Privacy Policy

Last updated: March 23, 2026  ·  Effective: March 23, 2026
Publisher: Safe Harbor LLC  ·  Product: CannaCloud POS

1. Who We Are

CannaCloud POS is developed and distributed by Safe Harbor LLC, a software company based in Michigan, United States. Our website is cannacloud.net and you can reach us at support@cannacloud.net.

2. What Data the Application Handles

CannaCloud POS processes the following categories of data on behalf of the retail business (the operator) that has licensed the software:

• Transaction data — sales totals, line items, payment methods, timestamps
• Inventory data — product names, SKUs, stock levels, pricing
• Drawer & reconciliation data — cash drawer open/close events, float amounts
• Printer & device configuration — local hardware settings stored on the device
• Application preferences — update channel, auto-update settings (stored locally)

This data is stored locally on the operator's device and, where the operator has configured cloud sync, in the operator's own Supabase database instance. Safe Harbor LLC does not have access to, or control over, the operator's database or its contents.

3. Data We Collect Directly

Safe Harbor LLC collects minimal data directly through the application:

• Update checks — when the application checks for software updates, a network request is made to releases.cannacloud.app. No personally identifiable information is transmitted; the request includes only the current application version, operating system, and architecture.
• Crash & error data — at this time, no automated crash reporting is enabled. Errors are logged locally only.

We do not collect analytics, telemetry, usage statistics, or any personally identifiable information from end users of the POS terminal.

4. Local Storage

Application configuration (printer settings, device preferences, update preferences) is stored locally on the device in the operating system's standard application data directory. This data never leaves the device unless explicitly exported by the operator.

5. Third-Party Services

The application may interact with the following third-party services as configured by the operator:

• Supabase — cloud database and authentication, hosted on infrastructure chosen by the operator. See Supabase Privacy Policy.
• GitHub — software update manifests are served via GitHub Pages. See GitHub Privacy Statement.

Safe Harbor LLC does not sell, rent, or share any data with advertising networks or data brokers.

6. Operator Responsibilities

The retail business licensing CannaCloud POS is the data controller for all customer and transaction data entered into the system. The operator is responsible for:

• Complying with applicable cannabis retail regulations and data protection laws in their jurisdiction
• Obtaining any required consents from their customers
• Securing access to the POS terminal and associated databases
• Implementing appropriate data retention and deletion policies

7. Data Retention & Deletion

Safe Harbor LLC does not retain operator or consumer data. All business data resides in the operator's own infrastructure. To delete application data, the operator may uninstall the application and remove the local app data directory, or delete their Supabase project.

8. Security

CannaCloud POS is distributed as a code-signed Windows application. Software updates are cryptographically signed using Ed25519 keys and verified by the application before installation. We recommend operators keep the application up to date and restrict physical and network access to POS terminals.

9. Children's Privacy

CannaCloud POS is a business application intended solely for use by adults operating licensed cannabis retail establishments. It is not directed at children under the age of 13, and we do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the application after changes are posted constitutes acceptance of the updated policy. We encourage operators to review this page periodically.

11. Contact Us

If you have questions about this Privacy Policy or how CannaCloud handles data, please contact us: