Privacy Policy
Last updated: 3/20/2026
Age Verification Data
Your privacy is paramount. We do not permanently store your birth year or raw ID scan images after your session ends. Verification data is used solely to confirm you are 21+ in compliance with state law before placing an order.
Delivery Footage
As required by the Massachusetts Cannabis Control Commission (CCC), all deliveries are recorded via active dashcams and bodycams. This footage is stored securely off-site for the mandated retention period and is strictly confidential. We only release footage if explicitly required by law, court order, or search warrant.
Data Security
Your account details, saved addresses, and payment information (when saved) are encrypted at rest and in transit. We do not sell your personal information to third parties. We utilize industry-standard security protocols to ensure your data remains highly calculated and highly secure.
Third-Party Service Providers
BudHub works with a limited number of trusted third-party service providers to operate our delivery platform. Each provider processes data only as necessary to perform their function and maintains their own privacy policy:
- Stripe — Payment processing. Stripe handles all credit card and payment data securely. See Stripe's Privacy Policy.
- Vercel — Hosting and analytics. Our website is hosted on Vercel's infrastructure. See Vercel's Privacy Policy.
- Google Maps — Delivery navigation in our driver portal only. Google Maps is not used to track customers. See Google's Privacy Policy.
Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information:
- Right to know — You have the right to request that we disclose what personal information we collect, use, and share about you.
- Right to delete — You have the right to request the deletion of your personal information, subject to certain legal exceptions.
- Right to opt-out of sale — We do not sell your personal information. BudHub has never sold personal data and has no plans to do so.
- Right to non-discrimination — We will not discriminate against you for exercising any of your CCPA/CPRA rights.
Do Not Sell or Share My Personal Information
BudHub does not sell or share personal data with third parties for cross-context behavioral advertising.
How to submit a request: Email privacy@budhub.online with “CCPA Request” in the subject line. Please include your full name and the email address associated with your account.
Response timeline: We will respond to verifiable consumer requests within 45 days of receipt. If we need additional time, we will notify you of the reason and extension period (up to an additional 45 days).