PRIVACY POLICY
Massachusetts Patient Advocacy Alliance, Inc.
Last Updated: December 1, 2025
Massachusetts Patient Advocacy Alliance, Inc. ("MPAA," "we," "us," or "our") respects your privacy and is committed to protecting any personal information you may provide to us through our website, compassionforpatients.com, and related platforms. We are also the operator of the program Cannabis Care Connect™, which is subject to the terms of this privacy policy.
This policy covers all personal information collected through our website, including through our Mailing List Subscriber Form, Donation Form, Contact Form, Cannabis Care Connect™ Form, and all email communications. Please read this policy carefully to understand our practices regarding your personal information. By using our website and submitting your personal information, you agree to the terms of this policy. If you do not agree with the terms of this policy, please do not use our website or submit your personal information to us.
Information Collected
When you use our website, we may collect information from you, including personal information such as your first name, last name, email address, phone number, city/town, and whether you have opted into our privacy policy. We collect this information through our Mailing List Subscriber Form, Donation Form, Contact Form, and Cannabis Care Connect™ Form.
Additionally, our website uses cookies and other technologies to automatically collect certain information about your device and how you interact with our website. This may include your IP address, browser type, operating system, referring URLs, pages viewed, and general usage patterns.
We may also collect personal information through our program, Cannabis Care Connect™. This includes personal information that you voluntarily provide to us in order to receive assistance with navigating the Massachusetts medical marijuana program.
When you submit personal information through our website or program, you are consenting to the collection and use of that information as described in this policy.
Third-Party Service Providers
MPAA uses third-party platforms and services to operate our website and programs. These services are subject to their own terms of use and privacy policies, which we encourage you to review. Our current service providers include:
Hosting and Infrastructure
- Vercel: Our website is hosted on Vercel's platform. Vercel may collect technical information such as IP addresses and browser information for security and performance purposes. Vercel Privacy Policy
- Supabase: We use Supabase as our database provider to securely store supporter and program data. Supabase Privacy Policy
- Upstash: We use Upstash for rate limiting and caching to protect our systems from abuse. Upstash Privacy Policy
Analytics
- Vercel Analytics: We use Vercel Analytics to understand how visitors interact with our website. This service collects anonymized, aggregated data about page views and visitor patterns.
- Google Analytics: We use Google Analytics to analyze website traffic and usage patterns. Google Analytics uses cookies to collect information about your use of our website. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. Google Privacy Policy
Communications
- Resend: We use Resend to deliver email communications, including newsletters, donation receipts, and program-related correspondence. Resend Privacy Policy
- Google Workspace: Our organizational email (director@compassionforpatients.com) is managed through Google Workspace. Google Privacy Policy
Payment Processing
- PayPal: We use PayPal to process donations. When you make a donation, your payment information is collected and processed directly by PayPal and is subject to their privacy policy. We do not store your complete credit card or bank account information on our servers. PayPal Privacy Policy
Events and Advocacy
- Eventbrite: We may use Eventbrite to manage event registrations for advocacy activities and community events. Eventbrite Privacy Policy
- PostGrid: We may use PostGrid to send physical mail for advocacy campaigns and important notifications. PostGrid Privacy Policy
Use of Information
MPAA is committed to protecting the privacy and confidentiality of all personal information collected through our website, including the Cannabis Care Connect™ platform, our Mailing List Subscriber Form, our Donation Form, our Contact Form, and all email communications. We never sell or disclose any data to third parties for commercial or marketing purposes.
The information we collect is used solely for the purpose of advancing our mission to improve patient access to medical cannabis in Massachusetts. Specifically, we use your information to:
- Connect patients with appropriate healthcare providers through Cannabis Care Connect™
- Send newsletters, updates, and advocacy alerts to mailing list subscribers
- Process and acknowledge donations
- Conduct outreach when events or actions are happening which require local assistance
- Understand our supporter base and provide better services and information
- Coordinate advocacy efforts and community engagement
- Comply with legal and regulatory requirements
Access to supporter information is limited to authorized personnel, including executive board members and technical service providers who maintain our systems. All individuals with data access are bound by confidentiality obligations. We do not share or disclose any personal information, including names, addresses, or email addresses, to any outside individuals or entities except as required by law or as necessary to provide services through the third-party providers listed above.
Protection of Information
MPAA takes appropriate measures to protect the information we collect from unauthorized access, alteration, or disclosure. These measures include:
- Secure, encrypted connections (HTTPS) for all website communications
- Database encryption and access controls through our infrastructure providers
- Limited access to personal information on a need-to-know basis
- Regular review of our data security practices
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security, and you provide information at your own risk.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience and collect analytical data. Cookies are small text files stored on your device that help us understand how you use our website.
Types of cookies we use:
- Essential cookies: Necessary for the website to function properly
- Analytics cookies: Help us understand how visitors interact with our website
You can control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
Consent
By using our website and providing us with your personal information, you consent to the collection and use of your information as outlined in this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use the Website.
If you have any questions or concerns about the use of your personal information, please contact us at director@compassionforpatients.com.
Opting Out of Our Mailing List
If you no longer wish to receive emails from the Massachusetts Patient Advocacy Alliance, Inc. or its website CompassionforPatients.com, you can opt out of our mailing list by clicking the "Unsubscribe" link located at the bottom of any of our emails. Alternatively, you can email us at director@compassionforpatients.com and request to be removed from our mailing list.
Accessing and Deleting Your Information
If you would like to know what information we have collected about you or if you would like us to delete all the information we have on file for you, please email us at director@compassionforpatients.com with the subject line "Request for Personal Information" or "Request for Deletion of Personal Information." We will respond to your request within 30 days and will work to accommodate your request to the extent possible and required by law.
Please note that we may need to retain certain information for legal or administrative purposes, such as record keeping, tax compliance, or to detect fraudulent activities. We will make reasonable efforts to comply with your request, but we may not be able to fulfill it completely if it would require us to violate any laws or regulations.
Children's Privacy
Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at director@compassionforpatients.com, and we will take steps to delete such information.
Changes to this Privacy Policy
MPAA may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make any material changes to our privacy policy, we will notify you by email or by posting a notice on our website prior to the effective date of the changes. We encourage you to periodically review this page for the latest information on our privacy practices.
By continuing to use our website or services after any changes to this privacy policy, you acknowledge that you have read and understand the updated terms and conditions of this policy. If you do not agree to any updates to this policy, you should stop using our website and services immediately.
Contact Us
If you have any questions or concerns about this Privacy Policy or our practices, please contact us at:
Massachusetts Patient Advocacy Alliance, Inc.
Email: director@compassionforpatients.com
Website: compassionforpatients.com
This Privacy Policy is effective as of December 1, 2025.
