Privacy Policy

1. Introduction

Verified VIP Loyalty ("we," "us," or "our") is operated by PH Lounge in connection with the cannabis lounge at iloveph420.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our membership platform, loyalty program, or visit our physical location.

By registering as a member, using the self-verification kiosk, or interacting with our platform in any way, you agree to the practices described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

We collect the following categories of personal information:

3. How We Use Your Information

• Age & Identity Verification: To confirm you are 21 or older and verify your identity before granting lounge access, as required by law.
• Membership Management: To create and maintain your membership record, track status, and provide your digital membership card.
• Loyalty Program: To award and track loyalty points based on purchases made at iloveph420.com and redeem rewards.
• Communications: To send SMS alerts, announcements, and exclusive member notifications. You may opt out at any time by replying STOP to any SMS.
• Compliance: To maintain records required for regulatory compliance in connection with operating a licensed cannabis lounge.
• Security: To prevent fraud, duplicate registrations, and unauthorized access to the lounge.

4. AI-Assisted Identity Verification

During registration, we use an AI system to compare your selfie with your government-issued ID photo. This process checks for face match, liveness, ID authenticity, and age indicators. The AI generates a pass/fail result and a short summary, which is stored on your member profile and reviewed by our staff.

AI verification results do not constitute a final determination — all applications are reviewed by a human staff member before membership is activated. If you believe an AI result is inaccurate, contact us directly.

5. Data Sharing & Third Parties

We do not sell your personal information. We share data only with the following service providers to operate our platform:

• Shopify: We sync your purchase history and customer profile from our online store (iloveph420.com) to calculate loyalty points. Shopify's privacy policy applies to data held on their platform.
• Twilio: We use Twilio to send SMS messages to your phone number. Your phone number is transmitted to Twilio for message delivery purposes.
• Base44 (Platform): Our application is hosted and operated on the Base44 platform. Your data is stored securely within Base44's infrastructure.
• AI Provider: Your selfie and ID photo are submitted to an AI model for identity analysis. Images are processed and a result is returned; we store the result, not the raw images on third-party servers beyond the upload.

We may disclose information if required by law, court order, or government authority, or to protect the safety of our staff and members.

6. Data Retention

We retain member records, including identity verification data and photos, for as long as your membership is active and for a minimum of 3 years after membership termination, as required for regulatory compliance in connection with cannabis business operations.

SMS logs and communication history are retained for up to 12 months. Loyalty transaction records are retained for the duration of membership plus 3 years.

7. Your Rights

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request corrections to inaccurate data by contacting staff at the lounge or via email.
• Deletion: You may request deletion of your account. Note that certain records may be retained for legal compliance purposes.
• SMS Opt-Out: Reply STOP to any SMS message at any time to opt out of future text alerts. You will be immediately removed from all SMS communications.
• Do Not Sell: We do not sell personal data. California residents may exercise rights under the CCPA by contacting us.

8. Data Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), access controls limiting data access to authorized staff only, and secure cloud infrastructure. However, no system is 100% secure — if you believe your account has been compromised, contact us immediately.

9. Children's Privacy

Our services are strictly for individuals who are 21 years of age or older. We do not knowingly collect information from anyone under 21. If we discover we have collected data from a minor, it will be deleted immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our platform after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us: