Cannafornia (“Cannafornia,” “we,” “us”) is operated by Soco Supply, LLC. We provide a professional networking service for individuals and businesses licensed by the California Department of Cannabis Control (DCC). This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have.
Information we collect
Public DCC license data. California publishes a daily registry of every active DCC license, which includes the business legal name, doing-business-as name, owner names, license type, license number, premises address, mailing address, contact phone, and contact email. We mirror that public registry on Cannafornia so that anyone in the industry can browse and search it.
Account information. When you create a Cannafornia account we collect your email address, your name, the licenses you claim association with, and any optional profile information you add (photo, business role, bio, links).
Identity verification. To prove that you control a license listed in the DCC registry we ask you to either (a) complete a one-time email code sent to the contact email the DCC has on file for that license, or (b) upload a copy of the state-issued license document and a government-issued photo ID. Uploaded documents are scanned automatically (by an AI model and by our team) to confirm identity and then encrypted and retained only as long as needed to support the account.
Usage and device data. Like most web services we record basic technical information when you visit (IP address, browser type, pages viewed, timestamps) so we can keep the service running and prevent abuse.
How we use information
We use your information to operate the service: to verify that you hold an active California cannabis license, to display the public portions of your profile on Cannafornia, to deliver messages between members, to send service-related email (sign-in codes, password resets, security notices), and to detect and prevent fraud or abuse.
We do not sell your personal information. We do not use the contents of your uploaded ID documents for any purpose other than identity verification.
How we share information
Other members. Information you choose to put on your public profile is visible to other verified Cannafornia members. The underlying DCC license data is already public and remains so on Cannafornia regardless of whether the license holder has an account.
Service providers. We use trusted third parties to run the service: Supabase (database and authentication hosting), Google Cloud and Google Workspace (transactional email, sign-in, identity), Vercel (web hosting), and OpenAI (automated ID-document review). Each provider may process your information only as needed for their function and is bound by their own confidentiality obligations.
Legal. We may disclose information if required by law, valid legal process, or to protect rights, property, or safety.
Your choices
You can update or delete your account at any time from your account settings, or by emailing hello@cannafornia.biz. Deleting your account removes your profile, messages, and uploaded identity documents. The underlying DCC public-record entry for the license itself is not deleted, because we do not own that data — it remains on file with the State of California.
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, the right to delete, the right to correct, and the right to opt out of any sharing. To exercise these rights contact us at the address above.
Data security and retention
We use industry-standard safeguards (TLS in transit, encryption at rest, role-based access controls) to protect your data. Identity documents are stored in an access-restricted bucket and are deleted on request. No service can guarantee perfect security, so please choose a strong password and let us know immediately if you suspect unauthorized access.
Children
Cannafornia is intended only for adults licensed by the DCC. California prohibits cannabis-license issuance to anyone under 21. We do not knowingly collect information from anyone under 18.
Changes to this policy
We may update this policy from time to time. If we make material changes we will notify active accountholders by email at least 14 days before the change takes effect.
Contact us
Soco Supply, LLC, 1535 Farmers Ln #243, Santa Rosa, CA 95405.
Email: hello@cannafornia.biz