Last Updated: April 2026

Taco Bros Corp. and its affiliates (“Taco Bros,” “we,” “our,” or “us”) are committed to protecting your privacy. This Privacy Policy (this “Policy”) applies to our websites, online experiences, and mobile apps for Apple iOS or Android mobile devices that link to this Policy (collectively, our “Sites”), and describes how we collect, use, and disclose your personal information when you visit, use, order from, or make an account with our Sites or our restaurants and in-store kiosks, or otherwise engage with us (collectively, our “Service”).

By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Policy and our Terms of Use, available on our Site.

JURISDICTIONAL SUPPLEMENTAL DISCLOSURES

UNITED STATES. Residents of California and other states with specific privacy laws should click here to view our Supplemental Notice for Residents of Covered U.S. States, which contains additional information about your rights under applicable state privacy laws.

1. WHAT PERSONAL INFORMATION DO WE COLLECT ABOUT YOU?

We collect personal information in a variety of ways, such as when you place an order, register for an account or loyalty membership, or participate in a survey. We may combine your online activity with information collected offline (e.g., in-store via kiosks). By visiting our Sites, you agree that your information may be shared with third-party partners (such as Google Analytics or Meta) to perform ad measurement and other services.

Information you provide in-store or through customer service:

• In-store location information. We may work with partners to collect location and movement data from your mobile device when using our app to analyze foot traffic. If you have a loyalty account, we may tailor our menu based on your location.

• In-store Wi-Fi. Our Wi-Fi providers may capture unique device identifiers when you connect.

• Order and AI interactions. We may record or capture your interactions with our drive-thru or customer service lines to transcribe verbal orders using Artificial Intelligence (AI) for quality assurance and service improvement.

• CCTV. We use CCTV in our stores to prevent crime, ensure safety, and protect our assets. This footage may be used as evidence in legal proceedings or to assist law enforcement.

Other Information you provide:

• Contact and profile information. We collect your name, phone number, email, and payment card information to fulfill transactions and send you marketing communications according to your preferences.

• Payment and transaction information. We collect details such as items purchased and payment methods to fulfill orders, update rewards, and prevent fraud.

• Comments, chat, and opinions. When you contact us via email or in-app chat (including AI-powered chatbots), we may record and transcribe these conversations to improve our products and train our AI models.

Information collected via Sites and Services:

• Location information. We approximate your location via IP address or GPS (with your permission) to find your closest Taco Bros store. Use of Google Maps features within our app is subject to the Google Maps Privacy Policy.

• Mobile Camera Access. If you share photos or videos via our app, we will access your device camera roll with your permission.

• Address Book. With your permission, we may access your contact list to allow you to send invitations or gift cards to friends. Please do not share anyone’s info without their permission.

• Philanthropic programs. We may collect information regarding your donations to fundraising initiatives, such as the Taco Bros Foundation.

INFORMATION PROVIDED BY OTHERS

• Social Networks: When you interact with our Service through social media (e.g., “Liking” us on Facebook, following us on X, Snapchat, LinkedIn, or Instagram), we receive information according to your privacy settings on those platforms. We use this to understand our customer demographics and inform our marketing.

• Authentication Services: You may log in through third-party services like Google or Facebook. If you connect a Google/Gmail account, you grant us permission to access specific data (like authentication tokens) necessary to sustain your account. This data is stored securely and is removed permanently if you disconnect or close your account. We do not use Google account data for advertising.

• Biometric Authentication: If you use Face ID, Touch ID, or fingerprint sensors to log in, we are only notified if the authentication was successful. Taco Bros cannot access your actual biometric data.

• Business Communications: We may collect video recordings or transcriptions from business communications or training programs (e.g., via Microsoft Teams). By participating, you consent to this collection.

• Affiliates and Franchisees: We may receive information about you from Taco Bros affiliates and franchisees to develop more complete customer profiles and provide a seamless experience across all our locations.

2. HOW DO WE USE PERSONAL INFORMATION?

• Fulfilling Requests: To complete orders, deliver food, and manage your participation in contests or loyalty programs.

• Marketing & Analytics: To send you updates on new features or special offers. We use individual and aggregate data to build customer profiles and projections. We may use services like The Trade Desk to convert contact info into identifiers for targeted ads. You may opt out of this processing at any time.

• Communication: We use automated decisioning and analytical modeling to provide tailored offers. We may communicate via email, postal mail, phone, or text message.

• Monitoring & Improvement: We use order trends and AI to improve efficiency, inventory management, and staffing. We may use chatbot transcripts or drive-thru voice recordings to train our AI and measure service speed. We do not create “voiceprints” or biometric identifiers to identify you.

• Security & Legal Compliance: To protect our company and customers, prevent fraud, and comply with court orders or legal obligations.

• De-identified Data: We may create anonymized data sets for machine learning and AI model training. Once de-identified, we do not attempt to re-identify the data.

3. WHAT INFORMATION MAY BE COLLECTED AUTOMATICALLY?

When you use our Sites, we and our partners collect information via tracking technologies (cookies, web beacons, embedded scripts, and SDKs).

• Usage Information: We track how you access the Service, frequency of visits, and whether you open our emails.

• Session-Replay Technology: We use software (such as Fullstory or Splunk) to record user interactions. This allows us to watch video replays of user sessions, including mouse movements, keystrokes, and scrolling. This helps us diagnose usability problems and verify that you are a human and not a bot.

• Device Information: We collect IP addresses, browser types, and unique device identifiers. Even if you do not connect to our in-store Wi-Fi, we may receive information about your device if it is searching for available networks.

• Chat Technologies: Our online chat features (powered by Yellow AI or similar) employ code to operate the chat and may access your geographic information to assist with your request.

Your Choices and Control

• Cookie Settings: You can manage cookies through your browser settings or our website’s cookie banner. Disabling cookies may limit some Site features.

• Do Not Track: While some browsers offer a “Do Not Track” option, we currently do not respond to these signals as a uniform standard has not been established. However, we do respond to Global Privacy Control (GPC) settings where required by law.

4. HOW WE SHARE YOUR INFORMATION?

We may share, sell, or disclose your information in the instances described below:

• Our Affiliates: Taco Bros Corp. and its affiliates may disclose or share personal information between our brands to understand purchasing patterns and assist business decisions regarding products and marketing.

• Our Franchisees: Many Taco Bros restaurants are independently owned and operated. We disclose personal information to them to process payments, provide loyalty rewards, or facilitate delivery services. These franchisees operate independently and have their own privacy policies.

• Promotional and Business Partners: We may share limited data with partners for joint contests or strategic marketing.

• Advertising Partners: We may share information with online advertising partners to facilitate targeted ads on our Sites.

• Service Providers and AI: We share data with vendors who perform services for us (e.g., payment processing, chatbot functionality, delivery). Our service providers may use AI to assist us. Where required by law, we may use your data to train these AI systems with your permission.

• Legal Reasons: We may disclose info to comply with the law, respond to subpoenas, or protect the safety and rights of our organization and visitors.

5. RELATIONSHIP WITH FRANCHISEES

When you interact with a Taco Bros franchisee (e.g., ordering in-store at a franchise location), your interaction is governed by that specific franchisee’s privacy policy, which may differ from this one.

6. YOUR CHOICES AND CONTROL OVER YOUR INFORMATION

• Profile Settings: You can update your account information by logging in. Deleting your account may result in the loss of rewards.

• Email Preferences: You can click the “unsubscribe link” in promotional emails to opt-out. You will still receive transactional emails (e.g., order confirmations).

• Online Tracking: You can manage cookies via your browser or our cookie banner.

• Mobile Settings: You can withdraw permission for the App to access your location, camera, or photo stream at any time through your device settings.

7. HOW WE STORE AND PROTECT YOUR INFORMATION

• Storage: Your information may be stored and processed in the United States.

• Retention: We retain your personal information only as long as necessary for business, legal, or accounting obligations. If we anonymize your data, we may use it indefinitely for analytics and AI training.

• Security: We use technological and physical safeguards to protect your data. While no system is impenetrable, we take reasonable steps to investigate and notify you in the event of a security breach.

8. CHILDREN’S PRIVACY

Our Service is not intended for children under 16. If we learn we have inadvertently collected info from a child under 13, we will delete it immediately. Parents can contact support@tacobros.com to request deletion of a minor’s data.

9. LINKS TO OTHER WEBSITES

We are not responsible for the privacy practices of third-party websites or delivery apps (like DoorDash or UberEats) linked on our Service. We recommend reading their individual policies.

10. HOW TO CONTACT US

If you have questions about this Policy or our data practices, please email us at privacy@tacobros.com or contact our Data Protection Officer at legal@tacobros.com.

11. DATA SUBJECT RIGHTS

Regardless of where you live, you have the right to ask us to delete your personal information. To exercise this right, please email privacy@tacobros.com.

12. CHANGES TO OUR PRIVACY POLICY

We may update this Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of the page. Continued use of our Service constitutes your agreement to the updated Policy.