Legal

Privacy Policy

Last updated: July 9, 2026

This Privacy Policy explains how Cannavate, operated by DataPot LLC ("Cannavate", "we", "us"), collects, uses, and shares information in connection with the Cannavate website and services (the "Service"). Cannavate is a business-to-business product intended for licensed cannabis retailers and their authorized staff. It is not directed to consumers or to anyone under 21.

1. Information we collect

Information you provide

• Account and contact information — such as name, work email, company/store name, and invite codes used during signup or demo requests.
• Credentials for connected systems — if you choose to enable automation, the login credentials you provide for third-party platforms (such as Dutchie) so the Service can act on your behalf.
• Communications — information you send us, such as support or sales inquiries.

Information generated through use of the Service

• Operational and inventory data — inventory snapshots, SKUs, product and category data, restock tasks, move logs, sales history, and velocity metrics processed on your behalf.
• Usage and log data — technical information such as IP address, browser/user-agent, timestamps, actions taken in the Service, and diagnostic logs used to operate and secure the Service.
• Cookies and local storage — see our Cookie Policy.

2. How we use information

We use information to: provide, operate, maintain, and secure the Service; authenticate users and manage accounts; perform the automations you enable within your connected accounts; generate analytics and reporting for you; respond to inquiries and provide support; detect, prevent, and address fraud, abuse, and security incidents; comply with legal obligations; and improve the Service.

3. How we share information

We do not sell your personal information. We share information only as follows:

• Service providers — vendors who host and support the Service (for example, cloud infrastructure and database providers) under obligations to protect the information.
• Connected platforms — when you enable automation, we transmit instructions and data to the third-party platforms you connect (such as Dutchie), acting on your authorization.
• Legal and safety — when we believe disclosure is required by law, regulation, legal process, or to protect the rights, property, or safety of Cannavate, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

4. Third-party services

The Service integrates with third-party platforms and infrastructure that we do not control. Their handling of information is governed by their own privacy policies. We are not responsible for the privacy practices of third parties, including Dutchie.

5. Data retention

We retain information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Credentials for connected systems are retained only as long as necessary to provide the automation you enabled, and are handled with appropriate safeguards. You may request deletion of your data as described below, subject to legal and operational limits.

6. Security

We use administrative, technical, and organizational measures designed to protect information, including access controls, encryption in transit where applicable, tenant data isolation, and hashed storage of account passwords. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and access passwords.

7. Your choices and rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of certain personal information, or to receive a copy of it. To make a request, contact us at [email protected]. We will respond as required by applicable law and may need to verify your identity. Because Cannavate acts as a processor of operational data on behalf of business customers, some requests may be directed to the relevant customer.

8. Cookies and local storage

We use a small number of essential cookies and browser storage items to keep you signed in, remember preferences (such as light/dark theme), and operate the Service. We do not use third-party advertising or cross-site tracking cookies. See our Cookie Policy for details and controls.

9. Children

The Service is intended solely for licensed cannabis businesses and adults 21 and older. We do not knowingly collect personal information from anyone under 21. If you believe a minor has provided us information, contact us and we will delete it.

10. International users

We operate and store data in the United States. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in the United States, where data-protection laws may differ from those in your location.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date and, where appropriate, by additional notice. Your continued use of the Service after changes take effect constitutes acceptance.

12. Contact

Questions or requests regarding privacy? Contact us at [email protected].