Privacy Policy

New Wave Technology LLC ("Company," "we," "us") operates the Cannabis2u Last Mile software platform and related websites, APIs, and mobile applications (collectively, the "Platform").

The Platform is a business-to-business technology service for licensed cannabis operators, delivery partners, dispensaries, and their authorized personnel and drivers. We process personal information on behalf of operators and in connection with delivery operations, including customer order and notification data.

This Privacy Policy describes how we collect, use, disclose, and protect information when you visit our marketing website, use the Platform, or interact with services powered by the Platform.

The Platform may process data in connection with:

• Dispatch, trips, driver assignment, start-of-day roster, and live delivery execution
• Route optimization, maps, and fleet location tracking
• Transactional SMS and email notifications for order status and delivery events
• POS integrations (e.g., Dutchie, Sweed, Jane) and order/customer sync
• Compliance workflows including manifests, seed-to-sale connections (e.g., BioTrack, METRC), proof-of-delivery, and audit logs
• Cannabis-native payments and pay links (e.g., CanPay, Aeropay, Bolt consumer flows)
• Multi-partner dispensary and delivery governance, entitlements, and reporting
• Optional AI-assisted operational features

Depending on your role and configuration, we may collect:

• Account and business data: names, emails, phone numbers, business names, licenses, roles, and authentication credentials
• Order and delivery data: customer name, phone, email, delivery address, order details, status, photos, signatures, and ID verification artifacts where enabled
• Location data: driver GPS during active trips and navigation; geocoded delivery coordinates for routing and maps
• Communications data: SMS and email metadata, notification templates, delivery logs, and support correspondence
• Compliance data: manifest references, scan records, start-of-day attestations, and audit events
• Technical data: device identifiers, IP address, browser type, application logs, and cookies on our marketing site

We use information to:

• Provide, operate, secure, and improve the Platform
• Optimize routes, assign drivers, and execute deliveries
• Send transactional SMS, email, and push notifications configured by operators
• Facilitate payments, POS sync, and compliance workflows
• Provide support, troubleshoot issues, and prevent fraud or abuse
• Comply with law, enforce our terms, and respond to lawful requests

Operators may use the Platform to send transactional SMS messages related to orders and deliveries, including order created, assigned, out for delivery, driver arrived, delivered, failed delivery, payment links, and driver coordination.

Customers typically provide a mobile number and consent to order-status SMS at checkout or order placement. Message frequency varies with order activity. Message and data rates may apply.

You may opt out of SMS at any time by replying STOP. Reply HELP for assistance. Opting out of SMS may limit delivery notifications.

Operators registering SMS campaigns are responsible for 10DLC brand and use-case compliance. We act as a technology provider and process messages according to operator configuration and applicable carrier rules.

We may also send transactional email for order and account events. Marketing messages, if any, require separate consent where required by law.

We share information only as needed to operate the Platform:

• With licensed operator partners (dispensaries, delivery companies) according to permissions and partner–dispensary relationships
• With service providers: cloud hosting, maps and routing, SMS and email delivery, push notifications, payment processors, POS and compliance APIs, and AI providers when features are enabled
• For legal reasons: to comply with law, respond to lawful requests, protect rights and safety, or investigate fraud or security issues
• In connection with a merger, acquisition, or asset sale, with notice as required by law
• We do not sell personal information for cross-context behavioral advertising.

We retain information as long as needed to provide the Platform, meet operator requirements, satisfy legal and compliance obligations, resolve disputes, and enforce agreements.

We use reasonable administrative, technical, and organizational safeguards. No method of transmission or storage is completely secure.

You may request access, correction, or deletion of personal information by contacting hello@c2ulastmile.com.

California residents may have rights to know, delete, correct, and opt out of sale or sharing of personal information. We do not sell personal information as defined under the CCPA.

Drivers may control location permissions through device settings. SMS opt-out is available via STOP.

We will verify requests as permitted by law before responding.

The Platform is intended for licensed operators in jurisdictions where cannabis delivery is legal. We do not sell cannabis. Operators are responsible for licenses, age verification, manifests, and compliance with applicable state and local law.

Services are not directed to individuals under 21 years of age (or the applicable legal age in their jurisdiction).

The Platform is operated from the United States. If you access the Platform from outside the U.S., you consent to processing and storage in the U.S. and other countries where we or our providers operate.

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised last-updated date. Continued use after changes constitutes notice of the update.

Questions about this Privacy Policy: hello@c2ulastmile.com