Section 01
Overview
CannaRoute is a cannabis delivery compliance platform operated by Jake Beckham ("CannaRoute," "we," "us," or "our"). We provide licensed cannabis delivery operators with tools to document routes, generate compliance reports, and manage driver records in accordance with applicable state regulations.
By using CannaRoute, you agree to the collection and use of information as described in this policy. This policy applies to all users of the CannaRoute platform, including drivers, managers, and business owners.
Section 02
Google User Data & Drive Integration
⚡ Google Limited Use Disclosure
CannaRoute's use of Google user data is limited to the purposes described in this policy and complies with Google's Limited Use Requirements. We do not use Google user data for advertising, profiling, or any purpose beyond what is described here.
CannaRoute integrates with Google Drive and Google Sheets to store End of Day (EOD) compliance reports on behalf of licensed cannabis delivery operators. When a driver completes a delivery route, the app generates a compliance report and uploads it to a Google Drive folder designated by the operator.
What Google data we access:
- Access to create and upload files to a specific Google Drive folder designated by the operator during account setup
- Access to append rows to a specific Google Sheet designated by the operator for route index logging
- Your Google account email address is used solely to authenticate you as an authorized user
- EOD compliance reports (PDF format) are uploaded to your operator's designated Google Drive folder upon route completion
- A summary row is appended to your operator's Google Sheet index containing route date, driver name, route ID, vehicle plate, and a link to the uploaded PDF
- We do not read, download, or access any other files or data in your Google Drive or Google account beyond the designated folder and sheet
How we store and share Google data:
- OAuth access tokens are held temporarily in memory during an active session and are not persisted to our servers or databases
- We do not store, share, sell, or transfer any Google user data to third parties
- Uploaded files remain in your operator's Google Drive account, which they own and control entirely
- CannaRoute does not retain copies of uploaded reports on our servers after upload is complete
Revoking access: You may revoke CannaRoute's access to your Google account at any time by visiting myaccount.google.com/permissions and removing CannaRoute from your authorized apps. Revoking access will prevent future EOD report uploads but will not affect reports already uploaded to Drive.
Section 03
Information We Collect
We collect the following categories of information to operate the CannaRoute platform:
Driver Information
- Full legal name and Facility Agent number (required for Arizona cannabis delivery compliance)
- Date of birth (required for Arizona cannabis delivery compliance)
- 4-digit login PIN (used for driver authentication)
- GPS coordinates logged at each route stop arrival and departure
- Vehicle license plate numbers associated with delivery routes
Route & Compliance Data
- Delivery route details including stop names, addresses, and license numbers of recipient locations
- Invoice numbers associated with each delivery stop
- Timestamps of arrivals, departures, and route events
- Records of unplanned stops including reason and GPS coordinates
- Records of refused deliveries including reason
Manager & Account Information
- Manager name and email address (used for login and account identification)
- Company name and company code
- Google Drive Folder ID and Google Sheet ID (used to configure report storage)
Automatically Collected
- GPS location data while a route is active (driver must grant location permission)
- Device type and browser information for app compatibility purposes
- Weather data fetched from Open-Meteo using your GPS coordinates (displayed only, not stored)
Section 04
How We Use Your Information
We use the information we collect solely to operate the CannaRoute platform and support cannabis delivery compliance:
- To authenticate drivers and managers and provide access to the platform
- To record and store delivery route data for compliance documentation purposes
- To generate End of Day compliance reports that satisfy Arizona cannabis delivery regulations
- To upload compliance reports to the operator's designated Google Drive folder
- To provide managers with real-time visibility into active driver routes and fleet status
- To display current weather conditions to drivers on the route builder screen
- We do not use your information for advertising, marketing profiling, or sale to third parties
Section 05
Data Storage & Security
CannaRoute stores route and compliance data using Supabase, a managed PostgreSQL database platform with industry-standard security practices. All data is transmitted over encrypted HTTPS connections.
Artificial intelligence invoice scanning is processed through the Anthropic Claude API via a secure server-side proxy. Invoice images are transmitted for processing only and are not stored by CannaRoute or Anthropic beyond the duration of the API request.
Driver PINs are stored in our database. We recommend operators treat driver PINs as confidential and change them if a driver leaves the organization.
Completed EOD compliance reports are stored in the operator's own Google Drive account. CannaRoute does not retain copies of completed reports on our servers.
Section 06
Data Sharing
We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share information only in the following limited circumstances:
- Within your organization: Route data, driver records, and compliance reports are accessible to managers and owners within the same licensed operator account
- Service providers: We use Supabase for database services, Cloudflare for hosting and security, Anthropic for invoice scanning, and Google for Drive and Sheets integration — all solely to operate the platform
- Legal compliance: We may disclose information if required by law, regulation, or valid legal process, including in response to requests from cannabis regulatory authorities
- Business transfer: If CannaRoute is acquired or merged, user data may be transferred as part of that transaction with equivalent privacy protections
Section 07
Your Rights & Choices
- Access: Managers may access all route and driver records for their organization through the CannaRoute dashboard at any time
- Correction: Driver profile information can be updated by managers in the Drivers tab of the dashboard
- Deletion: To request deletion of your organization's data from CannaRoute, contact us at the address below. Note that compliance records may be subject to retention requirements under applicable cannabis regulations
- Google access: You may revoke CannaRoute's Google Drive access at any time via your Google account settings without affecting previously uploaded reports
- GPS: Drivers may deny location permissions; however, GPS coordinates are required for compliance documentation and the app may not generate complete reports without location access
Section 08
Children's Privacy
CannaRoute is intended solely for use by licensed cannabis industry professionals aged 21 and older. We do not knowingly collect information from individuals under the age of 21. If you believe a minor has provided information to our platform, please contact us immediately.
Section 09
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable regulations. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of CannaRoute after changes are posted constitutes acceptance of the updated policy.
We will not reduce the privacy protections described in this policy with respect to Google user data without providing explicit notice and obtaining consent where required.