Privacy Policy
Last updated: April 17, 2026
In plain English
We only collect what we need to run the marketplace - business details, the name and email of people on your team, and normal service telemetry. We don't sell data, don't share it with advertisers, and encrypt it at rest and in transit.
1. Who we are
Weedus is operated by Autosterea LLC (“Weedus”, “we”). This Privacy Policy applies to the Weedus platform and to the marketing pages at weedus.app.
2. What we collect
Account information. When you sign up, we collect your name, email, phone number (optional), business name, business address, business phone, business email, license number, and license state.
Team and role data. If you invite team members, we store their name, email, team role (Owner, Manager, Budtender), and per-location permissions.
Product and transaction data. Orders, deliveries, manifests, inventory records, and payment metadata (managed through Stripe - we do not store card numbers).
Service telemetry. Log data, IP address, browser user-agent, and page-level analytics used to debug issues and improve the product. See “Cookies and analytics” below.
Marketing leads. If you submit an email through a lead-capture form on our marketing site, we store the email, the form source, any UTM parameters from the URL, and any optional fields you fill in (company name, phone, message). This is used to route you into the registration flow and, if you opt in, to send you product updates.
3. How we use information
We use the information we collect to provide and support the service, process payments, communicate with you about your account and service updates, prevent fraud and abuse, meet legal and regulatory requirements, and improve the product over time.
We do not sell personal information, and we do not share personal information with advertising networks.
4. Who we share data with
We share data with a small number of sub-processors who help us run the service: Stripe (payments), SendGrid (transactional and marketing email), Google Cloud Storage (file storage), POSaBIT (when you explicitly sync inventory), and a managed PostgreSQL host. A current list is maintained in our Data Processing Addendum.
We may disclose information to comply with a subpoena, court order, or other lawful request; we will push back on overbroad requests and, where lawfully possible, notify the affected Customer first.
5. Security
Customer Data is encrypted in transit (TLS 1.2+) and at rest. Database backups are encrypted and retained on a rolling 30-day schedule. Access to production systems is scoped to a small set of authorized engineers and is audited.
6. Retention
We retain Customer Data for the duration of your subscription and for 30 days after termination so you can export it. After that, we delete or anonymize data on a regular schedule, except where we must retain it to meet legal obligations (for example, financial records required for tax compliance).
7. Your rights
Depending on where you are located, you may have the right to access, correct, delete, or port the personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, email hello@weedus.app. We will respond within 30 days.
8. Cookies and analytics
We use a minimal set of first-party cookies required for authentication and a privacy-respecting analytics tool to track page-level performance. We do not use third-party tracking pixels or advertising cookies.
9. Children
Weedus is a B2B platform intended for use by licensed cannabis businesses and their adult employees. The service is not directed to anyone under 21.
10. Changes to this Policy
We will notify you by email and/or in-app banner of any material change at least 30 days before it takes effect. Minor corrections take effect when posted.
11. Contact
Privacy questions or rights requests? Email hello@weedus.app.