Privacy

Who we are

Ch.eaf is the customer-facing brand of the ChiefCo platform and is operated by ChiefCo: subscription software for licensed retailers, plus a listing and notification service for adults who attest they are 21+ in legal jurisdictions. Retailers pay for software and listing access, and approved shoppers pay for a monthly membership, as described on the Pricing page. Ch.eaf does not sell cannabis, process product payments, arrange delivery, guarantee reservations, take sales commissions, or facilitate peer-to-peer sales. Any product sale happens directly with the licensed retailer outside Ch.eaf.

Information we collect

We collect the information you choose to provide. For a customer account or waitlist request, that may include your name, email address, phone number, ZIP code, state, and age-and-terms consent record. A customer account carries your legal name as it appears on your government-issued ID, the time you confirmed it, and a record of each dispensary check-in (the dispensary, the time, and whether you were admitted). Ch.eaf never stores an image or number from your ID; the dispensary compares the name on screen with your ID in person. We use a waitlist phone number only to reach you about Ch.eaf early access and never for marketing texts you did not ask for. If you ask Leafline to hand an unanswered question to a person, we process the question, your reply email, the destination you selected, and your 21-and-over and handoff consent. A question for a retailer uses the email on your signed-in account; a question for the Ch.eaf team may use the signed-in email or the reply email you enter.

For a retailer account, information may include the account email, business name, public website, cannabis license number, license jurisdiction and expiration date, license evidence, listing details, retailer-authored profile-page copy and highlights, and submission and review history.

When you start a paid plan, you enter your card details into fields supplied by our payment processor, which receives them directly. Ch.eaf never receives or stores your full card number or security code. From the processor we receive and keep only what we need to run your plan: the plan, amounts and dates charged, the card brand, the last four digits and expiration month and year of the card, the billing ZIP code, and the processor's transaction and subscription identifiers and status.

We and our infrastructure providers also process limited technical and security data needed to operate the service, such as browser type, request timestamps, network address, authentication and session records, error logs, and a short-lived age-attestation cookie. The age cookie records only that the browser completed the 21+ gate; it is not used for advertising.

How and why we use information

We use information to create and secure accounts; bill paid plans, handle cancellations and answer billing questions; remember completion of the age gate; deliver requested notifications; answer or route support questions; review retailer licenses, listings, and profile-page versions; display approved retailer and listing information to eligible accounts; prevent misuse; diagnose errors; keep compliance and delivery-audit records; improve the service; and meet legal obligations. Leafline's prepared answers are generated in your browser. When it cannot provide a verified answer, it does not send anything until you choose a destination and affirm the handoff consent shown with the form. We do not sell personal information, use it for cross-site targeted advertising, or use it to make automated decisions with legal or similarly significant effects.

How we disclose information

We disclose only the categories reasonably needed for the service: account, form, authentication, technical, and support data to cloud hosting, database, authentication, email-delivery, security, and support providers acting for us; card and billing details to our payment processor and the card networks and banks involved, to process payments, prevent fraud, and handle refunds and disputes; information to professional advisers where necessary; and information to public authorities or other parties when required by law, needed to protect rights and safety, or involved in a business transfer.

If you explicitly consent to send an unanswered platform question, the exact question and reply email are sent through our email provider to the Ch.eaf support destination. If you are signed in as an approved Guest and explicitly consent to ask from an eligible unlocked listing, the exact question and the email on your signed-in account are sent through our email provider only to the selected retailer's account email so that retailer can reply. We do not route that handoff to other retailers. The receiving email provider, Ch.eaf team, or selected retailer may retain the message under its own operational and legal obligations.

Retailer business information, listing content, and profile-page copy identified for display are supplied by the retailer and shown only through the applicable public-safe or protected approved path. We do not disclose customer waitlist details as listing or retailer-profile content.

Cookies

Ch.eaf uses necessary cookies or similar browser storage for the 21+ gate, authentication, security, and form continuity. We do not currently use advertising cookies. You can block or clear browser storage, but doing so may require you to repeat the age gate or sign in again.

Retention & security

We retain personal information only for as long as reasonably needed for the purposes above, including to provide the service, keep required business and compliance records, resolve disputes, and protect the platform. Retention periods vary by record type and legal obligation. For a Leafline email handoff, ChiefCo's database delivery ledger does not store the raw question, raw reply email, or raw email-provider message identifier. It stores keyed HMAC digests of those values plus limited routing identifiers, delivery status, and timestamps so delivery can be rate-limited and audited without keeping the message body in that ledger. The email itself is processed by the email provider and destination described above and may be retained there.

Retailer profile versions and their administrator decision receipts are retained to preserve who submitted and reviewed what was displayed. Billing records are kept for as long as tax, accounting, and card-network rules require. We use administrative, technical, and physical safeguards appropriate to the information we process. No online system can guarantee absolute security, so please use a unique password and notify us if you suspect unauthorized account access.

Your privacy choices & rights

You may unsubscribe from marketing or launch notifications at any time. Depending on where you live and subject to applicable exceptions, you may also ask us to confirm whether we process your personal information; access or correct it; delete it; or provide a portable copy. You may opt out of a future use involving sale, cross-site targeted advertising, or qualifying profiling, although Ch.eaf does not currently use personal information for those purposes.

Send a request from the email address associated with your account to info@cheafco.com. We may need to verify your identity before completing it. If we deny a request, you may appeal by replying with the subject line “Privacy Appeal” and explaining why you believe the decision should be reconsidered. We will not discriminate against you for exercising an applicable privacy right.

Children

The service is not directed to children or anyone under 21, and we do not knowingly collect personal information from them. If you believe a person under 21 submitted information, contact us so we can investigate and delete it where appropriate.

Policy changes

If this notice changes materially, we will post the updated notice here, revise the effective date above, and provide any additional notice required by law. Your continued use after the effective date is subject to the updated notice.

Platform terms

Using Ch.eaf is governed by the Platform terms: who may use the service, retailer eligibility and listing obligations, acceptable use, plans, billing and cancellation, content rights, availability, and limits of liability. Refunds are covered by the Refund & Cancellation Policy. The terms and this notice are approved and released together.

Contact

Questions about this notice or privacy requests can be sent to the Ch.eaf team at info@cheafco.com.