Privacy Policy

Effective Date: February 15, 2026
Last Updated: February 15, 2026

1. Introduction

ZAPPAY ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment processing and marketplace facilitation platform.

By using ZAPPAY, you consent to the data practices described in this Privacy Policy.

2. Information We Collect

Personal Information

We collect the following personal information when you create an account or make a purchase:

Name: First and last name
Email Address: For account creation, order confirmations, and communications
Phone Number: For order updates and customer support
Date of Birth: To verify you are 21 years or older
Delivery Address: To fulfill orders (must be in a legal cannabis state)
Government-Issued ID: For age verification at delivery

Payment Information

Credit/Debit Card Information: Processed securely by Stripe, Inc. ZAPPAY does not store your full credit card number, CVV, or expiration date.
Billing Address: Collected for payment processing
Transaction History: Records of purchases, amounts, and dates

Location Information

IP Address: Used for geolocation verification to confirm you are in a legal cannabis state
Geolocation Data: Approximate location based on IP address
Delivery Location: Verified to ensure compliance with state laws

Usage Information

Browsing History: Pages visited, products viewed, search queries
Device Information: Browser type, operating system, device type
Cookies and Tracking: Session data, preferences, and analytics

Farmer and Transporter Information

For users with Farmer or Transporter accounts, we additionally collect:

Business Name and License Number: To verify legal operation
Tax Identification Number (EIN/SSN): For payment processing and tax reporting
Bank Account Information: For ACH payouts (securely stored and encrypted)
Product Listings: Strain information, THC/CBD content, pricing, lab results (COAs)

3. How We Use Your Information

We use your information for the following purposes:

Age and Location Verification

Verify you are 21 years or older
Confirm you are located in a state where cannabis is legal
Prevent underage access and illegal transactions

Order Processing and Fulfillment

Process payments through Stripe
Facilitate transactions between farmers and consumers
Coordinate delivery with licensed transporters
Send order confirmations, tracking information, and updates

Customer Support

Respond to inquiries and support requests
Resolve disputes and issues
Provide assistance with orders and accounts

Platform Improvement

Analyze usage patterns to improve user experience
Develop new features and services
Conduct research and analytics

Marketing and Communications

Send promotional emails about new products, sales, and features (with opt-out option)
Provide personalized product recommendations
Send newsletters and updates

Legal Compliance

Comply with state and federal cannabis laws
Respond to legal requests and prevent fraud
Enforce our Terms of Service
Maintain records for regulatory audits

4. How We Share Your Information

We do not sell your personal information to third parties. We share your information only in the following circumstances:

With Stripe (Payment Processor)

All payment processing is handled by Stripe, Inc. When you make a purchase, your payment information is transmitted directly to Stripe. Stripe's use of your information is governed by their Privacy Policy: https://stripe.com/privacy

We share with Stripe:

Name, email, billing address
Transaction amount and details
Payment method information

With Farmers and Transporters

To fulfill your order, we share:

Name, delivery address, phone number
Order details (products, quantities, delivery instructions)
Age verification status (21+ confirmed)

Farmers and transporters are contractually obligated to use this information only for order fulfillment and to protect your privacy.

With Law Enforcement

We may disclose information to law enforcement or government authorities if:

Required by law, subpoena, or court order
Necessary to investigate fraud or illegal activity
Required to protect the safety of users or the public
Necessary to enforce our Terms of Service

With Service Providers

We share information with third-party service providers who assist with:

Hosting and infrastructure (AWS, Google Cloud)
Analytics (Google Analytics)
Email communications (SendGrid, Mailchimp)
Customer support (Zendesk)

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

Business Transfers

If ZAPPAY is involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

5. Data Security

We take data security seriously and implement industry-standard measures to protect your information:

Encryption

All data transmitted between your browser and ZAPPAY is encrypted using SSL/TLS
Payment information is encrypted and processed by Stripe (PCI DSS Level 1 compliant)
Sensitive data at rest is encrypted using AES-256 encryption

Access Controls

Employee access to personal information is restricted on a need-to-know basis
Multi-factor authentication required for administrative access
Regular security audits and penetration testing

Secure Storage

Data stored on secure servers with firewalls and intrusion detection
Regular backups to prevent data loss
Compliance with PCI DSS requirements via Stripe

Data Breach Notification

In the event of a data breach that affects your personal information, we will:

Notify you via email within 72 hours of discovery
Provide details about the breach and affected information
Offer guidance on protective measures
Report the breach to relevant authorities as required by law

No security system is perfect. While we strive to protect your information, we cannot guarantee absolute security.

6. Cookies and Tracking Technologies

ZAPPAY uses cookies and similar technologies to enhance your experience:

Types of Cookies We Use

Essential Cookies: Required for age verification, session management, and platform functionality
Analytics Cookies: Track usage patterns to improve the Platform (Google Analytics)
Preference Cookies: Remember your settings and preferences
Marketing Cookies: Deliver personalized ads and track campaign effectiveness

Your Cookie Choices

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features of the Platform.

To opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Access and Portability

Request a copy of the personal information we hold about you
Receive your data in a portable format (JSON, CSV)

Correction

Update or correct inaccurate or incomplete information
Edit your account information at any time

Deletion

Request deletion of your personal information (subject to legal retention requirements)
Close your account and remove your data

Opt-Out

Unsubscribe from marketing emails (link provided in every email)
Opt out of personalized advertising
Disable cookies via browser settings

Do Not Sell My Information

ZAPPAY does not sell your personal information to third parties.

To Exercise Your Rights

Email us at [email protected] with your request. We will respond within 30 days.

8. Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations:

Account Information: Retained while your account is active, plus 7 years after closure (for legal and tax purposes)
Transaction Records: Retained for 7 years to comply with financial regulations
Age Verification Data: Retained for 3 years to demonstrate compliance with cannabis laws
Marketing Data: Retained until you opt out or request deletion

9. Children's Privacy

ZAPPAY is not intended for individuals under 21 years of age. We do not knowingly collect information from anyone under 21. If we discover that we have collected information from someone under 21, we will delete it immediately.

If you believe we have collected information from someone under 21, contact us at [email protected].

10. State-Specific Privacy Rights

California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act:

Right to know what personal information is collected
Right to know if personal information is sold or shared
Right to opt out of the sale of personal information
Right to deletion
Right to non-discrimination for exercising privacy rights

To exercise these rights, email [email protected] or call 1-800-ZAPPAY-1.

Nevada Residents

Nevada residents may opt out of the sale of personal information. ZAPPAY does not sell personal information, but you may submit an opt-out request to [email protected].

Virginia, Colorado, Connecticut, and Utah Residents

Residents of these states have rights similar to California under their respective state privacy laws. Contact us to exercise your rights.

11. International Users

ZAPPAY operates in the United States and is intended for users in U.S. states where cannabis is legal. If you access ZAPPAY from outside the U.S., your information will be transferred to and processed in the United States.

By using ZAPPAY, you consent to the transfer of your information to the United States.

12. Third-Party Links

ZAPPAY may contain links to third-party websites (e.g., farmer websites, educational resources). We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via:

Email notification
Prominent notice on the Platform
Updated "Last Updated" date at the top of this policy

Continued use of ZAPPAY after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at:

ZAPPAY Privacy Team
Email: [email protected]
Phone: 1-800-ZAPPAY-1
Address: [To be added - physical address required for CCPA compliance]

15. Summary of Key Points

We collect: Name, email, address, date of birth, payment info, location data, and usage information
We use it for: Age/location verification, order processing, customer support, platform improvement, and legal compliance
We share with: Stripe (payments), farmers/transporters (fulfillment), law enforcement (if required), and service providers
We protect it with: Encryption, access controls, secure storage, and PCI DSS compliance via Stripe
You can: Access, correct, delete, or port your data; opt out of marketing; control cookies
We retain data for: 3-7 years depending on type, to comply with legal and tax requirements
We do not: Sell your information to third parties or collect data from anyone under 21

By using ZAPPAY, you acknowledge that you have read and understood this Privacy Policy.