Cannabis Privacy Policy

Effective date: May 15, 2026

For cannabis tenants, Tastio stores standard account, employee, cashier, customer, guest, order, loyalty, inventory, payment workflow, reporting, and device data plus cannabis compliance data configured by the tenant.

Cannabis data may include age-restricted customer or patient details, date of birth, ID or license lookup data, medical or recreational handling flags, order records, inventory lots, package or barcode identifiers, manifests, adjustment records, sale reporting status, BioTrack references, external compliance responses, and audit history.

Cannabis and transaction records may be retained for regulatory, tax, audit, dispute, fraud prevention, and state reporting reasons even when ordinary account data could otherwise be deleted.

Data submitted to BioTrack or another state or third party compliance system may be regulated by state authorities. Tastio does not control how state systems process, retain, disclose, or audit that data.

Tenants are responsible for giving required notices to customers and employees, restricting access to authorized staff, validating age and eligibility, and complying with all applicable cannabis, privacy, employment, tax, and recordkeeping laws.