Skip to content

Privacy Policy

Last updated: October 5, 2026

Introduction

BudLogix LLC ("BudLogix," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit budlogix.com or use our back-office platform for licensed retail businesses (the "Service").

Businesses use the Service to manage their own records, including records about their customers, employees, job applicants, and vendors. For that data, the business decides what is collected and why, and we process it on the business's instructions and under our agreement with them. If your information is held by a business that uses BudLogix, please direct requests about it to that business.

Information We Collect

We collect information that you provide directly to us or that is created when you use the Service, including:

  • Account information (name, email address, organization details)
  • Business information (store and location data, product catalogs, inventory, vendor and purchasing records)
  • Records you import or sync from systems you connect, such as sales transactions and customer records from your point-of-sale system, inventory and compliance records from your state track-and-trace system, and invoices and purchase orders
  • Employee and applicant information you collect through the Service, such as resumes, job applications, and onboarding forms. Where you use our onboarding tools, this can include government identifiers such as Social Security numbers and the results of background checks you request. These identifiers are encrypted at rest and used only to complete the onboarding process you started.
  • Answers to the savings calculator on our website: your store's size and state, the tools you pay for, and the prices you type. We keep them without your name or contact details, to set and check our own prices and to publish what dispensaries pay in totals where no store can be identified. If you send yourself the estimate, it is kept with the contact details you give us to book a demo.
  • Usage data (how you interact with our platform)
  • Technical information (IP address, browser type, device information)

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Operate the integrations you connect and process the documents you upload, for example extracting line items from a vendor invoice
  • Process transactions and manage your account
  • Send you technical notices and support messages
  • Respond to your comments and questions
  • Monitor and analyze usage patterns
  • Detect, prevent, and address technical issues

Google User Data (Gmail Integration)

BudLogix lets you connect a business mailbox (for example, an accounts-payable or hiring inbox) using "Sign in with Google". When you do, we request the Gmail scope https://mail.google.com/, which is the only scope Google accepts for IMAP access to a mailbox. We use this access solely to:

  • Read new messages in the connected mailbox to import vendor invoice attachments for bookkeeping and compliance
  • Read new messages in a connected hiring mailbox to import applicant resumes

From each processed message we store the attachment, sender address, subject, date, and message identifier (to avoid processing the same message twice). For a hiring mailbox we also read the message body to find the applicant's contact email address; the body itself is not stored. We never send, reply to, delete, move, label, or mark messages, and we never change your Gmail settings.

Attachments are sent to document-processing and AI services acting on our behalf, solely to read the invoice or resume for you (for example, to extract line items or an applicant's name). Those providers process the data under our instructions and do not use it to train their models. Google user data is not used for advertising, is not sold, and is not shared with third parties for any other purpose except as required to comply with law. Humans do not read your email except with your explicit consent for support, for security purposes, or as required by law.

You can disconnect a mailbox at any time from the Email Accounts or Connections settings in BudLogix. Disconnecting revokes BudLogix's access with Google and deletes the stored access and refresh tokens. If you instead revoke access from your Google Account permissions page, we detect it and delete the stored tokens within two hours, whether or not the mailbox is paused. Imported attachments remain in your BudLogix account until you delete them or close your account.

Google User Data (Google Business Profile)

BudLogix lets a business connect its Google Business Profile listing using "Sign in with Google". When you do, we request the scope https://www.googleapis.com/auth/business.manage, which Google requires to read a listing's reviews and reply to them. We use this access solely to:

  • List the Business Profile accounts and locations you manage, so you can choose the one listing to connect
  • Read that listing's name, address and Google place ID
  • Read the listing's reviews: the reviewer's public display name and profile photo link, the star rating, the comment, the dates, and any reply
  • Read the listing's daily performance figures (views on Google Search and Maps, website clicks, direction requests and call clicks) to show on your reports
  • Publish, edit or delete a reply to a review, only when someone on your team chooses to. BudLogix never replies on its own.

We store the name of the Google account used to connect, the listing details, the reviews as Google returns them together with their replies, and the daily figures. To show which visit a review came from, BudLogix compares the reviewer's display name and the review's timing, rating and comment with the review requests and private feedback the business has collected. BudLogix also reads a review for the names of the business's own staff, so the business can credit the employee a customer praised, and a new low rating can be assigned to a manager to follow up. Only that business sees these results.

When someone on your team asks for AI-drafted replies, the review's rating and comment, the business's name, city and state, the categories of products bought when the review is matched to a visit, and a selection of the business's own recent replies with the reviews they answered are sent to an AI service acting on our behalf, solely to draft those replies. The provider does not use it to train its models.

Google user data is not used for advertising, is not sold, and is not shared with third parties for any other purpose except as required to comply with law. Humans do not read it except with your explicit consent for support, for security purposes, or as required by law.

You can disconnect the listing at any time from Settings, Connections. Disconnecting revokes BudLogix's access with Google and deletes the stored access and refresh tokens. If you instead revoke access from your Google Account permissions page, we detect it at the next sync, within a day, delete the stored tokens, and ask you to sign in again. Reviews and figures already imported remain in your BudLogix account until you delete them or close your account.

BudLogix's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How We Share Information

We do not sell personal information, and we do not share it with third parties for their own marketing. We share information only as follows:

  • Service providers that process data on our behalf and under our instructions, in these categories: cloud hosting and storage; document processing and AI services used to read invoices, resumes, and similar documents; electronic signature; email and text message delivery; and payment and billing.
  • Systems you connect. When you connect a point-of-sale, track-and-trace, accounting, or mailbox system to BudLogix, data flows between that system and the Service on your instruction. Those systems are governed by their own terms and privacy policies.
  • Legal requirements. When required by law, regulation, legal process, or a governmental request, or to protect the rights, property, or safety of BudLogix, our customers, or others.
  • Business transfers. In connection with a merger, acquisition, or sale of assets, in which case this Privacy Policy continues to apply to the transferred information.

Text Messages

If you opt in to receive text messages from BudLogix or from a business using the Service, we send only the kinds of messages described when you gave consent. Reply STOP at any time to unsubscribe and HELP for help. Message and data rates may apply. Mobile phone numbers and text message opt-in data are not shared with third parties for marketing purposes.

Cookies

The Service uses a session cookie to keep you signed in and a small number of cookies that remember your display preferences, such as theme and sidebar state. We do not use third-party advertising cookies. You can clear or block cookies in your browser, but the Service will not function without the session cookie.

BudLogix Player (Android TV) and Data Deletion

BudLogix Player is our digital-signage app for Android TV, published by BudLogix. The app has no user accounts. When a screen is paired to a BudLogix organization, the app sends only: a device identifier and pairing code, a push notification token, playback status (which item is currently showing), and crash or error diagnostics. It does not collect location, contacts, photos, or any personal information about the people viewing the screen.

To request deletion of this data:

  • In the BudLogix dashboard, open Digital Signage → Screens and delete the screen. This removes the device identifier, push token, and status history for that screen immediately.
  • Or email support@budlogix.com with the screen name or pairing code; we delete the associated records within 30 days.

No Player data is retained after deletion, other than aggregate, non-identifying server logs that expire on a rolling 90-day basis.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including encryption in transit and encryption at rest for sensitive identifiers. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

What we store, and which service providers receive which data, is set out on our Security page.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When an account is closed, we delete or anonymize its data within a reasonable period, unless a longer retention period is required by law, for example record-keeping obligations under your business's license. Access tokens for connected mailboxes and Google Business Profile listings are deleted as soon as the mailbox or listing is disconnected.

Your Rights

Depending on where you live, you may have the right to:

  • Access your personal information
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Request data portability

To exercise these rights, email support@budlogix.com. We may need to verify your identity before responding, and we respond within 30 days. If your information is held by a business that uses BudLogix, we will refer your request to that business.

Children

The Service is intended for businesses and their staff. It is not directed to children under 18, and we do not knowingly collect personal information from them.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the date above. If a change is material, we will notify account holders by email before it takes effect.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

BudLogix LLC
Email: support@budlogix.com