Privacy Policy

Who We Are

Kannlicit is a B2B software-as-a-service platform operated by Kannlicit (“we”, “us”, “our”). We provide cannabis marketing compliance tools for Canadian licensed cannabis retailers. Our platform is operated from Canada and your data is stored in Canada.

For privacy inquiries, contact us at: privacy@kannlicit.com

Information We Collect

We collect the following categories of information:

• Account information: Name, email address, and organisation name collected during registration via Clerk, our authentication provider.
• Business information: Store name, province, and location details provided during onboarding.
• Content data: Cannabis marketing content you generate or check through our platform, stored in your content library.
• Usage data: Feature usage, generation counts, and compliance check history to provide and improve the service.
• Billing information: Payment details handled securely by Stripe. We never store card numbers or banking information directly.

How We Use Your Information

• To provide, operate, and improve the Kannlicit platform
• To process your subscription and manage billing
• To store your generated content for the 2-year Health Canada retention requirement
• To send transactional emails (account, billing, support)
• To respond to support requests
• To comply with applicable Canadian law

Data Storage and Residency

Your data is stored in Canada (Central region) using Supabase infrastructure. We have made deliberate architectural decisions to keep Canadian cannabis retailer data within Canadian jurisdiction. Authentication is managed by Clerk, which may store session data on servers outside Canada — please review Clerk's Privacy Policy for details.

Data Sharing

We do not sell your personal information to third parties. We share data only with the following service providers who help us operate the platform:

• Clerk — authentication and user management
• Supabase — database and storage (Canada Central)
• Stripe — payment processing
• Anthropic — AI content generation (your prompts are processed to generate outputs; Anthropic's data use policy applies)
• Resend — transactional email delivery
• Vercel — platform hosting

Data Retention

We retain your account and content data for as long as your account is active. Content items are retained for 2 years from the date of publication in accordance with Health Canada's record-keeping requirements for cannabis promotion. When you close your account, we will delete your personal data within 30 days, except where retention is required by law.

Your Rights

Under PIPEDA and applicable provincial privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent for data processing (note: this may prevent us from providing the service)
• Lodge a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, email privacy@kannlicit.com.

Changes to This Policy

We will update this policy as our practices evolve and as legal requirements change. Material changes will be communicated via email and in-app notice. Continued use of the platform after notice constitutes acceptance of the updated policy.