directed to children or minors. We do not knowingly collect personal information from children for marketplace participation.

12. U.S. / Massachusetts Context

CannaXchange is operated in a United States / Massachusetts marketplace context for licensed cannabis operators. Information may be processed in the United States. Additional privacy rights may apply depending on your location and role; contact us to make a request.

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above. Continued use of the service after an update means you acknowledge the revised policy, except where applicable law requires additional notice or consent.

14. Contact

Questions about this Privacy Policy can be sent through the CannaXchange Support or Contact pages.