Privacy Policy

Effective date: April 29, 2026

This Privacy Policy describes how THC Provisions LLC (doing business as "Chill Country," and referred to in this document as "we," "us," or "our") handles information collected through dashboard.chillcountry.com (the "Dashboard").

The Dashboard is an internal operational platform used by Chill Country employees and authorized contractors to manage day-to-day business activities. It is not a consumer product. Most pages are gated behind a Google sign-in that is restricted to employees and contractors with @thcprovisions.com email addresses.

What this policy covers

This policy covers the Dashboard at dashboard.chillcountry.com, including any APIs and embedded widgets served from that domain. It does not cover:

• The Chill Country online store at chillcountry.com, which has its own privacy policy.
• Any third-party services we link to from the Dashboard.

Information we collect

From employees and contractors who sign in

When you sign in with Google, we receive and store:

• Your name and work email address.
• Your Google profile picture URL, if Google provides one.
• An identifier Google uses to recognize your account.

While you use the Dashboard we also store:

• The data you create or edit inside the Dashboard (tasks, settings, notes, uploaded files such as Certificates of Analysis, and similar operational records).
• Tokens that authorize the Dashboard to act on your behalf with services you have explicitly connected (for example, your Gmail account, if you have connected it).

From third-party data sources

To produce business reports, the Dashboard pulls data from third-party services that Chill Country uses to operate the business — including, for example, Shopify, Meta (Facebook and Instagram), Google Ads, and Klaviyo. The data we pull is operational data about Chill Country's own accounts (orders, ad spend, campaign performance, subscriber counts, and similar metrics). We do not pull personal data about end-users of those third-party services beyond what is necessary to compute these reports, and we do not display end-user-identifying information on the Dashboard.

From visitors who use the public Certificate of Analysis lookup

A small number of pages on the Dashboard are public — most notably the Certificate of Analysis (COA) lookup that customers reach from the Chill Country product packaging. When someone uses that lookup we receive standard server log information (IP address, user agent, the URL requested, and the time of the request). We do not require sign-in for this and we do not associate these requests with any other personal data.

From visitors who play Bird Hunt

We collect anonymized gameplay analytics on Bird Hunt — a session identifier, gameplay events, and a hashed IP address. No personally identifiable information is collected unless you submit your email to receive a discount code.

How we use information

We use the information described above only to:

• Operate, maintain, secure, and improve the Dashboard.
• Authenticate employees and contractors who attempt to sign in.
• Pull and display business reports for Chill Country.
• Retrieve and act on data in third-party services that you have explicitly connected to the Dashboard.
• Comply with legal obligations and respond to lawful requests.

We do not use Dashboard information for advertising and we do not sell it.

How information is shared

We share information only in these limited cases:

• Service providers. We use a small number of vendors to host and operate the Dashboard, including Google (sign-in), Netlify (hosting), Supabase (database and file storage), and Anthropic (the AI tooling our team uses internally). These providers process information only on our instructions and only to the extent necessary to provide their services.
• Other Chill Country personnel. Information you create in the Dashboard (such as a task you write or a Certificate of Analysis you upload) may be visible to other authorized Chill Country personnel as part of the platform's normal operation.
• Legal and safety. We may disclose information when required by law, to protect the rights or safety of Chill Country or others, or in connection with an investigation of suspected misuse of the Dashboard.
• Business transfers. If Chill Country is involved in a merger, acquisition, or sale of all or part of its assets, information may be transferred as part of that transaction.

Data retention

We retain Dashboard information for as long as it serves a legitimate business purpose and as required by law. Account information for an employee or contractor is generally deleted within a reasonable period after that person's relationship with Chill Country ends. Operational data pulled from third-party services is retained as long as it remains useful for historical reporting, and is overwritten or deleted thereafter.

Security

We use commercially reasonable technical and organizational measures to protect Dashboard information, including HTTPS for all traffic, encrypted storage at our database and file-storage providers, and access controls that restrict the Dashboard to authorized Chill Country personnel. No system is perfectly secure, and we cannot guarantee absolute security.

Your choices and rights

If you are an employee or contractor who has signed in to the Dashboard, you can request that we update or delete the information associated with your account by emailing us at the address below. You can also disconnect any third-party service you have connected (for example, Gmail) from the Dashboard's settings page at any time.

If you have used the public COA lookup and would like more information about the limited server logs we keep, contact us at the address below.

Depending on where you live, you may have additional rights under applicable privacy laws — including the right to know what information we hold about you, the right to correct it, the right to delete it, and the right to object to certain uses. To exercise any of those rights, contact us at the address below.

Children

The Dashboard is not directed to children, and Chill Country does not knowingly collect personal information from children under 13.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. If the changes are material, we will provide additional notice as appropriate.

Contact

Questions about this Privacy Policy or how Chill Country handles information through the Dashboard?

THC Provisions LLC Email: howdy@thcprovisions.com