Introduction
WebJoint ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, retain, and safeguard your information when you use our services.
This policy covers the WebJoint website, the WebJoint dispensary platform, and our mobile applications, including WebJoint Fleet (com.webjoint.mobileapp), the driver app used by licensed cannabis delivery operators, and our consumer ordering app.
Information We Collect
We may collect information about you in a variety of ways, including:
- Personal Data: Name, email address, phone number, and business information you provide when contacting us or signing up for our services.
- Account and Employment Data: For driver accounts in WebJoint Fleet, your login credentials, assigned dispensary or delivery operator, driver and vehicle assignment, and on-duty or off-duty status.
- Location Data: Precise and approximate device location, as described in detail in the Location Data section below.
- Order and Delivery Data: Order contents, delivery addresses, delivery timestamps, signatures, ID verification confirmations, and proof of delivery records.
- Usage Data: Information about how you interact with our website, platform, and mobile apps, including pages viewed, features used, and app diagnostics or crash logs.
- Device Data: Device model, operating system version, unique device or installation identifiers, IP address, and mobile network information.
Location Data
WebJoint collects device location data in order to operate cannabis delivery services. What we collect and why depends on which app you use.
WebJoint Fleet (driver app)
WebJoint Fleet collects precise location (GPS) from a driver's device. Location is collected only while the driver is signed in to a Fleet account and on duty, and collection stops when the driver goes off duty or signs out. Because deliveries require the driver to navigate and use other apps while the Fleet app is not on screen, Fleet may collect location in the background during an active shift so that dispatch tracking and delivery records remain continuous. Android will ask you to grant location permission, including background location permission, before any of this collection begins, and you can revoke that permission at any time in your device settings.
We use driver location data to:
- Show dispatchers at the driver's licensed operator the live position of active drivers on a map
- Assign, sequence, and re-route deliveries, including AI route optimization and estimated arrival times
- Confirm that deliveries occur inside the operator's licensed delivery zones and service areas
- Record delivery and stop locations as part of the proof of delivery and compliance record required of licensed cannabis operators
- Support driver safety, vehicle and inventory accountability, and investigation of lost or disputed orders
Driver location data is shared with the licensed cannabis operator that employs or contracts the driver, and with the service providers described below that host our infrastructure and provide mapping and navigation. It may also be disclosed to state cannabis regulators or law enforcement where required by law. We do not sell driver location data, and we do not use it for advertising.
Consumer ordering app and website
With your permission, our consumer app and website use your device location to show dispensaries and menus that deliver to your area, to pre-fill and validate delivery addresses, and to confirm that an order can be legally fulfilled at your location. If you decline location permission, you can still enter your address manually. We do not collect background location in our consumer app.
You can turn off location collection at any time by revoking location permission for the app in your device settings. Some features, including live dispatch tracking for drivers and automatic delivery zone matching, will not work without it.
How We Use Your Information
We use the information we collect to:
- Provide and maintain our services, including dispatching, routing, and completing deliveries
- Create and secure user accounts and authenticate drivers and staff
- Communicate with you about our products, services, and orders
- Improve our website, platform, and mobile apps, and diagnose crashes and errors
- Maintain the delivery, inventory, and audit records that licensed cannabis operators are required to keep
- Detect and prevent fraud, loss, and misuse of our services
- Comply with legal obligations, including state cannabis regulations
Information Sharing
We do not sell your personal information. We may share your information with the licensed cannabis operator whose account you use or order from, with service providers who assist us in operating our business (including cloud hosting, mapping and navigation, payment processing, communications, and analytics providers), with state cannabis track and trace systems where required, and when otherwise required by law.
Data Retention
We retain personal data only for as long as we need it for the purposes described in this policy, and then delete it or anonymize it. Our retention periods are as follows:
- Precise driver location data: Retained for no less than 90 days from collection, the minimum period California requires retailers to keep delivery vehicle travel history. Location points that form part of a completed delivery record are kept with that delivery record under the retention period below, and are then deleted.
- Order, delivery, and compliance records: Retained for 7 years, the period licensed cannabis operators are required to keep commercial cannabis records under state regulations, and then deleted.
- Account data: Retained for as long as the account is active. After an account is closed, we delete or anonymize account data within 90 days, except where we must keep it to meet the compliance retention period above.
- Website and marketing contact data: Retained for up to 24 months after your last interaction with us, or until you ask us to delete it.
- Usage, diagnostic, and crash data: Retained for up to 13 months in aggregated or de-identified form.
We may retain data longer than the periods above only where a longer period is required by law, or where the data is needed for an active legal claim, dispute, audit, or regulatory investigation. When that need ends, the data is deleted.
You can request deletion of your personal data at any time using the contact details below. Driver accounts are managed by the licensed operator you work for, so we may direct such requests to that operator, and we will honor deletion requests except for records we are legally required to retain.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Your Rights
Depending on where you live, you may have certain rights regarding your personal data, including the right to access, correct, delete, or receive a copy of your information, and the right to withdraw a permission you previously granted, such as location access. To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by applicable law.
Age Restriction
Our services support licensed cannabis businesses and are not directed to children. We do not knowingly collect personal data from anyone under 21. If you believe a minor has provided us personal data, contact us and we will delete it.
Changes to This Policy
We may update this privacy policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make a material change to what data we collect or how we use it, we will provide additional notice through our services.
Contact Us
If you have questions about this privacy policy, please contact us at:
WebJoint
Email: privacy@webjoint.com
Phone: 323-405-8303