Overview & Who We Are
CannBus.org ("CannBus," "we," "us," or "our") operates a business-to-business (B2B) platform designed exclusively to serve the licensed cannabis industry. Our platform provides cannabis-related businesses — including wholesalers, distributors, manufacturers, and service providers — with tools to create verified business profiles, generate wholesale leads, build product catalogs, and connect with other industry professionals.
In addition to the membership and directory services, CannBus publishes summaries of cannabis laws at the state, federal, and international levels, as well as market reports and cannabis industry publications. Our users are business professionals and licensed entities operating in regulated cannabis markets across the United States, Canada, Mexico, Puerto Rico, and other jurisdictions.
This Privacy Policy applies to all personal information we collect through our website at cannbus.org, our membership services, our publications, and any related digital services we operate (collectively, the "Services"). Please read this policy carefully. If you do not agree with our practices, please do not use our Services.
Information We Collect
We collect information in three primary ways: information you provide directly to us, information collected automatically when you use our Services, and information obtained from third-party sources.
A. Information You Provide to Us
- Account Registration: Name, email address, job title, and password when you create a CannBus account
- Business Profile Data: Company name, business address, phone number, license numbers, product categories, wholesale offerings, business description, and contact preferences for your public or member-facing business profile
- Membership & Billing Information: Payment details (processed via a third-party payment processor — we do not store full card numbers), billing address, and subscription plan selections
- Communications: Messages, inquiries, and correspondence you send to us via email, contact forms, or in-platform messaging tools
- Publications & Downloads: Contact information you may provide when accessing gated market reports or subscribing to cannabis law updates and newsletters
- Verification Documents: Cannabis business license details, regulatory registration numbers, or other documentation we may request to verify your business eligibility for membership
- User-Generated Content: Reviews, comments, forum posts, or other content you submit through the platform
B. Information Collected Automatically
- Log & Usage Data: IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, and features accessed
- Device Information: Device type, screen resolution, and unique device identifiers
- Session Data: Login timestamps, session duration, and clickstream data within the platform
- Location Data: General geographic location inferred from your IP address (not precise GPS location)
- Cookies & Tracking Technologies: Data collected via cookies, web beacons, and similar technologies (see Section 6 for full details)
C. Information from Third Parties
- Payment Processors: Transaction confirmation and billing status from our payment service providers
- Business Verification Services: Public licensing databases and regulatory registries used to verify cannabis business credentials
- Analytics Providers: Aggregated usage and behavioral data from analytics service providers
- Referring Partners: If you arrive via a referral link or partner integration, we may receive basic referral source data
How We Use Your Information
We use the information we collect for the following purposes, always in a manner consistent with applicable law and this policy:
Platform Operation
To create and maintain your account, power business profiles and product catalogs, enable lead generation tools, and deliver our core membership services.
Business Verification
To verify that members are licensed cannabis businesses operating in compliance with applicable state, provincial, or national regulations.
Publications & Reports
To deliver cannabis law summaries, market reports, regulatory updates, and other industry publications you have requested or subscribed to.
Communications
To respond to your inquiries, send service updates, billing notices, product announcements, and marketing communications (where you have consented).
Analytics & Improvement
To analyze usage patterns, understand how features are used, identify technical issues, and continuously improve the platform experience.
Security & Compliance
To detect, investigate, and prevent fraudulent activity, unauthorized access, and other violations of our Terms of Service and applicable law.
We rely on the following legal bases to process your personal information: contract performance (to fulfill our membership agreement with you), legitimate interests (to improve our Services and prevent fraud), legal obligation (to comply with applicable laws), and consent (for marketing communications and certain optional features).
Membership & Business Profile Visibility
A key feature of CannBus is the ability for licensed cannabis businesses to create detailed, searchable profiles that are visible to other platform members and, depending on your settings, to the public. It is important to understand the visibility implications of information you add to your profile.
Public Profile Information
By default, certain elements of your business profile — such as your company name, business category, geographic region, product types, and general contact information — may be visible to other CannBus members and potentially to the general public. This visibility is the core mechanism through which lead generation and industry networking functions operate.
Lead Generation & Messaging
When other CannBus members contact you through our lead generation or in-platform messaging tools, we facilitate that communication. We may retain records of these communications as described in Section 7 (Data Retention). You are responsible for how you handle any business communications you conduct through the platform.
Product Catalogs
Product catalog data you upload — including product names, descriptions, images, pricing ranges, and specifications — is treated as business information you are publishing for wholesale discovery purposes. This data is accessible to members and, depending on your settings, may be indexed by search engines.
How We Share Your Information
CannBus does not sell your personal information to third parties. We share information only in the limited circumstances described below:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Other CannBus Members | Business profiles and product catalogs are shared with verified members to facilitate B2B discovery and lead generation | Controlled by your privacy settings; members must agree to our Terms of Service |
| Service Providers | Cloud hosting, email delivery, payment processing, analytics, customer support tools | Bound by data processing agreements; limited to what's needed to perform the service |
| Payment Processors | Processing membership subscriptions and billing | PCI-DSS compliant; we do not store full payment card data |
| Analytics Providers | Understanding platform usage and improving performance | Data is aggregated or pseudonymized where possible |
| Legal & Regulatory | Compliance with court orders, subpoenas, legal process, or law enforcement requests | Only when legally required; we will notify you where permitted by law |
| Business Transfers | In the event of a merger, acquisition, or sale of business assets | Successor entity must honour this policy or provide equivalent protections |
We require all third-party service providers to maintain appropriate security measures and to use your personal data only for the specific purposes for which it was shared.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies to operate and improve the CannBus platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you use our Services.
Types of Cookies We Use
- Essential Cookies: Strictly necessary for the platform to function — enabling login sessions, security protections, and core features. These cannot be disabled without breaking core functionality
- Functional Cookies: Remember your preferences, such as your preferred view settings, saved filters, and language preferences
- Analytics Cookies: Collect anonymized data about how visitors use our platform (pages viewed, features used, session duration) to help us improve the experience. We use tools such as Google Analytics
- Marketing Cookies: Track your activity to help us deliver relevant communications and understand the effectiveness of our outreach. Used only with your consent
Your Cookie Choices
You can manage your cookie preferences through your browser settings or through our cookie consent tool when you first visit our site. Please note that disabling non-essential cookies may affect certain features of the platform. Most browsers allow you to refuse cookies or delete existing ones through your browser settings menu.
For information about opting out of Google Analytics specifically, visit: tools.google.com/dlpage/gaoptout
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to maintain your account, to comply with legal obligations, resolve disputes, and enforce our agreements.
- Active Accounts: Personal and business data is retained for the duration of your active membership
- After Account Closure: We retain certain information for up to 3 years after account closure for legal, audit, fraud-prevention, and business continuity purposes
- Transaction Records: Billing and payment transaction records are retained for a minimum of 7 years to comply with financial and tax regulations
- Communications: Support communications are retained for up to 3 years from the date of last contact
- Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely as it cannot be used to identify you
- Legal Holds: If your data becomes relevant to a legal claim or regulatory investigation, we may retain it beyond the standard retention periods until that matter is resolved
When we no longer have a legitimate need to process your information, it is securely deleted or anonymized in accordance with our data disposal procedures.
Data Security
We take the security of your personal information seriously and implement a range of technical and organizational measures designed to protect your data against unauthorized access, disclosure, alteration, or destruction.
- Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security / HTTPS)
- Encryption at Rest: Sensitive data stored in our databases is encrypted using industry-standard encryption methods
- Access Controls: Access to personal data is restricted to authorized staff on a need-to-know basis, with role-based access controls and audit logging
- Payment Security: Payment card data is processed by PCI-DSS certified third-party processors. We do not store, process, or transmit full card numbers on our own servers
- Security Monitoring: We monitor our systems for suspicious activity, unauthorized access attempts, and potential vulnerabilities
- Vendor Security: We require our service providers to maintain appropriate security standards through contractual obligations
- Incident Response: We maintain a data breach response plan and will notify affected users and relevant authorities as required by applicable law in the event of a breach
Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal information. We are committed to honoring these rights promptly and transparently.
- Right to Access: Request a copy of the personal information we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete personal information. You can update most profile information directly within your account settings
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information, subject to our legal retention obligations and legitimate business interests
- Right to Restriction: Request that we limit how we use your personal information in certain circumstances
- Right to Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format
- Right to Object: Object to our processing of your personal information for direct marketing or where we rely on legitimate interests as our legal basis
- Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing
- Do Not Sell / Do Not Share (CCPA/CPRA): California residents have the right to opt out of the "sale" or "sharing" of personal information. CannBus does not sell personal information. For CCPA opt-out requests, contact us using the details in Section 15
To exercise any of these rights, please contact us at support@cannbus.org. We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing certain requests.
Marketing Communications
You may opt out of marketing emails at any time by clicking the "unsubscribe" link in any marketing email we send you, or by contacting us directly. Please note that you will continue to receive essential transactional and service-related communications even after opting out of marketing messages.
Cannabis Industry — Special Notice
Cannabis regulations vary significantly by jurisdiction. By using CannBus, you represent and warrant that your business is operating in compliance with all applicable cannabis laws in the jurisdictions where you are licensed and operate. CannBus does not provide legal advice. Our law summaries and publications are for informational purposes only and should not be relied upon as legal counsel.
License Verification Data
When you provide cannabis license numbers, regulatory registration details, or other compliance credentials to CannBus for membership verification purposes, this information may be cross-checked against publicly available government licensing databases. We handle this information with appropriate care and use it solely for the purpose of verifying your eligibility to participate in the CannBus platform.
Publication Accuracy Disclaimer
Our cannabis law summaries, market reports, and regulatory publications are prepared to the best of our ability based on publicly available information. Cannabis laws change frequently. We do not warrant the accuracy, completeness, or timeliness of any legal or regulatory information published on our platform. Always consult a qualified attorney for legal advice specific to your situation.
Children's Privacy
CannBus is a business-to-business platform for the cannabis industry. Our Services are strictly intended for adults aged 21 years and older (or the minimum legal age in your jurisdiction) who are employed by or operate licensed cannabis businesses.
We do not knowingly collect personal information from anyone under the age of 21. If we become aware that we have inadvertently collected personal information from a person under 21, we will take immediate steps to delete that information from our systems. If you believe we have collected data from a minor, please contact us immediately at support@cannbus.org.
Third-Party Links & Integrations
Our platform may contain links to third-party websites, regulatory portals, government databases, industry publications, and external resources. Our cannabis law summaries frequently reference and link to official government agency websites and legal databases.
These third-party sites are governed by their own privacy policies and terms of service, which we do not control. We encourage you to review the privacy policy of any third-party site you visit. CannBus is not responsible for the privacy practices, content, or security of external websites or services.
If you connect any third-party tools or integrations with your CannBus account, please be aware that those integrations are governed by the third party's terms and privacy policy. We only share data with third-party integrations to the extent necessary to provide the integration you have requested.
International Users
CannBus is operated in the United States and covers cannabis market information across the US, Canada, Mexico, and Puerto Rico. If you access our Services from outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your home country.
Canadian Users
If you are located in Canada, we process your personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You have the right to access, correct, and request deletion of your personal information held by us.
California Residents (CCPA/CPRA)
California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the rights described in Section 9. CannBus does not sell personal information. To submit a California privacy request, contact us at support@cannbus.org with the subject line "California Privacy Request."
Other Jurisdictions
Users in Mexico and other jurisdictions should be aware that local data protection laws (such as Mexico's Ley Federal de Protección de Datos Personales en Posesión de los Particulares) may grant additional rights. We strive to comply with applicable local privacy laws and will respond to legitimate privacy requests from all jurisdictions we serve.
Changes to This Privacy Policy
The cannabis industry and its regulatory environment change rapidly, and our platform and business practices evolve accordingly. We may update this Privacy Policy from time to time to reflect changes to our Services, changes in applicable law, or changes in industry best practices.
When we make material changes to this policy, we will:
- Update the "Last Updated" date at the top of this page
- Post a prominent notice on our website or within the platform for a reasonable period
- Send an email notification to registered members for significant changes that materially affect how we handle your personal information
Your continued use of CannBus after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your information. The date at the top of this document always reflects when the policy was last modified.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, your personal information, or CannBus's data practices, please do not hesitate to contact us. We are committed to addressing your privacy questions promptly and transparently.
🌿 CannBus Privacy Contact
Our support and compliance team is here to help with any privacy-related questions or requests, including access requests, deletion requests, and concerns about how your data is being used.
This Privacy Policy was prepared for CannBus.org and reflects our practices as of the effective date shown above. This document does not constitute legal advice. Businesses with specific compliance questions regarding CCPA, PIPEDA, or other applicable privacy regulations should consult a qualified privacy attorney.