Privacy Policy

NonprofitMedia, Inc. ("we," "us," or "our") operates CannabisResource at cannabisresource.com (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit the Platform.

We are committed to protecting your privacy. We do not sell, rent, or monetize personal information. We do not accept advertising. Our only interest is providing accurate, independent cannabis industry intelligence.

By using the Platform, you agree to the collection and use of information as described in this Policy. This Policy is incorporated into our Terms of Use.

Information you provide directly:

• Contact form submissions — name, email address, message content, and selected inquiry category when you use our contact form.
• Newsletter signup — email address if you subscribe to updates.
• Tip / document submissions — any information you voluntarily provide when submitting tips or documents to our investigations team.

Information collected automatically:

• Log data — IP address, browser type, operating system, referring URL, pages visited, and timestamps. Retained for up to 90 days for security and analytics purposes.
• Usage data — pages viewed, search queries entered on the Platform, and navigation patterns. Used in aggregate only.
• Cookies — see the Cookies section below.

Information we do NOT collect:

• Payment or financial information (we do not process payments)
• Government ID or verification documents
• Health or medical records
• Social media credentials

We use collected information solely for the following purposes:

• Responding to contact form inquiries and support requests;
• Sending newsletters and platform updates to subscribers (with opt-out on every email);
• Improving Platform functionality, content quality, and user experience;
• Detecting and preventing fraud, abuse, and security threats;
• Complying with applicable legal obligations;
• Conducting internal analytics to understand how the Platform is used (aggregate, non-identifiable data only).

We do not use your information for behavioral advertising, profiling, or sale to third parties.

We do not sell, trade, or rent personal information. We may share information only in the following limited circumstances:

• Service providers — trusted vendors who assist with email delivery, hosting, and analytics, under strict data processing agreements prohibiting independent use of your data.
• Legal compliance — when required by law, court order, or governmental authority, or to protect the rights, property, or safety of NonprofitMedia, Inc., our users, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, personal information may be transferred. We will notify users via prominent notice on the Platform before any such transfer.

We require all third parties to maintain appropriate security standards and prohibit them from using your data for any purpose other than providing services to us.

We use a minimal set of cookies necessary for Platform functionality and aggregate analytics. We do not use advertising cookies or third-party tracking pixels.

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality. We do not respond to "Do Not Track" signals at this time, as no universal standard exists.

We retain personal information only as long as necessary for the purposes described in this Policy:

• Contact form submissions — retained for 2 years for correspondence records, then deleted.
• Newsletter subscriptions — retained until you unsubscribe, then deleted within 30 days.
• Server log data — retained for 90 days, then automatically purged.
• Analytics data — retained in aggregate, anonymized form indefinitely; no individual records retained beyond 90 days.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — request a copy of personal information we hold about you;
• Correction — request correction of inaccurate personal information;
• Deletion — request deletion of your personal information, subject to legal retention requirements;
• Opt-out — unsubscribe from email communications at any time via the unsubscribe link in any email;
• Portability — request a machine-readable copy of information you have provided to us.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

California residents may have additional rights under the California Consumer Privacy Act (CCPA). EU/EEA residents may have additional rights under the General Data Protection Regulation (GDPR). Contact us for jurisdiction-specific requests.

The Platform is not directed to individuals under 21 years of age, consistent with the minimum age requirements of cannabis laws in most jurisdictions. We do not knowingly collect personal information from anyone under 21. If we become aware that we have collected information from a person under 21, we will delete it promptly.

If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected].

We implement industry-standard technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include:

• TLS/HTTPS encryption for all data in transit;
• Encrypted storage for sensitive data at rest;
• Access controls limiting data access to authorized personnel only;
• Regular security reviews and vulnerability assessments.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify affected users as required by applicable law.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and post a notice on the Platform for at least 30 days. Your continued use of the Platform after any update constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically. For significant changes affecting how we use your data, we will provide additional notice via email to subscribers.

For privacy-related questions, requests, or concerns, contact: