Privacy Policy

This Privacy Policy explains how Green-Zip LLC ("Green-Zip," "we," "us") collects, uses, shares, and protects information when you use our website, web app, and delivery service (the "Service"). It's part of our Terms of Service.

1. Information we collect

Information you give us

• Account details: your name, email address, mobile phone number, date of birth, and password (stored securely by our authentication provider; we can't see it).
• Identity verification: photos of the front and back of your government-issued ID and a selfie, which our staff review to confirm your age and identity.
• Delivery details: your delivery addresses, delivery instructions, and notes.
• Orders: what you order, prices, fees, taxes, payment method, and order history.
• Messages: chat messages you exchange with our store and drivers about an order.

Information created when you use the Service

• ID check at delivery: a photo of your ID taken by the driver at your door, and a record that the ID was checked.
• Address location: map coordinates for your delivery address, used for delivery and tracking. We don't track your device's location.
• Notifications: if you turn on notifications, a technical address for your browser or device so we can send you alerts.
• Basic technical data: sign-in cookies that keep you logged in, and information your browser normally sends (such as IP address and device type), which our hosting providers may log for security and reliability. Your cart and age confirmation are saved only in your own browser.

We don't use advertising cookies or sell your information.

2. How we use your information

• To confirm you're 21 or older and that you are who you say you are.
• To show you our menu, take and deliver your orders, and collect payment.
• To let you, our store, and your driver communicate about your order.
• To send account emails (like confirmation and password reset) and order notifications.
• To meet our legal obligations as a licensed cannabis business, including purchase limits, age verification, record keeping, inventory tracking, and reporting to regulators.
• To keep the Service safe, prevent fraud, and enforce our Terms.
• To run and improve the Service.

3. Who we share it with

• Our drivers: your name, phone number, delivery address and instructions, and the items in your order, so they can deliver it.
• Service providers who run parts of the Service for us and may only use your information to provide those services:
  • Supabase — database, sign-in, file storage (including ID photos), and real-time updates
  • Vercel — website hosting
  • Resend — sending account emails
  • OpenStreetMap / Nominatim — turning your typed address into map coordinates, and showing map tiles
  • Your browser's push service (such as Google or Apple) — delivering notifications you turn on
  • [Payment provider, once added]
• Regulators and law enforcement: when required by law, including the Minnesota Office of Cannabis Management and state tracking systems, or to respond to valid legal requests.
• Business changes: if Green-Zip is sold or merged, your information may transfer to the new owner under this policy.

We do not sell your personal information or share it for targeted advertising.

4. How long we keep it

• Account details: while your account is open, and afterwards as needed for legal records.
• Order records, ID verification, and delivery ID photos: for as long as Minnesota cannabis rules require us to keep sales and age-verification records. [Attorney: state the required period.]
• Accounts with no orders: you can ask us to delete them, including your ID photos.
• Messages: kept with the order they belong to.

5. How we protect it

We use encrypted connections (HTTPS), access controls so each person can see only what they're allowed to, and private storage for ID photos that only authorized staff can view. Customers never see our store's location, and they see a driver's location only when the driver is close to their delivery. No system is perfectly secure, but we work to protect your information and will notify you of a breach as required by law.

6. Your choices and rights

• See and update your information: you can view and edit your account and saved addresses in the app, or contact us.
• Delete your account: contact us. We'll delete what we can; information we must keep by law (such as sales and age-verification records) will be kept for the required period and then deleted.
• Notifications: turn them off anytime in your browser or device settings.
• Minnesota residents: you may have additional rights under the Minnesota Consumer Data Privacy Act, such as to access, correct, delete, or get a copy of your personal data, and to know who we share it with. Contact us to make a request; we'll respond within the time the law requires. [Attorney: confirm whether the Act applies to Green-Zip and adjust.]

7. Age

The Service is only for adults 21 and older. We don't knowingly collect information from anyone under 21, and we delete it if we learn we have.

8. Changes to this policy

We may update this policy. We'll post the new version here with a new "last updated" date, and tell you about significant changes by email or in the app.