Legal Notice

CHRONIC DELIVERY PRIVACY POLICY

Effective Date: August 20, 2026
Last Updated: August 20, 2026

Chronic Delivery LLC ("Chronic Delivery," "we," "us," or "our") respects the privacy of the individuals and businesses that use the Chronic Delivery platform.

This Privacy Policy explains how information is collected, used, disclosed, retained, and protected when you access or use the Chronic Delivery mobile application, website, Driver Portal, Dispatcher Portal, Dispensary Portal, administrative systems, integrations, and related services (collectively, the "Services").

Chronic Delivery provides technology and logistics services supporting licensed cannabis delivery operations. Depending on how the Services are used, information may be provided directly by you, by a licensed cannabis retailer or other business partner, or through an authorized third-party integration.

By using the Services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on your relationship with Chronic Delivery and how you use the Services.

A. Account and Contact Information

We may collect information such as:

Name

Email address

Telephone number

Username or account identifier

Business or dispensary affiliation

Job or user role

Facility or cannabis license information

Driver or employee license information

Account authentication and security information

B. Delivery and Order Information

When necessary to provide delivery services, we may process information associated with a delivery, including:

Customer name

Delivery address

Telephone number

Order or delivery number

Manifest number

Package or inventory identifiers

Delivery instructions

Delivery status

Pickup and delivery timestamps

Assigned driver and vehicle

Route and dispatch information

Proof-of-delivery information

Customer signature, when required

Delivery verification information

Payment status or payment method

Delivery-related compliance records

Some order information may be provided to Chronic Delivery by a licensed retailer, point-of-sale ("POS") provider, or another authorized system rather than directly by the customer.

C. Identity and Age Verification Information

Cannabis deliveries are subject to legal age and identity-verification requirements.

The Services may therefore process information necessary to document or confirm customer eligibility to receive a delivery.

Depending on the verification method used, this may include:

Confirmation that identification was inspected

Date of birth or age-verification result

Identification type

Limited identification information

Verification timestamp

Verification status

Chronic Delivery seeks to limit collection of identification information to what is reasonably necessary for delivery, security, recordkeeping, and regulatory compliance.

D. Driver and Workforce Information

For drivers, dispatchers, contractors, employees, and other authorized users, we may collect:

Name and contact information

Driver or occupational license information

Vehicle information

Insurance or qualification information

Work assignments

Delivery activity

Pickup and completion records

Compliance activity

Training or authorization records

Payment or compensation information when applicable

E. Location Information

The Chronic Delivery Driver Portal may collect or process a driver's geographic location while the driver is actively using the Services or performing delivery-related duties.

Location information may be used to:

Display driver location to authorized dispatch personnel

Coordinate pickups and deliveries

Calculate routes

Estimate arrival times

Document delivery activity

Verify delivery milestones

Support safety and regulatory compliance

Investigate delivery discrepancies or incidents

Location information is not intended to be used for unrelated personal tracking.

The specific collection of location information may depend on the permissions granted through the driver's mobile device and the features being used.

F. Device and Technical Information

We may automatically receive technical information such as:

Device type

Operating system

Browser type

Application version

IP address

Login timestamps

Session information

Device or application identifiers

Error and diagnostic information

Security and authentication events

We use this information primarily for application functionality, security, troubleshooting, fraud prevention, and system improvement.

G. Barcode and Package Verification Information

Drivers may use the Services to scan cannabis package identifiers or barcodes during pickup and delivery workflows.

We may maintain records showing:

Package identifier

Manifest association

Date and time of scan

Delivery association

Driver performing the scan

Verification result

Related compliance event

These records may be maintained as part of the delivery's compliance and audit history.

H. Payment Information

Where payment functionality is offered, payment transactions may be processed through authorized third-party payment providers or payment terminals.

Chronic Delivery may receive information such as:

Transaction identifier

Payment method

Transaction amount

Approval or decline status

Payment timestamp

Limited transaction metadata

Chronic Delivery does not intend to store full payment card numbers or card security codes when payment information is processed by a third-party payment provider.

The payment provider's own privacy and security policies may also apply.

2. How We Obtain Information

Information processed through Chronic Delivery may come from:

You directly

Licensed cannabis retailers or dispensaries

Authorized dispensary employees

Drivers and dispatchers

Retail POS systems

Payment processors

Regulatory or compliance systems

Authorized API integrations

Devices running the Chronic Delivery application

Other service providers acting on behalf of Chronic Delivery or participating businesses

3. How We Use Information

We may use information to:

Create and manage user accounts

Receive and process delivery requests

Assign drivers and vehicles

Coordinate dispatch operations

Provide routing and navigation functionality

Verify cannabis packages at pickup

Track delivery progress

Confirm arrival and delivery

Verify legally required delivery conditions

Process or document payments

Maintain manifests and delivery records

Communicate with customers regarding their deliveries

Communicate with drivers, dispatchers, and retail partners

Maintain compliance records

Support authorized regulatory reporting

Integrate with retail POS and other business systems

Prevent fraud, theft, diversion, and unauthorized access

Investigate incidents and discrepancies

Maintain system security

Troubleshoot technical problems

Improve the Services

Maintain audit trails

Comply with applicable laws and regulations

Establish, exercise, or defend legal claims

4. Cannabis Regulatory and Compliance Information

Cannabis delivery is a regulated activity.

Certain information processed through Chronic Delivery may be required to comply with applicable cannabis laws, regulations, licensing requirements, recordkeeping obligations, and regulatory reporting requirements.

Where authorized and applicable, information may be exchanged with regulatory systems such as Metrc or other systems designated by a cannabis regulatory authority.

Information submitted to a governmental or regulatory system may become subject to that system's own retention, disclosure, and access requirements.

Chronic Delivery does not control information after it has been lawfully submitted to an independent governmental or regulatory system.

5. Information Sharing

Chronic Delivery does not sell personal information to third parties for monetary consideration.

We may disclose information when reasonably necessary to operate the Services, including to:

Licensed Retail Partners

Information may be shared with the licensed retailer associated with a customer's order.

Drivers and Dispatchers

Authorized personnel may receive information necessary to perform a delivery, such as customer name, delivery address, telephone number, delivery instructions, package information, and verification requirements.

Access is intended to be limited to information reasonably necessary to perform assigned duties.

Technology and Service Providers

We may use third-party providers for services such as:

Cloud hosting

Mapping and navigation

Geocoding

Communications

Payment processing

Application infrastructure

Cybersecurity

Data storage

POS integration

Analytics and diagnostics

These providers may process information on our behalf subject to their contractual obligations and applicable law.

Regulatory Authorities

We may disclose information when required or authorized by applicable cannabis regulations or other laws.

Law Enforcement and Legal Requests

We may disclose information when we reasonably believe disclosure is required by law, subpoena, court order, legal process, or a valid request from an authorized governmental authority.

Business Transactions

If Chronic Delivery is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction, information may be disclosed as part of that transaction subject to applicable law.

6. Role-Based Access

Chronic Delivery uses role-based access controls intended to restrict access to information based on a user's responsibilities.

For example:

Drivers generally receive information necessary for their assigned deliveries.

Dispatchers generally receive information necessary to manage authorized delivery operations.

Retail partners generally receive information associated with their organization and deliveries.

Chronic Delivery administrators may receive broader access when necessary for operations, security, support, or compliance.

Users must not attempt to access information outside the scope of their authorized responsibilities.

7. Location Privacy

Driver location information is considered operational information and is used primarily for delivery management, dispatch, safety, verification, and compliance.

Where device permissions are required, users may be asked to authorize location access through their mobile device.

Disabling required location permissions may prevent certain delivery or driver functions from operating properly.

Chronic Delivery does not intend to use driver location information for unrelated advertising or consumer profiling.

8. Data Security

Chronic Delivery uses reasonable administrative, technical, and organizational safeguards designed to protect information against:

Unauthorized access

Unauthorized disclosure

Loss

Theft

Misuse

Alteration

Destruction

Depending on the system and data involved, safeguards may include:

Encryption

Authentication controls

Role-based permissions

Access logging

Audit trails

Secure API connections

Credential protection

Monitoring

Data-access restrictions

No internet-connected system can be guaranteed to be completely secure. Users are responsible for protecting their login credentials and promptly reporting suspected unauthorized access.

9. Data Retention

Chronic Delivery retains information for as long as reasonably necessary to:

Provide the Services

Maintain delivery and transaction records

Meet cannabis regulatory requirements

Meet tax, accounting, insurance, and contractual requirements

Maintain security and audit records

Resolve disputes

Investigate incidents

Enforce agreements

Meet other legal obligations

Because cannabis operations are subject to regulatory recordkeeping requirements, some delivery and compliance records may need to be retained even after an account is closed or a user requests deletion.

When information is no longer reasonably necessary and no legal or regulatory requirement requires its retention, Chronic Delivery may delete, anonymize, or securely dispose of the information.

10. Your Privacy Choices and Rights

Depending on applicable law and your relationship with Chronic Delivery, you may have the right to request:

Access to certain personal information

Correction of inaccurate personal information

Deletion of certain personal information

Information regarding how personal information is processed

Withdrawal of certain permissions or consent

Other privacy rights provided by applicable law

Certain requests may be limited when Chronic Delivery is required to retain information for cannabis compliance, legal, security, fraud-prevention, contractual, or recordkeeping purposes.

We may need to verify your identity before processing a privacy request.

If information was provided to Chronic Delivery by a retail partner, we may need to coordinate the request with that retailer.

11. Account Deletion

Users may request deletion of their Chronic Delivery account by using an available account-deletion feature within the application or by submitting a request to Chronic Delivery.

Deleting an account does not necessarily delete every record associated with the user.

Records that Chronic Delivery or a participating licensed business is legally required to retain — including certain delivery, transaction, security, audit, or cannabis compliance records — may remain in our systems for the legally required retention period.

Information that is not required to be retained will be deleted or de-identified as appropriate.

12. Cookies and Similar Technologies

Chronic Delivery websites and web-based portals may use cookies, local storage, session technologies, or similar technologies for:

Authentication

Security

Maintaining user sessions

Remembering application preferences

Diagnosing technical issues

Measuring application performance

We do not intend to use sensitive cannabis delivery information for third-party behavioral advertising.

13. Third-Party Services and Integrations

The Chronic Delivery platform may integrate with third-party services, including:

Retail POS systems

Payment processors

Mapping and navigation providers

Regulatory systems

Communications providers

Other authorized business systems

When information is transferred to an independent third party, that party's privacy policy and legal obligations may apply.

Chronic Delivery is not responsible for the independent privacy practices of third parties that are not acting as service providers to Chronic Delivery.

14. Children's Privacy

The Chronic Delivery Services are not intended for children.

Cannabis delivery services are restricted to individuals who meet applicable legal age requirements.

Chronic Delivery does not knowingly provide cannabis delivery services to individuals who are not legally eligible to receive cannabis products.

15. Prohibited Use of Information

Information obtained through the Chronic Delivery platform may not be used to:

Harass or stalk another person

Access customer information without authorization

Track drivers for unauthorized personal purposes

Disclose cannabis purchase or delivery information without authorization

Circumvent access controls

Obtain information unrelated to legitimate business duties

Use customer information for unauthorized marketing

Sell or commercially exploit personal information outside authorized Chronic Delivery operations

Unauthorized access or misuse may result in suspension or termination of platform access and may be reported when required by law.

16. Security Incident Response

If Chronic Delivery becomes aware of a security incident involving personal information, we will investigate the incident and take reasonable steps to contain and remediate it.

Where required by applicable law, Chronic Delivery will provide notifications to affected individuals, business partners, regulators, or governmental authorities.

17. Changes to This Privacy Policy

Chronic Delivery may update this Privacy Policy periodically to reflect changes in:

The Services

Technology

Business practices

Integrations

Legal requirements

Cannabis regulations

When material changes are made, we may update the "Last Updated" date and provide additional notice when required by law.

Continued use of the Services following an updated Privacy Policy is subject to applicable law and any consent requirements that may apply.

18. Contact Chronic Delivery

Questions, privacy requests, or concerns regarding this Privacy Policy may be directed to:

Chronic Delivery LLC
Minnesota, United States

Privacy Email: [jason.axelson@cantransexpress.com]
Support Email: [jason.axelson@cantransexpress.com]
Website: [www.cantransexpress.com]

For privacy requests, please include enough information for Chronic Delivery to identify your account or relationship with the Services. Do not send passwords, full payment card numbers, or other unnecessary sensitive information by email.

19. Minnesota Privacy Rights

Minnesota residents may have additional rights regarding personal data under applicable Minnesota privacy law.

Where applicable, Chronic Delivery will provide mechanisms for exercising those rights and will process verified requests in accordance with applicable legal requirements.

Chronic Delivery will not unlawfully discriminate against an individual for exercising an applicable privacy right.

Some information or processing activities may be exempt from certain privacy requirements, including information that must be maintained to satisfy legal, regulatory, security, employment, business-to-business, or cannabis compliance obligations.

20. Contact Regarding Privacy Complaints

If you believe your personal information has been handled improperly, please contact Chronic Delivery using the privacy contact information above.

We will review legitimate privacy complaints and take appropriate action consistent with applicable law.

Chronic Delivery LLC
Privacy Policy — Version 1.0
Effective August 20, 2026