Privacy Policy

1. Introduction

NugWork LLC (“the Platform”, “we”, “us”, or “our”) operates a job board exclusively serving the legal cannabis industry. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information. By using the Platform, you agree to the practices described in this policy.

NugWork is a recruitment platform only. We do not sell, distribute, or handle cannabis products in any form, and we do not collect any health-related data from users.

2. Information We Collect

We collect information you provide directly to us, as well as certain information automatically when you use the Platform.

Job Seekers

• Name and username chosen at registration
• Email address (required for account creation; optional for username-only accounts)
• Resume or CV files uploaded when applying for positions
• Application content such as cover letters or answers to employer questions
• Profile information you choose to add (work history, skills, location)

Employers

• Company name, email address, and contact information
• Job listing content (title, description, location, compensation details)
• Billing information for paid listings — processed by our payment provider (see Section 4)

Automatically Collected

• IP address and general geographic region
• Browser type and device information
• Pages visited, links clicked, and time spent on the Platform
• Session cookies required for authentication and Platform functionality

We do not collect health data. Cannabis employment does not require and NugWork does not solicit any medical records, health conditions, prescription information, or cannabis consumption history.

Contact Form

• Name and email address you provide
• Message content you submit

Contact form submissions are transmitted to our team inbox via Resend (our email provider) and are not stored in our database. We use this information solely to respond to your inquiry and do not add contact form submitters to marketing lists without explicit consent. Contact form data is retained only as long as the email thread exists in our inbox.

3. How We Use Your Information

We use the information we collect to:

• Operate and maintain the Platform, including account authentication and session management
• Match job seekers with relevant cannabis industry job listings
• Transmit job seeker applications to the relevant employers
• Process payments for paid job listings through our payment provider
• Send transactional emails (account confirmation, application receipt, listing expiry notices)
• Moderate and review free job listings prior to publication
• Detect and prevent fraud, abuse, or violations of our Terms and Conditions
• Improve the Platform’s functionality and user experience

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Billing & Payment Processing

Payments for paid job listings are processed by PaymentCloud, our PCI-DSS certified payment provider. When you submit payment, you are directed to PaymentCloud’s hosted payment page where card data is entered directly on PaymentCloud’s servers — this information is never transmitted to or processed by NugWork. NugWork does not store, transmit, or have access to full payment card numbers, CVV codes, or other sensitive cardholder data.

We receive limited transaction metadata from PaymentCloud (such as the last four digits of a card, billing amount, and transaction status) solely for the purpose of confirming payment and activating job listings. This metadata is stored securely and is not shared with third parties.

5. Sharing of Information

We do not sell your personal information to third parties, ever. We have not sold personal information of consumers in the preceding 12 months. We do not share personal information for cross-context behavioral advertising. We share information only in the following limited circumstances:

• With employers: When you apply for a job, your application materials (name, resume, cover letter) are shared with the employer who posted that listing.
• With service providers: We use the following providers who access your data only as necessary to deliver their services and are bound by confidentiality obligations:
  • Supabase — database hosting, authentication, and file storage
  • PaymentCloud — payment processing (PCI-DSS certified; receives only data you enter on their hosted page)
  • Resend — transactional and digest email delivery
  • Vercel — application hosting, CDN, and site analytics
  We also query third-party job aggregation APIs (Adzuna, Jooble, USAJobs.gov, Remotive, Greenhouse, and the Engin API) to source job listings — these queries contain only job search terms and no user data.
• For legal compliance: We may disclose information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect the rights or safety of NugWork, our users, or the public.
• Business transfers: If NugWork is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify users of any such change via email or a prominent notice on the Platform.

6. Cookies

NugWork uses cookies and similar technologies as follows:

• Session cookies: Required for authentication. Set when you log in and deleted when your session ends or you log out. These cookies are HttpOnly and Secure — they cannot be read by JavaScript. Without them, the Platform cannot function for authenticated users.
• Preference cookies: May be used to remember your theme or display preferences across visits.
• Vercel Analytics: Cookieless, privacy-preserving site analytics. No cookies are set and no personally identifiable information is transmitted.
• PostHog (may be used): If enabled, PostHog uses a first-party cookie to collect page view events, click events, and session recordings for product analytics purposes. No health or financial data is collected. You may opt out by enabling the Do Not Track (DNT) signal in your browser settings or by contacting privacy@nugwork.net.

We do not use third-party advertising cookies or tracking pixels. You can configure your browser to refuse cookies, but doing so may prevent you from logging in or using authenticated features of the Platform.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Platform’s services. Job listings and associated employer data are retained for a reasonable period after expiry for record-keeping purposes. If you request deletion of your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (“right to be forgotten”).
• Portability: Request your data in a portable, machine-readable format.
• Objection: Object to certain processing of your data.
• Opt-out of marketing: Unsubscribe from non-transactional emails at any time via the link in those emails.

California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with the following additional rights:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which personal information is collected, the business or commercial purpose for collecting personal information, and the categories of third parties with whom we share personal information.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions provided by law.
• Right to Correct: You have the right to request correction of inaccurate personal information that we maintain about you.
• Right to Opt-Out of Sale: NugWork does not sell personal information, and has not sold personal information in the preceding 12 months. Because we do not sell personal information, no opt-out mechanism is required; however, you may still contact us at any time to confirm this.
• Right to Non-Discrimination: We will not deny you services, charge you different prices, or provide a different level or quality of service because you exercised any of your CCPA rights.
• Right to Limit Use of Sensitive Personal Information: NugWork does not collect or process sensitive personal information as defined under the CCPA/CPRA (such as Social Security numbers, financial account details, precise geolocation, racial/ethnic origin, or health data).

How to Exercise Your Rights

To exercise any of the rights described above, submit a verifiable consumer request by emailing us at privacy@nugwork.net. In your request, please describe the right you wish to exercise and provide sufficient information for us to verify your identity (such as your account email or username).

We will acknowledge receipt of your request within 10 business days and provide a substantive response within 45 days. If we require additional time, we will notify you of the extension and the reason, for up to a total of 90 days.

You may also designate an authorized agent to submit a request on your behalf. If you use an authorized agent, we may require the agent to provide proof of authorization and we may still verify your identity directly.

Categories of Personal Information Collected (CCPA Disclosure)

In the preceding 12 months, NugWork has collected the following categories of personal information:

NugWork does not collect biometric data, geolocation data (beyond general region derived from IP address), sensory data, or any categories of sensitive personal information as defined by the CCPA/CPRA.

California “Shine the Light” (Civil Code § 1798.83)

Under California Civil Code Section 1798.83, California residents may request information regarding the disclosure of personal information to third parties for direct marketing purposes. NugWork does not disclose personal information to third parties for their direct marketing purposes. If you have questions, contact us at privacy@nugwork.net.

9. Cannabis Industry Context

NugWork serves employers and job seekers in the legal cannabis industry. We recognize that cannabis employment is subject to evolving regulations at the federal, state, and local levels. This Platform is limited to job board and recruitment services; it does not facilitate the purchase, sale, or exchange of cannabis products, and we do not collect or process any cannabis-related health data, medical records, or dispensary patient information.

Job seekers are solely responsible for disclosing or withholding information about their cannabis use history in their applications. NugWork does not advise on employment eligibility, background check requirements, or drug testing policies — those are matters between you and the employer.

10. Publicly Sourced Job Listings

NugWork aggregates job listings from publicly accessible third-party sources to help job seekers discover cannabis industry opportunities in one place. These sources include employer career pages (such as Curaleaf, Trulieve, Green Thumb Industries, and Cresco Labs via the Greenhouse job board API), cannabis-specific staffing platforms (Vangst, FlowerHire), and third-party job aggregation services with public APIs (Remotive, Adzuna, Jooble, and USAJobs.gov). The information displayed in these listings (job titles, locations, descriptions, and company names) is sourced from publicly available web pages and APIs and is treated as public information.

We do not collect or store any personal data through the aggregation process — we only reproduce publicly posted job content. When accessing third-party APIs (such as Adzuna, Jooble, and USAJobs), we transmit only search queries (e.g., “cannabis”, “dispensary”) and do not share any user data with these services. If you are a company representative and would like a listing removed from NugWork, please email support@nugwork.net with the subject “Listing Removal Request”. We will process removal requests within 2 business days.

11. Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, loss, or disclosure. These include encrypted data transmission (HTTPS), row-level security on our database, and access controls limiting which personnel and services can access user data. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify registered users by email or by a prominent notice on the Platform. Continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.