JBD — Privacy Policy

Effective May 8, 2026

Jerome Baker Designs ("JBD," "we," "us," "our") respects your privacy. This policy explains what we collect, why, how we use it, and the choices you have. It applies to all JBD-operated sites and apps under cannacrypted.com, including the Authenticity, Rewards, Budtender, and Retail Store portals.

1. Information We Collect

Account / contact info: name (or nickname), phone number, email address, and store affiliation (for budtenders and retailers).
Verification data: photos of JBD pieces and receipts you upload. Photos may be stored at low resolution (max 200px, 50% JPEG quality); numerical fingerprint data (color averages, brightness metrics, perceptual hashes) is stored. Full-resolution images are processed in memory and not permanently stored.
Activity data: verifications run, sales logged (budtenders), points earned, training progress, scan history.
Device / network data: IP address, browser/user-agent, timestamps, and standard server logs for security and abuse prevention.
Cookies: session cookies for keeping you logged in. We do not use third-party advertising cookies.

2. How We Use Information

To deliver the service: verify pieces, issue shop codes, run the budtender rewards program, send order/training/sweepstakes communications.
To send you SMS messages you have opted into — verification codes, training reminders, drop announcements, and program updates. Mobile information is never sold or shared with third parties for marketing or promotional purposes.
To send transactional and program emails (verify links, shop codes, confirmations, prize notifications).
To improve our authentication models. Low-resolution images and extracted numerical fingerprints contribute to internal machine-learning models that improve fake-detection. No personally identifiable information is used in model training.
To prevent fraud, enforce our Terms, and comply with legal obligations.

3. SMS Messaging

If you opt in to SMS, JBD sends you recurring messages — including one-time verification codes, training reminders, program updates, and drop announcements. Message frequency varies. Message and data rates may apply, depending on your carrier plan.

Opt out: reply STOP to any JBD SMS to unsubscribe. You will receive a single confirmation message.
Help: reply HELP for support information, or email glass@cannacrypted.com.
No sale or sharing: mobile phone numbers and SMS opt-in data collected for the JBD program are used only by JBD and our messaging carrier (Twilio) to deliver the messages you've opted into. We do not sell, rent, or share mobile numbers or opt-in data with third parties for their marketing or promotional purposes.
Carrier delivery is not guaranteed. JBD is not responsible for delays caused by your carrier.

4. How We Share Information

Service providers who help us operate the platform: Google Cloud (hosting), Railway (database), Twilio (SMS), Resend (email), HubSpot (CRM for retailer accounts), Anthropic (AI for verification). These providers are contractually limited to using your data only to provide their service to us.
Stores and retailers see budtenders affiliated with their store (name, nickname, points, training status). Stores do not receive your phone or email unless required for prize fulfillment with your prior knowledge.
Legal: we may disclose information when required by law, valid legal process, or to protect rights, property, or safety.
Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred — subject to this policy.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Data Retention

Account records are kept while the account is active and for a reasonable period afterward to comply with legal, accounting, and reporting obligations.
SMS opt-in records (consent timestamp, IP address, phone number) are retained as long as you remain opted in plus a minimum of two (2) years after opt-out, for compliance audit purposes.
Verification fingerprints are retained indefinitely as part of the JBD provenance database.
Receipt image hashes are retained to prevent duplicate code issuance.

6. Your Choices and Rights

Access / correction / deletion: email glass@cannacrypted.com to request a copy of your data, correct it, or delete your account.
SMS opt-out: reply STOP at any time.
Email opt-out: use the unsubscribe link in any program email.
California residents (CCPA/CPRA): you have the right to know, delete, correct, and limit use of sensitive personal information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as defined by the CCPA.
EEA / UK residents (GDPR): our legal bases are consent (SMS, marketing email), contract (delivering the service you signed up for), and legitimate interests (security, fraud prevention, product improvement). You may withdraw consent at any time.

7. Security

We use industry-standard safeguards — TLS in transit, hashed passwords (where applicable), HSTS, role-segmented portals, signed session cookies, and limited admin access. No system is perfectly secure; report suspected issues to glass@cannacrypted.com.

8. Children

JBD's services are not directed to anyone under 21. Cannabis-related portions of the service require legal-age verification per the laws of the user's jurisdiction. We do not knowingly collect data from minors; if you believe we have, contact us and we'll delete it.

9. Changes to This Policy

We may update this policy. Material changes will be announced on this page with a revised "Effective" date. Continued use after the change indicates acceptance of the updated policy.

10. Contact

Jerome Baker Designs · glass@cannacrypted.com · cannacrypted.com

SMS opt-in summary (10DLC / TCR disclosure): Jerome Baker Designs uses SMS to send verification codes, budtender training reminders, drop announcements, and program updates to users who explicitly opt in via the budtender or retailer signup forms. Message frequency varies. Msg & data rates may apply. Reply STOP to unsubscribe, HELP for help. Mobile information is never sold or shared with third parties for marketing or promotional purposes.