Privacy Policy

Your information is not our business model.

We use website information to respond to you, protect the site, and understand which public content helps operators. We do not sell it or use it for personalized advertising.

Measurement, not profiling

Google Analytics helps us understand site performance. We do not use it for personalized advertising.

No sale of information

We do not sell or rent personal information collected through this website.

A direct line to us

Privacy questions and requests go directly to hello@smokestack.tech.

Effective August 27, 2026Last updated August 27, 2026

01

Scope & controller

This Privacy Policy explains how SMOKESTACK LLC (“SMOKESTACK,” “we,” “us,” or “our”) collects, uses, and discloses personal information through the public website at smokestack.tech and through messages you initiate with us from the website.

SMOKESTACK LLC is the controller of that website information. This policy does not cover third-party sites linked from our pages; their own notices apply when you leave our site.

SMOKESTACK LLC
2019 Galisteo Street, Suite H1
Santa Fe, New Mexico 87505

The SMOKESTACK platform has a different data relationship.

When a retailer, employer, or other customer uses the SMOKESTACK platform, its agreement with SMOKESTACK and its own privacy notice govern the data it submits. This website policy does not expand or replace those terms.

02

What we collect

The table below is our notice at collection for this website. It identifies the categories we collect, where they come from, why we use them, and how we determine retention.

Category & examplesSource & purposeRetention
Contact and business informationName, work email, phone number, company, role, and message contents.You, when you contact us.Respond to inquiries, evaluate fit, and manage a prospective relationship.For the relationship or inquiry, plus legal and recordkeeping needs.
Internet and device activityIP address, browser, device, operating system, page URL, referrer, timestamps, and diagnostics.Automatically from your browser and our infrastructure.Deliver, secure, diagnose, and measure the website.According to operational need; GA4 user and event data is configured for up to 14 months.
Approximate locationCountry, region, or city inferred from an IP address; not precise GPS location.Automatically through Google Analytics and security infrastructure.Understand broad audience geography, site performance, and security events.Subject to the relevant analytics or security-log retention period.
Usage insightsSessions, pages viewed, navigation paths, engagement, and aggregate site-performance trends.Derived from website activity through Google Analytics.Improve public content and understand which information is useful to visitors.User and event data for up to 14 months; aggregate reports may remain longer.

We do not ask public-site visitors to submit cannabis purchase records, patient or medical information, government identification, payment-card details, precise location, or platform credentials. Please do not include sensitive information in a general inquiry.

03

Google Analytics & cookies

We use Google Analytics 4 (“GA4”) to measure visits, sessions, page engagement, broad audience geography, browser and device categories, referral sources, and site performance. Google receives this measurement data and processes it under its own terms and privacy practices.

What Google receives

GA4's default implementation can collect session statistics, approximate location, browser and device information, page interactions, and a pseudonymous client identifier. Google states that GA4 uses an IP address at collection time to derive approximate location and discards it before logging the data.

What we do not send

We do not intentionally send Google names, email addresses, phone numbers, inquiry contents, platform identifiers, purchase information, patient information, or other data that directly identifies you.

How we configure it

We configure GA4 user-level and event-level retention for no more than 14 months. We do not currently enable Google Signals, user-provided data collection, or Google Ads audience features for this website.

Analytics cookies

GA4 uses first-party cookies when analytics storage is enabled. Browser limits or your settings may shorten the periods shown below.

Where applicable law requires consent, we will not enable non-essential analytics storage until you consent. You can also block or delete cookies through your browser and use the Google Analytics opt-out browser add-on. Read more in Google's Analytics data-collection documentation and Google's Privacy Policy.

04

How we use information

  • Respond to questions, demo requests, and launch-onboarding inquiries.
  • Evaluate whether SMOKESTACK may be a fit for an operator's needs.
  • Deliver, maintain, troubleshoot, and secure the website.
  • Measure website performance and improve our public content.
  • Prevent fraud, abuse, security incidents, and other harmful activity.
  • Establish, exercise, or defend legal claims and comply with applicable law.

We do not add you to a marketing list you did not ask to join, and we do not use website information to make decisions that produce legal or similarly significant effects about you.

05

When we disclose information

We may disclose website information in these limited circumstances:

  • Analytics. Google receives the website-measurement information described above through Google Analytics.
  • Service providers. Vendors may process information to host, deliver, secure, diagnose, or support the site and our email communications.
  • Legal and safety needs. We may disclose information to comply with law, respond to lawful process, prevent harm, or protect rights and security.
  • Business changes. Information may be reviewed or transferred as part of a financing, reorganization, merger, acquisition, sale, or similar transaction, subject to appropriate safeguards.
  • Your direction. We may disclose information when you ask us to.

We do not sell personal information or share it for cross-context behavioral advertising.

06

Retention & security

We keep each category only as long as reasonably necessary for the purposes described in this policy. We consider the nature and sensitivity of the information, the purpose for which we collected it, operational and security needs, legal obligations, limitation periods, and whether we can aggregate or delete it.

Correspondence may be kept while relevant to an ongoing or prospective relationship and for legal or recordkeeping needs. Security logs are kept for the period reasonably needed to investigate and protect the site. GA4 user and event data is configured for no more than 14 months; Google may retain aggregated reports differently under its documentation.

We use administrative, technical, and organizational safeguards designed to protect personal information. No internet transmission or storage system can be guaranteed to be completely secure.

07

Your choices

Cookies and analytics

Use any consent control presented on the site, your browser's cookie settings, or the Google Analytics opt-out add-on. Blocking analytics does not prevent you from reading the website.

Marketing messages

You can unsubscribe using the instructions in a marketing email or by contacting us. We may still send non-marketing replies you requested.

Do Not Track

Because browsers do not apply a uniform Do Not Track standard, this site does not respond to DNT alone. We handle Global Privacy Control as described below.

Direct requests

You can ask about, correct, or request deletion of information you sent us by emailing hello@smokestack.tech.

08

U.S. state privacy rights

Depending on where you live and whether the relevant law applies to SMOKESTACK or the information at issue, you may have rights to:

  • Confirm whether we process your personal information and access it.
  • Correct inaccurate personal information.
  • Delete personal information, subject to legal exceptions.
  • Receive certain information in a portable format.
  • Opt out of sale, targeted advertising, or qualifying profiling.
  • Limit certain uses of sensitive personal information.
  • Appeal a decision about your request.
  • Exercise your rights without unlawful discrimination.

Submit a request using the email below and describe the right you want to exercise. We may request information reasonably necessary to verify your identity, residence, and authority. An authorized agent may submit a request where permitted by law; we may ask for proof of authorization. To appeal, reply to our decision with “Privacy appeal.”

California notice

During the preceding 12 months, the categories collected and business purposes are those listed in “What we collect.” We disclosed contact information to communications and infrastructure providers, and internet, device, approximate-location, and usage information to hosting, security, and analytics providers for business purposes. We did not knowingly sell personal information or share it for cross-context behavioral advertising. We do not offer financial incentives for website personal information.

Global Privacy Control

Where applicable law requires it, we treat a recognized Global Privacy Control (“GPC”) signal as a request to opt out of sale or targeted advertising for that browser. Because we do not currently engage in either practice, the signal does not change our present processing. GPC is not a general analytics opt-out unless applicable law requires that result; use the analytics choices above to control measurement.

Exercise a privacy right

Email us with “Privacy request” in the subject line.

Email us

09

International visitors

SMOKESTACK LLC is based in the United States. If you visit from another country, your information may be processed in the United States or other countries where our providers, including Google, operate. Those countries may have different data-protection laws.

Where applicable law requires a legal basis, we rely on consent for non-essential analytics; steps requested by you and our legitimate interests for responding to business inquiries; our legitimate interests in operating and securing the site; and compliance with legal obligations. Where required, we use contractual or other recognized safeguards for international transfers.

10

Children's privacy

This business website is not directed to children, and we do not knowingly collect personal information from children under 13 through it. If you believe a child provided information through this site, contact us so we can review and delete it as appropriate.

11

Changes to this policy

We may update this policy as the website, our practices, or legal requirements change. We will post the revised version here and update the effective or last-updated date. We will provide additional notice for material changes when applicable law requires it.

12

Contact

SMOKESTACK LLC is responsible for this website policy. Questions, complaints, and privacy requests can go to hello@smokestack.tech.

SMOKESTACK LLC
2019 Galisteo Street, Suite H1
Santa Fe, New Mexico 87505