Privacy Policy

Effective Date: June 1, 2026

1. Who We Are

ATHENA is a competitive intelligence platform for licensed cannabis dispensaries, operated by Echelon Systems LLC ("we," "us," "our"). This policy explains how we collect, use, and protect your information when you use the ATHENA platform at athenaintel.app.

2. Information We Collect

We collect the following information when you create an account:

Account Information: Your name, email address, and company name. This information is provided by you during registration or by your account administrator.

Authentication Data: Your password is securely hashed by Firebase Authentication (operated by Google) and is never stored in plain text or accessible to our team.

Session Data: We generate a cryptographic session token when you log in to manage your active session. This token is stored temporarily in your browser and in our database to enforce single-session security.

Usage Data: We may collect basic usage information such as which features you access and when you last logged in, solely to improve the platform.

We do not collect payment information, social security numbers, government IDs, health information, or any data about cannabis consumers or patients.

3. How We Use Your Information

We use your information to:

— Provide and maintain your ATHENA account and access to the platform

— Send you account-related emails (welcome emails, password resets)

— Enforce single-session login for account security

— Communicate important updates about the platform

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. How We Store and Protect Your Information

Your data is stored using Google Firebase (Firestore and Firebase Authentication), which is hosted on Google Cloud Platform infrastructure. Google maintains SOC 2 Type II and ISO 27001 certifications for these services.

We implement the following security measures:

— All data is encrypted in transit (HTTPS/TLS) and at rest

— Passwords are cryptographically hashed and never stored in plain text

— Session tokens are generated using cryptographically secure random values

— Administrative actions require server-verified role checks

— Single-session enforcement prevents unauthorized concurrent access

— API keys are restricted to authorized domains only

5. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: We use Google Firebase for authentication and data storage, and Microsoft 365 for email delivery. These providers process data on our behalf under their own privacy policies.

Legal Requirements: We may disclose information if required by law, legal process, or government request.

Business Transfers: If Echelon Systems LLC is acquired or merged, your information may be transferred as part of that transaction.

6. Data Retention

We retain your account information for as long as your account is active. If your account is revoked or you request deletion, we will remove your personal information from our systems within 30 days. Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics purposes.

7. Your Rights

You have the right to:

Access: Request a copy of the personal information we hold about you

Correction: Request that we correct inaccurate information

Deletion: Request that we delete your personal information

Portability: Request your data in a commonly used format

To exercise any of these rights, contact us at the email address below. We will respond to requests within 30 days.

8. Cookies and Local Storage

ATHENA uses browser sessionStorage to maintain your login session and store display preferences. We do not use tracking cookies, advertising cookies, or third-party analytics services. No data is shared with advertising networks.

9. Children's Privacy

ATHENA is a business-to-business platform for licensed cannabis dispensary operators. We do not knowingly collect information from individuals under 18 years of age. If we learn that we have collected information from a minor, we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you via email or a prominent notice on the platform. Your continued use of ATHENA after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this privacy policy or wish to exercise your data rights, contact us at:

Echelon Systems LLC
Email: camden@athenaintel.app
Website: athenaintel.app

← Back to ATHENA