Legal

Privacy Policy

Last updated October 25, 2026

This policy explains what Cap & Stem collects through our website and store, why, and the choices you have. We do not sell your personal information.

What we collect

Category	Examples	Where it comes from
Account	Name, email, phone, password (stored encrypted by our login provider)	You, at sign-up
Identity and age	Date of birth, legal name, ID type and expiry, who verified it	You, and staff when they check your ID in store
Profile (optional)	Address, pronouns, experience level, favorite strains, allergies, notes	You
Purchases	Orders, items, pickup times, amounts, discounts, cashback, check-ins, staff who served you	Our website and register
Membership	Plan, payments, paid-through date, upgrade requests, saved store discount	Our register and your account
Messages	Contact-form messages, vendor applications	You
Preferences	Email and text opt-ins	You
Technical	Login cookies, an age-confirmation cookie, basic server logs (IP address, browser)	Your browser

We don’t collect payment card numbers: we only take cash. We don’t accept ID uploads online; staff look at your ID in person.

How we use it

To check you are 21+ and that the person picking up is the account holder
To hold and fulfill orders, run memberships, and track cashback and rewards
To send order and account emails, and promotions if you opt in
To answer questions, keep the store and website secure, and prevent fraud
To meet legal obligations and keep business records

Who we share it with

Only service providers that run the website for us, under their own privacy and security terms:

Supabase: database, logins and file storage
Vercel: website hosting
Our email provider, to send account and order emails
Our text-message provider, once texting launches

We may also share information if the law requires it, to protect our rights or safety, or as part of a sale of the business.

How long we keep it

We keep account and purchase records while your account is open and afterward for as long as we need them for tax and business records. You can ask us to delete your account at any time; some records may be kept where the law requires.

Your choices

See and update most of your details in your account. Staff can correct your date of birth.
Turn emails or texts off in your account, or reply STOP to a text.
Ask for a copy of your data, or for your account to be deleted, through our contact form or at the store.
Optional profile fields, including allergies and notes, can be left blank or cleared at any time.

Security

Access to member records is limited to signed-in staff, each with their own login. Data is encrypted in transit. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.

Adults only

Our website and store are for adults 21 and older only. We don’t knowingly collect information from anyone under 21, and we delete it if we learn we have.

Changes and contact

We’ll post any changes here with a new date, and email members about material changes.

Cap & Stem · 814 S State St, Ann Arbor, MI 48104 · (720) 998-2958 · or use our contact form.