Privacy Policy

Learn how Tiny Tortilla collects, uses, and protects your personal information.

Effective Date: January 6, 2026

Tiny Tortilla LLC (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our AI-powered business solutions.

Our Role

We act as a service provider (processor) on behalf of our business clients (controllers) who use our AI Receptionist services. When processing calls and communications for our clients, we operate under their instructions and rely on the consents they have obtained from their customers. This policy also covers information we collect directly from visitors to our website.

Information We Collect

Information You Provide

When you interact with our services, you may provide us with:

  • Contact Information: Name, email address, phone number, and business name when you contact us, request a demo, or sign up for our services.
  • Communication Data: Messages and inquiries submitted through our contact forms.
  • Account Information: Login credentials and preferences if you create an account with us.

Information Collected Automatically

When you visit our website, we may automatically collect:

  • Device Information: Browser type, operating system, and device identifiers.
  • Usage Data: Pages visited, time spent on pages, and navigation patterns.
  • Log Data: IP address, access times, and referring URLs.

AI Receptionist Service Data

When providing AI Receptionist services to our business clients, we may process:

  • Call Audio: Voice recordings of inbound and outbound calls handled by the AI Receptionist.
  • Transcriptions: Text transcripts of conversations with speaker identification.
  • Call Metadata: Call logs, timestamps, duration, outcomes, and disposition data.
  • CRM Integration Data: Information synced with client CRM systems (e.g., contact records, appointment bookings, follow-up tasks).
  • Appointment Data: Scheduling information and calendar integrations.

We apply PII (Personally Identifiable Information) redaction to transcripts where applicable to help protect caller privacy.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our AI-powered services.
  • Process demo requests and respond to inquiries.
  • Integrate with client systems (CRM, calendars, automation workflows).
  • Send service-related communications and updates.
  • Billing, usage tracking, and account management.
  • Internal analysis to improve service quality.
  • Comply with legal obligations and protect our rights.
Third-Party Service Providers

We work with trusted third-party service providers to deliver our services. These include:

  • Retell AI: Powers our AI voice and conversational capabilities.
  • n8n: Automation workflows for service integrations.
  • Google Calendar: Appointment scheduling integrations.
  • CRM Platforms (e.g., HubSpot): Customer relationship management integrations as directed by clients.
  • Cloud Hosting and Infrastructure: Secure data storage and processing.
  • Transcription Services: Audio-to-text conversion with speaker diarization.

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Third-party vendors listed above who assist in operating our services.
  • Client Systems: Data may be shared with integrated platforms (CRM, calendars) as directed by our business clients.
  • Legal Requirements: When required by law, court order, or governmental authority.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.
Communications

By using our services or providing your contact information, you may receive communications from us including:

  • Service Communications: Emails, text messages (SMS/MMS), and notifications related to your account and our services.
  • Marketing Communications: Information about new features, products, or offerings.

You can opt out of marketing communications at any time by following the unsubscribe instructions in our messages or contacting us directly. Please note that transactional and service-related communications necessary for service delivery may not be opted out of.

Our services operate in compliance with applicable laws and regulations. Our business clients are responsible for ensuring their use of our services complies with:

  • TCPA (Telephone Consumer Protection Act): Obtaining proper consent for calls.
  • HIPAA (Health Insurance Portability and Accountability Act): If applicable to healthcare-related communications.
  • CCPA/CPRA (California Consumer Privacy Act): California resident privacy rights.
  • GLBA (Gramm-Leach-Bliley Act): If applicable to financial services.
  • CAN-SPAM Act: Email marketing compliance.
  • State Privacy Laws: Including but not limited to state-specific requirements.

We support our clients’ compliance efforts through opt-out handling, Do Not Call (DNC) list management, and consent record maintenance.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect about you.
  • Request deletion of your personal information.
  • Opt out of the sale or sharing of your personal information (we do not sell personal information).
  • Non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at hello@tinytortilla.com.

Data Security

We implement industry-standard security measures to protect your information, including encryption, secure data storage, and access controls. However, no method of transmission over the Internet is 100% secure.

Data Retention

We retain personal information and service records for a minimum of seven (7) years to comply with legal, accounting, and audit requirements, or as otherwise required by law. Call logs, consent records, and compliance documentation are maintained for this period. After the retention period, data is securely deleted or anonymized.

Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your personal information (subject to legal retention requirements).
  • Opt out of certain data processing activities.
  • Opt out of marketing communications.

To exercise these rights, please contact us at hello@tinytortilla.com.

Cookies and Tracking

Our website may use cookies and similar technologies to enhance functionality and analyze traffic. You can manage cookie preferences through your browser settings.

Our website may contain links to third-party sites. We are not responsible for the privacy practices of these external sites.

Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

Dispute Resolution

Any disputes arising from this Privacy Policy are governed by the laws of the State of Wyoming and shall be resolved through binding arbitration in Sheridan, Wyoming, in accordance with our Terms of Service.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website with a new effective date.

Contact Us

If you have questions about this Privacy Policy, please contact us: