Privacy Policy
Last updated: September 26, 2026
Terpi is operated by Conversion System. For dispensaries that use it, we are responsible for their account data. For the shoppers who chat with a dispensary's budtender, the dispensary decides what is collected and why, and we process that data on its behalf. Shoppers with questions about their data should contact the dispensary first; we help dispensaries answer those requests.
1. What we collect
- Dispensary accounts: names and emails of account members, business details, widget and assistant settings, documents you upload, and billing records (card details stay with Stripe).
- Shopper conversations: the messages shoppers send and the replies, the chat session id, which store they picked, and what was in their cart on the dispensary's online menu when they asked.
- Contact details shoppers choose to give in the chat (name, email, phone), saved as leads for the dispensary.
- Images shoppers attach to a message.
- IP addresses, used only to limit abuse (rate limiting).
2. How it is used
- To answer shoppers: messages are sent to AI model providers to generate replies, and product questions are searched in the dispensary's menu.
- To show the dispensary its inbox, leads and insights, and to let its team reply.
- To bill accounts, send account and alert emails, keep the service secure and fix errors.
- We do not sell personal data, use it for advertising, or use shoppers' conversations to train AI models.
3. Who processes it
- Supabase (database and file storage) and Vercel (hosting).
- OpenRouter and the model providers it routes to (such as Anthropic), and OpenAI (replies when the primary provider fails, and search over the dispensary's documents).
- The dispensary's menu platform (Jane) receives product searches and stock checks.
- Stripe (billing), Resend (email) and Sentry (error reports, which exclude message contents, headers and cookies).
- Where a dispensary sets up a lead webhook, new leads are sent to the address it chooses.
4. How long it is kept
- Conversations: for the retention period each dispensary sets (12 months unless it chooses otherwise), then deleted automatically. A dispensary can delete a shopper's conversation at any time.
- Images shoppers attach: 30 days.
- Leads: until the dispensary deletes them or its account is deleted.
- IP addresses in rate-limit records: no more than a day.
- Account data: while the account is open. Deleting an account deletes its dispensaries, conversations, leads and documents.
5. In the shopper's browser
- The widget stores a chat session id, the store picked, the age-check answer and small display preferences in the browser's local storage, so a conversation survives page loads. It sets no advertising or tracking cookies.
- The dispensary dashboard uses sign-in cookies.
6. Security
- Data is encrypted in transit. Menu-platform credentials that dispensaries give us are encrypted at rest.
- Access to account data is limited to the account's members and, for support, to our staff.
7. Your rights
- Depending on where you live (for example under the CCPA), you can ask to access, correct, delete or export your personal data, and to opt out of marketing emails.
- Shoppers: contact the dispensary whose website you chatted on. Dispensary account members: email hello@conversionsystem.com.
8. Age
- The service is for adults 21 and over. It is not directed at minors, and the widget asks visitors to confirm their age.
9. Changes and contact
- We will update this policy when what we collect or how we use it changes, and email account owners about material changes.
- Questions: hello@conversionsystem.com.