Privacy Policy

Last updated: September 26, 2026

Terpi is operated by Conversion System. For dispensaries that use it, we are responsible for their account data. For the shoppers who chat with a dispensary's budtender, the dispensary decides what is collected and why, and we process that data on its behalf. Shoppers with questions about their data should contact the dispensary first; we help dispensaries answer those requests.

1. What we collect

  • Dispensary accounts: names and emails of account members, business details, widget and assistant settings, documents you upload, and billing records (card details stay with Stripe).
  • Shopper conversations: the messages shoppers send and the replies, the chat session id, which store they picked, and what was in their cart on the dispensary's online menu when they asked.
  • Contact details shoppers choose to give in the chat (name, email, phone), saved as leads for the dispensary.
  • Images shoppers attach to a message.
  • IP addresses, used only to limit abuse (rate limiting).

2. How it is used

  • To answer shoppers: messages are sent to AI model providers to generate replies, and product questions are searched in the dispensary's menu.
  • To show the dispensary its inbox, leads and insights, and to let its team reply.
  • To bill accounts, send account and alert emails, keep the service secure and fix errors.
  • We do not sell personal data, use it for advertising, or use shoppers' conversations to train AI models.

3. Who processes it

  • Supabase (database and file storage) and Vercel (hosting).
  • OpenRouter and the model providers it routes to (such as Anthropic), and OpenAI (replies when the primary provider fails, and search over the dispensary's documents).
  • The dispensary's menu platform (Jane) receives product searches and stock checks.
  • Stripe (billing), Resend (email) and Sentry (error reports, which exclude message contents, headers and cookies).
  • Where a dispensary sets up a lead webhook, new leads are sent to the address it chooses.

4. How long it is kept

  • Conversations: for the retention period each dispensary sets (12 months unless it chooses otherwise), then deleted automatically. A dispensary can delete a shopper's conversation at any time.
  • Images shoppers attach: 30 days.
  • Leads: until the dispensary deletes them or its account is deleted.
  • IP addresses in rate-limit records: no more than a day.
  • Account data: while the account is open. Deleting an account deletes its dispensaries, conversations, leads and documents.

5. In the shopper's browser

  • The widget stores a chat session id, the store picked, the age-check answer and small display preferences in the browser's local storage, so a conversation survives page loads. It sets no advertising or tracking cookies.
  • The dispensary dashboard uses sign-in cookies.

6. Security

  • Data is encrypted in transit. Menu-platform credentials that dispensaries give us are encrypted at rest.
  • Access to account data is limited to the account's members and, for support, to our staff.

7. Your rights

  • Depending on where you live (for example under the CCPA), you can ask to access, correct, delete or export your personal data, and to opt out of marketing emails.
  • Shoppers: contact the dispensary whose website you chatted on. Dispensary account members: email hello@conversionsystem.com.

8. Age

  • The service is for adults 21 and over. It is not directed at minors, and the widget asks visitors to confirm their age.

9. Changes and contact

  • We will update this policy when what we collect or how we use it changes, and email account owners about material changes.
  • Questions: hello@conversionsystem.com.