Privacy Policy
Last Updated: December 12, 2025
Canna Data Science ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
1. Information We Collect
Account Information
When you create an account, we collect:
- Company name and subdomain
- Contact name and email address
- Password (stored in encrypted form)
Cultivation Data
You may upload or input data related to your cultivation operations, including:
- Batch and harvest records
- Environmental sensor readings
- Financial and cost data
- Strain and facility information
Usage Data
We automatically collect certain information when you use our platform:
- Log data (IP address, browser type, pages visited)
- Device information
- Session duration and feature usage
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain our platform services
- Process your account registration and authentication
- Generate analytics, reports, and AI-powered insights
- Communicate with you about your account and updates
- Improve and optimize our platform
- Comply with legal obligations
3. Data Storage and Security
We implement industry-standard security measures to protect your data:
- Encryption in Transit: All data is transmitted using TLS 1.3
- Encryption at Rest: Data is encrypted using AES-256
- Infrastructure: Built on SOC 2 compliant cloud infrastructure
- Access Controls: Role-based access control (RBAC) limits data access
- Audit Logging: All access to sensitive data is logged
- Multi-Tenant Isolation: Each customer's data is isolated in separate database schemas
4. AI and Data Processing
Our AI Data Scientist feature processes your data to provide insights. Important information about AI processing:
- Your data is not used to train public AI models without your explicit opt-in consent
- AI processing occurs within your isolated tenant environment
- You may choose your preferred AI provider (Anthropic, OpenAI, or Google)
- Enterprise customers may request a private, isolated model instance
5. Data Sharing and Disclosure
We do not sell your personal information or cultivation data. We may share information only in the following circumstances:
- Service Providers: Third-party services that help us operate our platform (hosting, email delivery)
- Legal Requirements: When required by law, regulation, or legal process
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize sharing
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account termination:
- Account data is deleted within 30 days
- Cultivation data can be exported before account closure
- Backup copies are purged within 90 days
- Aggregated, anonymized data may be retained for analytics
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Export your data in a machine-readable format
- Object to certain processing activities
To exercise these rights, contact us at privacy@cannadatascience.com.
8. Cookies and Tracking
We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies are used only with your consent.
9. Children's Privacy
Our platform is not intended for individuals under 21 years of age. We do not knowingly collect information from minors.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform.
11. Contact Us
If you have questions about this Privacy Policy, please contact us:
- Email: privacy@cannadatascience.com
- Address: Canna Data Science, Eureka, CA