Sticky
10+ storesFor operators running cannabis like infrastructure.

Marketingat the scaleof your footprint.

Sandbox. Full API with per-key rate limits. Dedicated CSM. Built for SHAFT & high-risk industries. State-by-state compliance rails. Data residency in the regions that matter.

SHAFT-experienced
US + Canada residency
99.95% uptime SLA
LIVE · Harvest Holdings
Stores42
States7
Members412k
Q4 rev attr$2.1M
Trusted by multi-state operators
Harvest Holdings
CURALEAF-
TRULIEVE
GREEN THUMB
Cresco Labs
VERANO◆
Platform architecture

Built for the org chart you actually have.

Most enterprises drag a DIY stack behind them: Segment, Braze, Twilio, a CDP, three dashboards. Sticky is one platform that already speaks cannabis, with the governance and API surface a 10+ store operation needs.

Data sources
Dutchie / Treez / Jane
Flowhub / LeafLogix
E-commerce · Leafly / I Heart Jane
Custom API / webhooks
Sticky enterprise core
Unified customer graph
Journey engine + AI send-time
State-by-state compliance
Segments + smart audiences
Attribution warehouse
SHAFT-experienced · encryption at rest + in transit · audit logs on everything
Channels & destinations
Email · SMS · MMS · push
Apple + Google Wallet passes
Reverse ETL to your warehouse
Webhooks + events API
Enterprise-only

The controls your CISO, legal, and board actually want to see.

Full production sandbox

A parallel tenant that mirrors your data. Test a new journey against 400k real customers without touching anyone.

Per-key API rate limits

Burstable per-key limits. IP allowlists, rotatable secrets, full audit log of every call.

Dedicated CSM + launch team

A named account team. Weekly reviews. A launch specialist embedded with your team for the first 90 days.

Audit log + eDiscovery

Every action, every send, every rule change, with actor, timestamp, and diff. Exportable to your SIEM.

Custom MSA + SLAs

99.95% uptime, 4-hour P1 response, quarterly business reviews. Negotiable DPA and security addendum.

Developer surface

A first-class API for the data team you've already hired.

REST + webhooks + event streams. Versioned, documented, rate-limited per key. Every Sticky surface you see in the UI is backed by the same public API.

Members, segments, journeys, sends
Webhooks on POS transactions, wallet events, unsubscribes
Reverse-ETL to whatever warehouse your data team runs
OpenAPI spec · ergonomic REST · signed webhooks
api.stickycannabis.com/v1
# Trigger a journey for a customerPOST /v1/journeys/winback_60d/enrollAuthorization: Bearer sk_live_...Content-Type: application/json{"member_id": "m_0xF4b21e","store_id": "st_oakland_grand","variables": {"last_sku": "blue_dream_8th","incentive_cents": 1500}}→ 202 Accepted{"enrollment_id": "enr_9kL2b","scheduled_first_send": "2026-04-25T18:00:00Z"}
Enterprise onboarding

A 60-day rollout, not a quarter-long rip-and-replace.

Week 1–2
Security & procurement

Security questionnaire, pentest summary, DPA. Legal sign-off parallelizes with build.

Week 3–5
POS + warehouse hookup

Every location's POS piped in. Warehouse reverse-ETL mirror. Identity-resolved customer graph.

Week 5–7
Compliance calibration

State-by-state rule matrix. Quiet hours, opt-in language, age gate, banned terms, locked to your legal's standard.

Week 8–9
Go live · pilot region

One state first. Hit 95% data parity with your incumbent before rolling to the rest.

Customer story · Harvest Holdings
“We replaced three vendors with Sticky. Legal cleared the security review in an afternoon. The data team pointed at the warehouse sync and walked out happy. That never happens.”
DT
David Takahashi
CMO, Harvest Holdings · 42 stores, 7 states
$2.1M
Q4 attributed revenue
3→1
Vendors consolidated
60 days
From MSA signature to full production across 42 stores
Security, compliance, and infrastructure
SHAFT-experienced
CCPA / CPRA
GDPR DPA
AES-256
99.95% SLA
Enterprise access

One vendor. Every store.Every state.

Start with a scoped proof-of-concept in one region. Expand only once the data lines up against your incumbent, we share the spreadsheet.

Custom pricing · MSA · security review on request · 60-day pilot