Privacy Policy
Last updated: October 11, 2026
What we collect
When you order, we collect your name, phone number, email address (if you give one), your order, and your payment-link and payment status. Your card details are handled entirely by our payment provider, Helcim — we never see or store card numbers.
Why we collect it
We use this information to prepare your order, to tell you when it is ready, to prevent fraud (for example, confirming an order is really yours), and to keep our records accurate.
Phone calls
Phone calls are answered by an AI assistant (Vapi) and may be recorded and transcribed, to take and check orders and for quality. We delete our own copies of call logs and transcripts after 30 days. Vapi stores call data under its own retention schedule — see vapi.ai/privacy.
Payment at pickup
If you choose to pay at pickup, we rely on the phone number you give us to confirm your order. If the order isn't picked up, cash payment at pickup may be disabled for that number, and card payment will be required instead.
Text messages
We text you only about your orders — confirmation, pickup and payment. Reply STOP to stop these messages, and START to resume them.
How long we keep it
Order and tax records for six years (Canada Revenue Agency); our call logs and transcripts for 30 days; opt-out lists permanently.
Who we share it with
We share only what each service needs to do its job: Helcim (card payments), Twilio (text messages and phone calls), Supabase (our database), Vapi and its AI providers (the phone assistant), Vercel (hosting), our email provider (sign-in emails), your delivery partner, and Telegram (staff order alerts). We never sell your information. Some of these providers process information outside Canada, including in the United States.
Your rights
Email hello@tndude.ca to access, correct, or delete your information. We answer within 30 days.
Cookies
tndude.ca sets no cookies until you consent to analytics. If you consent, it sets the analytics identifiers and your consent preference.
