Information the intake is designed to use
We store only operating state, optional location count (default 1), business stage and type, an other-type description when used, requested services, contact name, business email, optional phone, preferred contact method, explicit policy and platform-consent evidence, optional service-specific future-update choices, and a source identifier when present. We also record consent versions and time, authorized channel, status, retention marker, and an opaque receipt.
Information we do not request
Do not provide government identifiers, birth dates, tax identifiers, ownership or identity documents, financial-account or routing details, bank statements, financial statements, tax returns, credit reports or authorizations, cannabis-license files, payment credentials, transaction-level cannabis data, or underwriting files.
Purpose, contact, and retention
When you submit the live form, your interest is recorded by this independent platform for manual follow-up only through the contact channel you authorize. Nothing is sent to a provider. A 180-day retention-expiration marker is recorded unless a lawful need or deletion request changes handling. This is not an application, provider match, approval, account opening, financing offer, or payment-service enrollment. Any future provider sharing requires separate named-provider consent. Optional banking, payments, and capital future-update choices are independent, are off by default, and are not part of the required platform-contact permission. No automated marketing SMS is sent.
Future provider sharing
If provider activation is later approved, sharing will require a second screen that names one provider, one product and service, the exact fields, the purpose, the consent version, and the channel. Revocation stops future sharing but does not alter historical evidence of a completed referral.
Access, correction, and deletion
Keep the opaque receipt shown after submission. The contact page explains the current route for requesting access, correction, or deletion. There is no separate configured privacy mailbox represented at this stage; requests can be raised during authorized manual follow-up using the receipt.