Privacy Policy

Dope Menus, LLC ("Company," "we," "us," or "our") is committed to protecting the privacy and security of your business information. This Privacy Policy ("Policy") explains how we collect, use, disclose, store, and safeguard information when you access or use our B2B collaborative platform for Michigan's licensed cannabis industry (the "Platform" or "Services").

BY USING THE PLATFORM, YOU EXPRESSLY CONSENT TO THE DATA PRACTICES DESCRIBED IN THIS PRIVACY POLICY. If you do not agree with this Policy, you must not access or use the Platform. This Privacy Policy is incorporated into and subject to our Terms of Service.

Important Notice: This Platform is exclusively for licensed cannabis businesses operating in Michigan. We collect business information, not consumer personal information. However, individual user account information is also collected and protected under this Policy.

2.1 Business Registration Information

When you register for the Platform, we collect:

• Business legal name, DBA, and entity type
• Business address, phone number, and email
• Michigan cannabis license number(s) and license type (medical/adult-use)
• License verification documents and regulatory compliance information
• Business type classification (cultivator, processor, retailer, distributor, etc.)
• Federal Employer Identification Number (EIN) for verification
• Authorized representative names, titles, and contact information

2.2 Account and User Information

For individual user accounts, we collect:

• Full name, email address, and phone number
• Username and encrypted password
• Job title and role within the business
• Professional credentials and certifications (if applicable)
• Account preferences and notification settings

2.3 Product and Inventory Data

Through Platform use, we collect:

• Product catalog information (names, descriptions, images, pricing)
• Inventory levels, SKU data, and stock movements
• Batch numbers, lot codes, and tracking identifiers
• Lab testing results and compliance documentation
• Metrc tracking data synced through API integrations
• Product performance metrics and sales velocity data

2.4 Transaction and Order Information

We collect data related to B2B transactions facilitated through the Platform:

• Order details, quantities, and pricing
• Purchase orders and invoices
• Payment terms and transaction history (we do not process payments directly)
• Delivery information and fulfillment status
• Chain of custody documentation

2.5 Technical and Usage Data

We automatically collect technical information:

• IP addresses, device identifiers, and browser type
• Operating system and device information
• Log files, access times, and pages viewed
• Clickstream data and navigation patterns
• Performance metrics and error logs
• Cookies and similar tracking technologies (see Cookie Policy)

2.6 Communications and Support Data

We maintain records of:

• Customer support inquiries and correspondence
• Feedback, survey responses, and feature requests
• In-platform messages between users (for coordination purposes)
• Email communications sent through the Platform

3.1 Primary Business Purposes

We use collected information to:

• Provide, operate, maintain, and improve the Platform and Services
• Verify cannabis license status and maintain regulatory compliance
• Facilitate B2B marketplace coordination and transactions between users
• Enable real-time inventory synchronization and menu management
• Generate analytics, reports, and business intelligence
• Process and manage user accounts and access permissions
• Provide customer support and respond to inquiries

3.2 Analytics and Platform Improvement

Information is used to:

• Analyze Platform usage patterns and optimize performance
• Develop new features and enhance existing functionality
• Conduct market research and trend analysis
• Generate aggregated market intelligence (de-identified data)
• Test, troubleshoot, and improve system reliability

3.3 Compliance and Legal Obligations

We may use information to:

• Comply with Michigan cannabis regulations and reporting requirements
• Cooperate with law enforcement and regulatory investigations
• Enforce our Terms of Service and prevent violations
• Detect, prevent, and address fraud, security breaches, or illegal activity
• Maintain audit trails for regulatory compliance
• Respond to legal process, subpoenas, or court orders

3.4 Communications

We use contact information to:

• Send transactional notifications (order updates, system alerts)
• Provide customer support and technical assistance
• Send administrative messages about account or policy changes
• Deliver requested information about our Services
• Send marketing communications (with consent; you may opt-out)

4.1 No Sale of Personal Information

WE DO NOT SELL, RENT, OR TRADE YOUR PERSONAL OR BUSINESS INFORMATION TO THIRD PARTIES FOR MONETARY CONSIDERATION. We respect the confidentiality of your business data.

4.2 Sharing Within the Platform Ecosystem

Business information is shared within the Platform as follows:

• Marketplace Transactions: Business profile information and product data are visible to potential trading partners
• Order Coordination: Transaction details are shared between buyers and sellers
• Aggregated Analytics: De-identified market trends and insights may be shared across the network
• Directory Listings: Basic business information may appear in searchable directories (controllable via privacy settings)

4.3 Service Providers and Third-Party Integrations

We share information with trusted third parties who assist in operating the Platform:

• Cloud Infrastructure: Hosting and data storage providers (servers, databases)
• POS Systems: Flowhub, Treez, BioTrack, LeafLogix (via API integrations)
• Compliance Systems: Metrc integration for seed-to-sale tracking
• Analytics Providers: Tools for usage analysis and performance monitoring
• Communication Services: Email delivery and notification systems
• Security Services: Cybersecurity, fraud detection, and monitoring tools

All service providers are contractually obligated to maintain confidentiality and use data only for specified purposes consistent with this Policy.

4.4 Legal and Regulatory Disclosure

We may disclose information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Cooperate with Michigan Cannabis Regulatory Agency (CRA) investigations
• Report to law enforcement regarding suspected illegal activity
• Enforce our Terms of Service or protect our legal rights
• Protect the safety, security, or integrity of the Platform or users
• Respond to emergency situations involving potential harm

4.5 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to successor entities. You will be notified of any such change in ownership or control of your information.

5.1 Security Measures

We implement industry-standard security practices including:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Multi-factor authentication (MFA) for user accounts
• Role-based access controls and principle of least privilege
• Regular security audits, penetration testing, and vulnerability assessments
• Intrusion detection and prevention systems
• Secure development practices and code reviews
• Data backup and disaster recovery procedures
• Employee security training and confidentiality agreements

5.2 No Absolute Security Guarantee

While we implement robust security measures, NO METHOD OF TRANSMISSION OVER THE INTERNET OR ELECTRONIC STORAGE IS 100% SECURE. We cannot guarantee absolute security of your information. You acknowledge and accept the inherent risks of electronic data transmission and storage. See our Security & Compliance page for detailed information on our security practices.

5.3 Your Security Responsibilities

You are responsible for:

• Maintaining the confidentiality of your account credentials
• Using strong, unique passwords and enabling MFA
• Promptly reporting suspected security breaches or unauthorized access
• Ensuring your devices and networks are secure
• Limiting access to authorized personnel only

6.1 Retention Periods

We retain information for different periods based on type and purpose:

• Active Accounts: Retained while account is active and for reasonable period after closure
• Transaction Records: Minimum 7 years for tax and regulatory compliance
• Compliance Documentation: As required by Michigan cannabis regulations (typically 7 years)
• Technical Logs: Typically 90 days to 2 years for security and troubleshooting
• Communications: Retained as needed for customer service and legal purposes

6.2 Account Deletion and Data Removal

Upon account termination, we will delete or de-identify your data within a reasonable timeframe, except where retention is required by law, regulation, or legitimate business needs (e.g., resolving disputes, enforcing agreements, complying with audits). Some information may be retained in backup systems for a limited period.

7.1 Access and Correction

You may access, review, and update your account information through Platform settings. For assistance accessing or correcting information, contact us at privacy@dopemenus.com.

7.2 Communication Preferences

You may opt out of marketing communications by using the unsubscribe link in emails or updating your notification preferences in account settings. Note that you cannot opt out of transactional or administrative communications necessary for Platform operation.

7.3 Data Portability

You may request a copy of your data in a commonly used, machine-readable format. Contact privacy@dopemenus.com to request data export.

7.4 Account Deletion

You may request account deletion by contacting support@dopemenus.com. Please note that some information may be retained as described in Section 6 above.

We use cookies, web beacons, and similar tracking technologies to enhance Platform functionality, analyze usage, and improve user experience. For detailed information about our use of cookies and your choices regarding tracking, please see our Cookie Policy.

The Platform may contain links to third-party websites or integrate with third-party services (e.g., POS systems, Metrc). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information to them.

The Platform is not intended for individuals under 21 years of age. We do not knowingly collect information from anyone under 21. If we discover that we have collected information from someone under 21, we will promptly delete it.

We reserve the right to modify this Privacy Policy at any time. We will provide notice of material changes by email or Platform notification at least 30 days before changes take effect. Your continued use of the Platform after changes become effective constitutes acceptance of the modified Policy. The "Last Updated" date at the top indicates when changes were last made.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to request disclosure of information collection and sharing practices, request deletion of personal information, and opt-out of the "sale" of personal information (which we do not engage in). To exercise these rights, contact privacy@dopemenus.com.

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Dope Menus, LLC
Privacy Officer
Email: privacy@dopemenus.com
B2B Collaborative Platform for Michigan's Cannabis Industry

We will respond to privacy inquiries within 30 days of receipt.