FLMMC Wiki ("the service") is a research prototype: a compliance assistant for Florida's medical marijuana program that answers only from cited sources. It is run by an individual operator ("we"). This page says what information the service handles, why, and how to have it deleted.
The assistant is open by invitation only. The operator gives each invited person a personal access code, and you enter it on the front page of this site to open the assistant. The operator keeps a record of who each code was given to, so a code identifies one person to the operator. The operator can revoke a code at any time, which ends that person's access.
flmmc_code, which holds your access code so the chat can recognise you on each request. This cookie is strictly necessary: without it the chat cannot open. It is sent only to the chat's own address, it is marked HttpOnly (page scripts cannot read it) and Secure (it travels only over HTTPS), and it lasts 90 days or until you choose "Sign out" in the chat. The service uses no analytics or advertising trackers. Cloudflare may set strictly necessary security cookies of its own.Only to operate, secure, evaluate and improve the prototype. The operator reads conversations and reports in a review page that runs only on the operator's own computer. We do not sell your information, do not use it for advertising, and do not share it with anyone except the service providers named below.
Stored data, including the record of who holds each access code, is copied each night to the operator's private cloud storage (Google Drive) as a backup. The operator also keeps offline backup copies on separate drives. No person reviews the offline copies; they may be used for automated statistical analysis of how the service is used, and each one is destroyed within 90 days of being made.
FLMMC Wiki's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The service does not sign you in with Google and asks visitors and testers for no Google permission. The only Google permission in use is the operator's own: a Google Drive permission limited to files the backup tool itself creates (the drive.file scope), used solely by the operator's own backup tool to write backup files into the operator's own Google Drive. It gives no access to anyone else's files.
Do not enter health information, patient identifiers, or personal information about other people, in a question or in a report. The assistant does not need it to answer a compliance question.
Information is kept while the prototype is being evaluated. You can ask at any time to have your conversations, profile details and reports deleted: email [email protected] and give the name the operator knows you by. Please do not send your access code by email. Within 30 days we will delete them from the operator's computer, including any working copies made while reviewing them, and confirm when it is done. Backup copies expire on their own schedule: they are gone from Google Drive within 90 days of the deletion, and every offline copy is destroyed within 90 days of being made. Text already sent to Anthropic is subject to Anthropic's retention policy, which we cannot change. You can also ask us to revoke your access code. A revoked code's record keeps its hash and dates so the service can go on refusing it; if you ask, the name recorded next to it is replaced with a placeholder.
The service is intended for adults aged 18 and over.
If this policy changes, the new version will be posted here with a new effective date. The 1 November 2026 version replaced sign-in through Cloudflare Access (with Google or a one-time PIN) by personal access codes, and rewrote the parts of this page about sign-in, cookies, Google, reports, service providers, backups and deletion to match.