Nasheo (“Nasheo,” “we,” “us”) provides organic search services for licensed cannabis operators and brands working toward licensure, including Farm Bill–compliant lines, in any US state where the brand operates. This draft describes how we handle business contact and brand information submitted through www.nasheo.com.
Contact: hello@nasheo.com
This notice is written for US business contacts who are 21 or older and authorized to represent a cannabis or hemp brand. It is not directed at consumers shopping for cannabis.
What we collect
From the public brand-setup flow (/start):
- Brand name
- Work email
- Phone (optional)
- Website URL (optional)
- Footprint (for example single-state, multi-state, or online)
- License status (licensed, path to license, Farm Bill–compliant, or not yet licensed)
- Channel (DTC, wholesale, or both)
- SEO priority and monthly organic-traffic goal
- A short description of the biggest blocker
- Plan selection (Foundation one-time, or Foundation plus monthly retain)
We may also collect:
- Workspace activity after setup (pages viewed in
/app, status of assigned tasks) - Device and log data (IP address, browser, timestamps) from hosting
- Analytics events from Google Analytics and Vercel Analytics on the marketing site (for example page views, referrers, and device or browser type)
- Payment-related details if and when a high-risk merchant account is actually used. Today the checkout copy states that the charge is a sandbox and is not a live card network. We do not use Stripe or PayPal.
We do not intentionally collect consumer health information, government ID images, or information about anyone under 21.
How we use it
- Operate onboarding and the workspace
- Assign a Nasheo operator and communicate about setup
- Quote and, when a live payment rail exists, bill Foundation / retain fees
- Improve the site and diagnose errors
- Comply with law and respond to lawful requests
We do not use this information to run Google or Meta ads for THC.
How we share it
We share information with vendors who host the site and database (currently Vercel and Neon) and who provide analytics (currently Google Analytics and Vercel Analytics). We may share with a Nasheo operator working the brand file, or with professional advisors (including counsel and accountants) under confidentiality.
We do not sell personal information for money. Whether any analytics or advertising cookie is a “sale” or “share” under the California Consumer Privacy Act (as amended by the CPRA) is for counsel to confirm. Until that confirmation, we do not intend to sell or share personal information as those terms are commonly used, and we do not use the data for cross-context behavioral advertising of cannabis goods.
We may disclose information if required by law or to protect Nasheo, a client, or the public.
Retention
We keep brand-setup records for as long as we have an active engagement, and for a reasonable period afterward for accounting, disputes, and legal holds. Analytics logs follow each vendor’s default retention unless we configure a shorter period.
California privacy rights
If you are a California resident, you may have the right to know, access, correct, and delete personal information; to opt out of sale or sharing; to limit use of sensitive personal information; and to not be discriminated against for exercising these rights. You may also have the right to appeal a denial.
To exercise rights, email hello@nasheo.com from the work address we have on file, or have an authorized agent write us. We will need to verify you represent the brand. We will not require you to create an account solely to make a request.
We do not have a postal address published on the site. Counsel should add a registered-agent or mailing address before this draft is treated as final.
Children
The site is for adults 21 and older acting for a business. We do not knowingly collect personal information from anyone under 21. If you believe we have, email hello@nasheo.com.
Security
We use HTTPS and hosted infrastructure. No method of transmission or storage is completely secure.
Changes
We will update the “Last updated” date when this notice changes. Material changes that affect an active workspace will also be emailed to the work address on file when we have one.