Privacy Policy

CannaHauler LLC (“CannaHauler,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web portal, mobile applications (iOS and Android), Chrome extension, and related services (collectively, the “Services”). Our Services provide logistics management for cannabis product transportation with Metrc compliance documentation.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Services.

1. Information We Collect

1.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you register for our Services, including:

Account Information: Name, email address, phone number, company name, and username
Profile Information: Driver’s license information (for Driver Users), vehicle information, and employment details
Delivery Information: Pickup and delivery addresses, recipient information, and delivery instructions
Compliance Documentation: Metrc tracking information, manifest data, and other cannabis regulatory compliance information
Communications: Information you provide when contacting our support team or communicating through the Services

1.2 Information Automatically Collected

When you use our Services, we automatically collect certain information, including:

Location Data: For Driver Users, we collect precise geolocation data during active deliveries only. Location tracking is used to optimize routes, provide real-time delivery updates, and maintain compliance records. Location tracking stops when deliveries are not in progress.
Device Information: Device type, operating system, unique device identifiers, IP address, browser type, and mobile network information
Usage Data: Information about how you interact with our Services, including access times, pages viewed, features used, and clicks
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing activities. See Section 5 for more details.

1.3 Information from Third Parties

We may receive information from third-party services we integrate with, including:

Metrc: Cannabis tracking and compliance data required by state regulations
Mapping Services: Route and location data from Mapbox and Geoapify

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: To provide, maintain, and improve our logistics services, including route optimization, delivery tracking, and order management
Account Management: To create and manage your account, authenticate users, and provide customer support
Regulatory Compliance: To maintain Metrc compliance records, generate required documentation, and comply with state cannabis transportation regulations
Communication: To send you service-related notifications, updates, security alerts, and administrative messages
Safety and Security: To verify driver identities, monitor for fraudulent activity, and ensure the security of our Services
Analytics and Improvement: To analyze usage patterns, troubleshoot issues, and improve our Services’ functionality and user experience
Legal Obligations: To comply with applicable laws, regulations, and legal processes

3. How We Share Your Information

We may share your information in the following circumstances:

3.1 Within Our Platform

Between User Types: Order Portal Users can view driver information and delivery status; Driver Users can view delivery details; Transporter Users can manage operations and view all relevant information
Delivery Parties: We share necessary information with shippers and recipients to facilitate deliveries

3.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

Aeropay: Payment processing (you interact directly with Aeropay for payment transactions; we do not store your payment card information)
Google Cloud Platform (GCP): Cloud hosting and infrastructure services
Mapbox and Geoapify: Mapping, geocoding, and route optimization services
Analytics Providers: Services that help us understand how users interact with our platform

3.3 Regulatory and Legal Requirements

Metrc and State Agencies: We share compliance data as required by state cannabis regulations
Law Enforcement: When required by law or in response to valid legal requests
Legal Proceedings: To comply with court orders, subpoenas, or other legal processes

3.4 Business Transfers

If CannaHauler is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

3.5 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Data Retention

We retain your personal information indefinitely to maintain compliance records as required by cannabis regulations and to provide ongoing services. Specifically:

Compliance Data: Metrc tracking information and delivery manifests are retained indefinitely to meet regulatory requirements
Account Information: User account data is retained for the duration of your subscription and indefinitely thereafter unless you request deletion
Location Data: Historical location data from deliveries is retained indefinitely for compliance and dispute resolution purposes

You may request deletion of your personal information by contacting us at the email provided below, subject to our legal obligations to retain certain data for regulatory compliance.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. Cookies are small data files stored on your device that help us improve our Services and your experience.

Types of Cookies We Use:

Essential Cookies: Necessary for the Services to function properly, including authentication and security
Analytics Cookies: Help us understand how users interact with our Services
Functional Cookies: Remember your preferences and settings

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Services.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Regular security assessments and audits
Access controls and authentication measures
Secure cloud infrastructure through Google Cloud Platform

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

7.1 General Rights

Depending on your location, you may have certain rights regarding your personal information:

Access: Request access to the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information, subject to legal retention requirements
Portability: Request a copy of your information in a structured, machine-readable format
Objection: Object to certain processing of your information
Withdraw Consent: Withdraw consent where we rely on consent to process your information

7.2 Colorado Privacy Rights

As a Colorado-based company, we comply with the Colorado Privacy Act (CPA). Colorado residents have additional rights including:

The right to opt out of the sale of personal data
The right to opt out of targeted advertising
The right to opt out of profiling for certain purposes

We do not sell personal information or use it for targeted advertising.

7.3 Location Data Controls

Driver Users can control location permissions through their device settings. Disabling location services will prevent you from using driver features that require location data.

To exercise any of these rights, please contact us using the information provided in Section 12.

8. Cannabis Industry Compliance

Our Services are specifically designed for cannabis product transportation and comply with state-specific cannabis regulations. By using our Services, you acknowledge that:

You are authorized to transport or facilitate the transport of cannabis products in accordance with applicable state laws
All delivery information and compliance data may be shared with state regulatory agencies including Metrc
We maintain records of all deliveries indefinitely as required by cannabis regulations
You will use the Services only for lawful purposes in compliance with all applicable state and local cannabis laws

9. Third-Party Links and Services

Our Services may contain links to third-party websites or integrate with third-party services (such as Aeropay, Mapbox, and Geoapify). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

10. Children’s Privacy

Our Services are not intended for individuals under the age of 21. We do not knowingly collect personal information from anyone under 21 years of age. If you believe we have collected information from someone under 21, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Posting the updated Privacy Policy on our website and within our applications
Updating the “Effective Date” at the top of this Privacy Policy
Sending you an email notification (for material changes)

Your continued use of the Services after any changes indicates your acceptance of the updated Privacy Policy.

12. Subscription Requirement

Access to our Services requires an active paid subscription. We collect and process information necessary to manage your subscription, including billing information processed through Aeropay. Your subscription and associated data are subject to our Terms of Service.