Who We Are

Canovate is operated by Conversion System LLC, a Wyoming limited liability company.
1603 Capitol Ave Ste 415, Cheyenne, WY 82001
Email: hello@conversionsystem.com

Information We Collect

When you create an account, we collect your name, email address, and dispensary information (business name, location, website URL). During onboarding we may scrape publicly available information about your dispensary from sources like Google Business Profile, your website, Weedmaps, Leafly, and Dutchie — no passwords or private accounts are accessed.

When you subscribe to market briefs or request a free scorecard, we collect your email address and optionally your ZIP code. Chat transcripts with the Canovate AI assistant are stored to enable ongoing conversations.

We automatically collect standard server logs including your IP address, browser type, and pages visited. This data is used only for service operation and aggregate analytics.

How We Use Your Information

We use your information to:

• Generate weekly marketing campaigns (SMS, email, social, local SEO) tailored to your dispensary and market
• Run our compliance linter against generated content for your state
• Send you campaign approval emails and dispatch notifications
• Calculate anonymized performance benchmarks shown in the /insights/network section
• Respond to support requests
• Detect and prevent fraud on magic-link and review-token flows

Third-Party Services

We share data with the following third-party service providers, who process it only to deliver their respective services:

• Stripe — processes subscription payments. Stripe's privacy policy applies to payment data. We store no raw card data.
• Resend (via Polsia proxy) — handles transactional and nurture email delivery. Resend's privacy policy applies to email content and metadata.
• Anthropic — AI inference provider for content generation. Anthropic's privacy policy applies to prompts and model outputs.
• Render — cloud hosting provider. Render's privacy policy applies to infrastructure-level logs.

We do not sell personal information to any third party.

Cookies

We use minimal cookies — essential session cookies (owner_session HMAC cookie) for authentication and basic analytics for page visit counts. We do not use third-party tracking pixels, behavioral advertising cookies, or cross-site tracking. For full details, see our Cookie Policy.

For SMS subscribers, we record consent timestamp, IP address, and consent source as required by TCPA regulations.

Data Retention

Account data is retained while your account is active and for 90 days after cancellation. Deleted data is purged within 30 days of deletion request. Server logs are retained for 90 days.

Your Rights

If you are a California resident (CCPA/CPRA), you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information.

If you are located in the European Economic Area (GDPR), you have the additional rights to access, rectification, erasure, and portability of your personal data. Contact us at hello@conversionsystem.com to exercise any of these rights.

To exercise any rights, email hello@conversionsystem.com with the subject "Privacy Request."

Data Security

All data in transit is encrypted via TLS. Stored passwords are hashed with bcrypt. OAuth tokens for Twitter and Google Business are encrypted at rest using AES-256-GCM.

Children's Privacy

Canovate is not intended for persons under 21 years of age. We do not knowingly collect information from minors. Our services are designed exclusively for licensed cannabis dispensary operators in legal markets.

Changes to This Policy

We will notify you of material changes to this policy via email at least 30 days before they take effect. Material changes include anything that reduces your rights or expands data collection.

Contact

Company: Conversion System LLC
Email: hello@conversionsystem.com
Address: 1603 Capitol Ave Ste 415, Cheyenne, WY 82001