Privacy Policy
Greenstreet QS LLC dba DeliverBud · Version 1.0 · Effective Date: June 24, 2026
01 Who We Are
Greenstreet QS LLC, doing business as DeliverBud ("DeliverBud," "we," "us," or "our"), operates a cannabis marketplace technology platform at deliverbud.com connecting adult consumers 21+ with licensed adult-use cannabis retail dispensaries in New York State.
DeliverBud is an Indirect Cannabis-Related Business (ICRB). We are a technology and compliance infrastructure platform — we do not sell cannabis, and we do not handle, possess, store, or transport cannabis at any point. All cannabis transactions are between the consumer and the licensed dispensary. All cannabis delivery is performed by delivery personnel independently employed on a W-2 basis by licensed dispensary partners.
This Privacy Policy explains how DeliverBud collects, uses, stores, shares, and protects personal information from consumers, dispensary partners, and delivery personnel who interact with our platform.
02 Information We Collect
From Consumers
- Account information: name, date of birth (21+ verification), email address, phone number, delivery address
- Order information: products ordered, order subtotals, timestamps, delivery address, order history
- Payment information: information necessary to facilitate transactions with licensed dispensary partners. Payment processing is performed by the dispensary or its approved payment provider. DeliverBud does not receive, hold, route, or store full payment card information.
- Identity verification: government-issued ID photograph captured at delivery for age verification (21+)
- Usage data: device type, browser type, IP address, pages visited, time on platform, interactions
- Location data: delivery address and, where permitted, approximate location for delivery tracking
From Dispensary Partners
- Business information: legal entity name, DBA, OCM license number, EIN, principal place of business, contact names
- Beneficial ownership information: as required for banking compliance under FinCEN's Customer Due Diligence Rule
- Order and transaction data: all orders fulfilled through the platform, settlement records, revenue data
- BioTrack-related event data: delivery completion events provided to the dispensary for their BioTrack compliance
From Delivery Personnel
- Identity and credentials: full legal name, date of birth, government-issued driver's license, vehicle registration, auto insurance
- Background check results: conducted by DeliverBud's authorized background check provider
- Activity data: delivery events, GPS coordinates at each delivery stage, QR scan records, and delivery completion timestamps
- Training records: completion records for all four OCM Responsible Workforce Training components
03 How We Use Your Information
Consumers
- To process and fulfill cannabis orders placed through the marketplace
- To verify that consumers are 21 years of age or older as required by NY OCM regulations
- To enforce OCM purchase limits and delivery compliance through our automated compliance engine
- To provide order status updates and delivery tracking
- To facilitate transactions with licensed dispensary partners and to assist with order-related inquiries, refunds, or disputes
- To maintain the tamper-evident audit log required by OCM regulations
- To communicate service updates, policy changes, and required notices
Dispensary Partners
- To manage the dispensary partnership and provide platform services
- To provide platform usage reports, invoices, and operational reporting to dispensary partners
- To transmit delivery completion events for the dispensary's BioTrack compliance
- To monitor TPI compliance thresholds as required by NY OCM Part 118
- To satisfy banking compliance obligations with Four Leaf Federal Credit Union and Green Check Verified
Delivery Personnel
- To verify eligibility for participation on the Platform
- To facilitate driver onboarding and delivery workflow management
- To maintain credential and compliance records in accordance with OCM requirements
- To maintain OCM Responsible Workforce Training records
- To investigate complaints, conduct violations, or incidents
04 How We Share Your Information
We do not sell personal information. We do not share personal information for marketing purposes without explicit consent.
With Dispensary Partners
Consumer order information (name, delivery address, order details) is shared with the relevant dispensary partner to fulfill the order. Dispensary partners receive delivery completion event data for their OCM compliance and BioTrack reporting.
With Delivery Personnel
Delivery personnel receive the consumer's delivery address, order package QR information, and limited contact information necessary to complete the delivery. Delivery personnel do not receive consumer payment information or full account data.
With Service Providers
We share data with vendors who help us operate the platform including: payment processors, background check providers, cloud hosting providers, SMS/notification providers, and analytics services. All service providers are contractually prohibited from using data for purposes other than providing services to DeliverBud.
With Banking Compliance Partners
Transaction data and business information is shared with Four Leaf Federal Credit Union and Green Check Verified as required under our cannabis banking program and applicable BSA/AML obligations.
With Law Enforcement and Regulators
We may share information with law enforcement, the NY Office of Cannabis Management, FinCEN, or other regulatory authorities when required by law, in response to valid legal process, or to protect the safety of users, drivers, or the public.
05 Cannabis-Specific Privacy Considerations
- We do not share consumer cannabis purchase history with third parties for marketing or data-brokerage purposes
- We do not use cannabis purchase data for purposes unrelated to fulfilling orders and maintaining compliance
- Government-issued ID photographs captured at delivery are used solely for age verification
- All platform data is stored in encrypted form at rest and in transit
Age Verification Data: Government-issued ID photographs captured by dispensary-employed delivery personnel at delivery are retained for the period required by applicable law and OCM regulations, then permanently deleted. We do not use ID photographs for any purpose other than age verification compliance.
06 Data Retention
| Data Type | Retention Period |
|---|
| Order and transaction records | 5+ years from transaction date, consistent with OCM requirements |
| Government-issued ID photographs | 3 years from date of capture, then permanently deleted |
| Consumer account data | Duration of account plus 3 years after account closure |
| Driver identity and credential records | 5+ years after termination of participation on the Platform |
| Driver training records | 5+ years after termination of participation on the Platform |
| Financial and settlement records | 7 years, consistent with IRS requirements |
| Audit log | 5+ years, tamper-evident, consistent with OCM requirements |
| BSA/AML records | 5+ years from the relevant transaction or report date |
07 Your Rights
- Right to access: request a copy of the personal information we hold about you
- Right to correction: request correction of inaccurate or incomplete personal information
- Right to deletion: request deletion of your personal information, subject to legal retention obligations
- Right to data portability: request your data in a portable format
- Right to opt out of marketing communications at any time
To exercise any of these rights, contact us at privacy@deliverbud.com. We will respond to verified requests within 30 days. Some requests may be limited by legal obligations — for example, we cannot delete records we are required to retain under OCM regulations or BSA/AML law.
08 Security
- Encryption of data at rest and in transit
- Access controls limiting data access to authorized personnel on a need-to-know basis
- Tamper-evident audit logging of all platform events
- Regular review of security practices and vendor security posture
If we become aware of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.
09 Contact Us
This Privacy Policy may be updated from time to time. Material changes will be communicated to registered users by email and posted on deliverbud.com with an updated effective date.