Privacy Policy

Jerome Baker Designs ("JBD," "we," "us," "our") respects your privacy. This policy explains what we collect, why, how we use it, and the choices you have. It applies to all JBD-operated sites and apps under cannacrypted.com, including the Authenticity, Rewards, Budtender, and Retail Store portals.

• Account / contact info: name (or nickname), phone number, email address, and store affiliation (for budtenders and retailers).
• Verification data: photos of JBD pieces and receipts you upload. Photos may be stored at low resolution (max 200px, 50% JPEG quality); numerical fingerprint data (color averages, brightness metrics, perceptual hashes) is stored. Full-resolution images are processed in memory and not permanently stored.
• Activity data: verifications run, sales logged (budtenders), points earned, training progress, scan history.
• Device / network data: IP address, browser/user-agent, timestamps, and standard server logs for security and abuse prevention.
• Cookies: session cookies for keeping you logged in. We do not use third-party advertising cookies.

• To deliver the service: verify pieces, issue shop codes, run the budtender rewards program, send order/training/sweepstakes communications.
• To send you SMS messages you have opted into — verification codes, training reminders, drop announcements, and program updates. Mobile information is never sold or shared with third parties for marketing or promotional purposes.
• To send transactional and program emails (verify links, shop codes, confirmations, prize notifications).
• To improve our authentication models. Low-resolution images and extracted numerical fingerprints contribute to internal machine-learning models that improve fake-detection. No personally identifiable information is used in model training.
• To prevent fraud, enforce our Terms, and comply with legal obligations.

If you opt in to SMS, JBD sends you recurring messages — including one-time verification codes, training reminders, program updates, and drop announcements. Message frequency varies. Message and data rates may apply, depending on your carrier plan.

• Opt out: reply STOP to any JBD SMS to unsubscribe. You will receive a single confirmation message.
• Help: reply HELP for support information, or email info@cannacrypted.com.
• No sale or sharing: mobile phone numbers and SMS opt-in data collected for the JBD program are used only by JBD and our messaging carrier (Twilio) to deliver the messages you've opted into. We do not sell, rent, or share mobile numbers or opt-in data with third parties for their marketing or promotional purposes.
• Carrier delivery is not guaranteed. JBD is not responsible for delays caused by your carrier.

• Service providers who help us operate the platform: Google Cloud (hosting), Railway (database), Twilio (SMS), Resend (email), HubSpot (CRM for retailer accounts), Anthropic (AI for verification). These providers are contractually limited to using your data only to provide their service to us.
• Stores and retailers see budtenders affiliated with their store (name, nickname, points, training status). Stores do not receive your phone or email unless required for prize fulfillment with your prior knowledge.
• Legal: we may disclose information when required by law, valid legal process, or to protect rights, property, or safety.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred — subject to this policy.
• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

• Account records are kept while the account is active and for a reasonable period afterward to comply with legal, accounting, and reporting obligations.
• SMS opt-in records (consent timestamp, IP address, phone number) are retained as long as you remain opted in plus a minimum of two (2) years after opt-out, for compliance audit purposes.
• Verification fingerprints are retained indefinitely as part of the JBD provenance database.
• Receipt image hashes are retained to prevent duplicate code issuance.

• Access / correction / deletion: email info@cannacrypted.com to request a copy of your data, correct it, or delete your account.
• SMS opt-out: reply STOP at any time.
• Email opt-out: use the unsubscribe link in any program email.
• California residents (CCPA/CPRA): you have the right to know, delete, correct, and limit use of sensitive personal information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as defined by the CCPA.
• EEA / UK residents (GDPR): our legal bases are consent (SMS, marketing email), contract (delivering the service you signed up for), and legitimate interests (security, fraud prevention, product improvement). You may withdraw consent at any time.

We use industry-standard safeguards — TLS in transit, hashed passwords (where applicable), HSTS, role-segmented portals, signed session cookies, and limited admin access. No system is perfectly secure; report suspected issues to info@cannacrypted.com.

JBD's services are not directed to anyone under 21. Cannabis-related portions of the service require legal-age verification per the laws of the user's jurisdiction. We do not knowingly collect data from minors; if you believe we have, contact us and we'll delete it.

We may update this policy. Material changes will be announced on this page with a revised "Effective" date. Continued use after the change indicates acceptance of the updated policy.

Jerome Baker Designs · info@cannacrypted.com · cannacrypted.com