Privacy Policy

We collect information you provide, information generated when you use TerpSeek, and limited technical information needed to operate and secure the site.

• Account data: email address, Supabase user id, authentication session data, profile display name, avatar, and preferences.
• Shopping tools: saved searches, price alerts, stash/wishlist items, compare selections, notification settings, state preference, and alert history.
• Community content: chat messages, replies, reactions, channel activity, profile details, and any images or files you choose to upload.
• Vendor and contact data: store applications, business contact details, website URLs, plan/tier selections, support messages, and related emails.
• Commerce and billing data: if vendor paid features are used, payment processing is handled by Stripe. We do not store full card numbers.
• Usage and log data: IP address, device/browser details, pages viewed, timestamps, error logs, rate-limit events, and outbound affiliate click events.
• Public product data: vendor names, product names, prices, images, availability, COA links, lab details, and product metadata gathered from public vendor pages or vendor-submitted information.

• Run search, vendor pages, deals, drops, strain pages, and COA tools.
• Create and secure accounts, sessions, profiles, and community features.
• Send alerts, saved-search emails, newsletters, and transactional messages.
• Process vendor applications, vendor tiers, support requests, and disputes.
• Measure site performance, debug errors, prevent abuse, and improve data quality.
• Track outbound clicks for affiliate attribution and fraud prevention.
• Comply with legal obligations and enforce our Terms of Service.

Where GDPR or UK GDPR applies, we rely on these legal bases: contract performance for accounts and requested services; consent for newsletters and optional alerts; legitimate interests for site security, analytics, fraud prevention, product improvement, and affiliate attribution; and legal obligations where we must preserve or disclose records.

TerpSeek uses authentication cookies, age-gate/local preference storage, security cookies, and limited analytics/performance tools. We do not run third-party behavioral advertising pixels. Read the Cookie & Tracking Notice for the practical breakdown.

We do not sell your personal information. We share data with:

• Supabase: database, authentication, storage, and account infrastructure.
• Vercel: hosting, server logs, deployment infrastructure, web analytics, and speed insights.
• Resend: email delivery for alerts, newsletters, and transactional messages.
• Stripe: payment processing for vendor products or paid TerpSeek services, if enabled.
• Vendors and affiliate networks: outbound click routing may include referral parameters. We do not send vendors your TerpSeek account email just because you click a product link.
• Authorities or legal parties: when required by valid legal process or needed to protect rights, safety, security, and the integrity of the site.

• Accounts, stash, saved searches, alerts, and profiles: until deleted or inactive long enough for cleanup.
• Newsletter records: until unsubscribe, suppression, or deletion request.
• Community posts and images: while the community feature is active, unless removed or legally retained.
• Vendor applications and business correspondence: generally up to 24 months, longer if needed for an active relationship.
• Affiliate click events, logs, and security records: retained as needed for attribution, debugging, abuse prevention, and legal compliance.
• Public product, vendor, COA, and price history data: retained to power comparisons, market history, and data quality checks.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. California residents may also have rights to know, delete, correct, opt out of certain sharing/sale activity, and avoid discrimination for exercising privacy rights.

To make a request, email privacy@terpseek.com or use the Data Rights Request page. We may need to verify your identity before acting on a request.

Community messages, profile details, and uploaded images may be visible to other users. Do not post private information, government IDs, payment details, medical information, illegal content, or anything you do not have the right to share. We may scan, moderate, resize, strip metadata from, or remove uploads for safety, abuse prevention, storage limits, or legal compliance.

We use HTTPS, access controls, Supabase row-level security where applicable, restricted service keys, rate limits, file upload validation, and monitoring. No internet service is perfectly secure, so use strong passwords, protect your login, and report suspicious activity quickly.

TerpSeek is for adults 21 and older. We do not knowingly collect personal information from anyone under 21. Hemp, THCa, cannabis, and cannabinoid laws vary by location and change often. You are responsible for checking your local law before visiting vendors or purchasing products.

Vendor sites, lab reports, affiliate networks, payment processors, and external resources have their own privacy practices. TerpSeek is not responsible for third-party sites or products.

We may update this policy as the site changes. The updated date will change when we revise it. Material changes may also be announced on the site or by email.

Privacy: privacy@terpseek.com
Support: terpseek@gmail.com
Site: https://terpseek.com