Privacy Policy

Last updated: October 2026

Overview

SeedLink provides live, METRC-synced wholesale menu software to licensed cannabis cultivators. This policy explains what we collect, why, and how we handle it. It covers the SeedLink website and dashboard. It does not change any separate agreement you have with us.

Information we collect

Account information. When a cultivator requests access or signs up, we collect name, email, phone number, password, and the cannabis license you operate under.
Inventory data from METRC. With your connection, we pull your active packages (strains, quantities, lab results, package labels) from the state track-and-trace system to build your menu. METRC API credentials are encrypted at rest.
Menu engagement data. When a buyer opens a menu link you sent, we record the visit: the open, products viewed, time spent, what goes into the cart and in what quantities, and any “interested” or order actions. Visits are also recorded as session replays of the page as the buyer used it; the name, email and phone fields a buyer types are hidden from those recordings. Visits by signed-in cultivators and SeedLink staff are not recorded. IP addresses are hashed (one-way) before storage; we do not retain raw IPs.
Marketplace activity. When a buyer signed in to the SeedLink market opens a product’s details or adds it to their basket, we record which product and, for a basket add, how many, and share it with the cultivator who sells that product, including the buyer’s name and store. Activity by SeedLink staff is not recorded.
Dashboard use. When a cultivator uses the SeedLink dashboard, we record in our own database which pages are opened, how long each is on screen, and a short list of actions (such as connecting METRC or copying a menu link), with the account and brand, and, when the dashboard was opened from one of our emails, which email it was. We use it to decide what SeedLink sends and where. Use by SeedLink staff is recorded and labelled as staff.
Guide reading. Our public guides record a view, and a click on their main call to action, in our own database: the guide’s path, topic and intended audience, and a temporary identifier held in page memory. SeedLink does not read or keep anything about the reader’s address for this, and there is no replay, analytics cookie, persistent browser storage, query string or referring page URL. If you are signed in to SeedLink, your account is recorded with the view.
Buyer contact details. To place an order, a buyer provides a name and email. Buyers may optionally create a marketplace account (name, work email, phone, store); without one, the per-dispensary link is the identity layer.

How we use information

We use this data to operate the product: sync and display your menu, deliver engagement notifications, generate orders and invoices, support your account, and improve the service. We do not sell personal information.

Service providers

We share data only with the vendors that run the product, under their respective terms:

Supabase — database, authentication, and realtime infrastructure.
Vercel — application hosting.
Resend — transactional and notification email.
PostHog — session replays of buyer menu visits (the name, email and phone fields a buyer types are hidden from recordings, and the contents of an order submission are not recorded there).
Anthropic — the AI model behind the SeedLink assistant, the buying assistant for marketplace accounts, and the features that propose menu plans and turn a pasted order or menu into a draft. It receives what is typed or pasted into those features and the records each request needs: catalog, order, menu engagement and METRC records, which can include buyer names and contact details.
METRC — the state cannabis track-and-trace system we sync inventory from, and where we create packages and transfer manifests when you ask us to.

Data security

Data is encrypted in transit (HTTPS) and access is governed by row-level security so each cultivator can reach only their own data. METRC credentials are encrypted with AES-256-GCM. No system is perfectly secure, but we work to protect your information.

Data retention

We keep account and engagement data for as long as your account is active or as needed to provide the service and meet legal and regulatory obligations. You can ask us to delete your account data, subject to records we must retain by law.

Your choices

Cultivators can update account details in Settings and disconnect METRC at any time. Notification emails include an unsubscribe option. To request access, correction, or deletion of your data, contact us.

Contact

Questions about this policy? Reach us through the contact page.

Information we collect

Account information. When a cultivator requests access or signs up, we collect name, email, phone number, password, and the cannabis license you operate under.
Inventory data from METRC. With your connection, we pull your active packages (strains, quantities, lab results, package labels) from the state track-and-trace system to build your menu. METRC API credentials are encrypted at rest.
Menu engagement data. When a buyer opens a menu link you sent, we record the visit: the open, products viewed, time spent, what goes into the cart and in what quantities, and any “interested” or order actions. Visits are also recorded as session replays of the page as the buyer used it; the name, email and phone fields a buyer types are hidden from those recordings. Visits by signed-in cultivators and SeedLink staff are not recorded. IP addresses are hashed (one-way) before storage; we do not retain raw IPs.
Marketplace activity. When a buyer signed in to the SeedLink market opens a product’s details or adds it to their basket, we record which product and, for a basket add, how many, and share it with the cultivator who sells that product, including the buyer’s name and store. Activity by SeedLink staff is not recorded.
Dashboard use. When a cultivator uses the SeedLink dashboard, we record in our own database which pages are opened, how long each is on screen, and a short list of actions (such as connecting METRC or copying a menu link), with the account and brand, and, when the dashboard was opened from one of our emails, which email it was. We use it to decide what SeedLink sends and where. Use by SeedLink staff is recorded and labelled as staff.
Guide reading. Our public guides record a view, and a click on their main call to action, in our own database: the guide’s path, topic and intended audience, and a temporary identifier held in page memory. SeedLink does not read or keep anything about the reader’s address for this, and there is no replay, analytics cookie, persistent browser storage, query string or referring page URL. If you are signed in to SeedLink, your account is recorded with the view.
Buyer contact details. To place an order, a buyer provides a name and email. Buyers may optionally create a marketplace account (name, work email, phone, store); without one, the per-dispensary link is the identity layer.

Service providers

We share data only with the vendors that run the product, under their respective terms:

Supabase — database, authentication, and realtime infrastructure.
Vercel — application hosting.
Resend — transactional and notification email.
PostHog — session replays of buyer menu visits (the name, email and phone fields a buyer types are hidden from recordings, and the contents of an order submission are not recorded there).
Anthropic — the AI model behind the SeedLink assistant, the buying assistant for marketplace accounts, and the features that propose menu plans and turn a pasted order or menu into a draft. It receives what is typed or pasted into those features and the records each request needs: catalog, order, menu engagement and METRC records, which can include buyer names and contact details.
METRC — the state cannabis track-and-trace system we sync inventory from, and where we create packages and transfer manifests when you ask us to.