Lodestar by WOLFE
Sign in

Privacy & your data rights

How Lodestar by WOLFE handles your data, and the data controls we extend to every user, in the spirit of GDPR, CCPA, and similar privacy laws.

What we collect

  • Account data you give us: dispensary name, license, owner name and email.
  • Operational records you create in the product: invoices, vendor records, payments, inventory and compliance data.
  • Essential cookies / local storage to keep you signed in. We do not run third‑party advertising or behavioral tracking.

Service providers

We use a small number of infrastructure providers to run Lodestar: cloud hosting and database (where your data is stored), and a web-font provider used to display the interface. These providers process data only to deliver the service and are not permitted to use it for their own purposes. We do not sell your data or share it for advertising.

Your rights

  • Access & portability. Export a machine‑readable copy of your data from Settings, or via GET /api/v1/account/export while signed in.
  • Erasure. Request account deletion from Settings. We honor it within 30 days, except records the law requires us to keep (see retention below).
  • Consent. Your cookie choice is recorded and you can change it any time by clearing site data.

Data retention

Some records must be retained even after a deletion request, because tax and cannabis regulations require it:

  • Financial & tax records, retained for the period required by IRS recordkeeping (including IRC 280E) and state cannabis statutes.
  • Audit log, append‑only and never erased; it exists to prove what happened.
  • Metrc / seed‑to‑sale, retained per state traceability rules.
  • Profile, settings, marketing consent, erased on deletion (settings and marketing consent immediately; profile within 30 days).

The live policy is available to signed‑in accounts at GET /api/v1/account/retention.

Security

Sensitive credentials are encrypted at rest. Access is isolated per tenant at the database layer. Every sensitive action is recorded in a tamper‑evident audit log.

Contact

Questions or a rights request you can't complete in‑app: support@w0lfe.tech.