Privacy Policy

Effective Date: January 1, 2026  ·  Last Updated: June 3, 2026

This Privacy Policy ("Policy") explains how Toro Taxes ("we", "us", or "our") collects, uses, discloses, retains, and protects information in connection with the website https://www.crececontoro.com/ (the "Site"), our Virtual Assistant, our communications, and our business operations.

By accessing or using the Site, the Virtual Assistant, or by communicating with Toro Taxes, you acknowledge that you have read and understood this Policy.

1. Who We Are

This Site is operated by:

Toro Taxes is physically based in Oklahoma and serves clients primarily through its two active office locations. Through this Site and our online presence, we may be accessed by users located throughout the United States.

2. Scope of the Site and the Virtual Assistant

The Site and the Virtual Assistant are intended to provide general informational and educational content about taxes, ITIN, LLC formation, bookkeeping, document checklists, and appointment scheduling with Felipe Díaz and the Toro Taxes team.

The Site and the Virtual Assistant do not provide personalized tax, legal, accounting, financial, or immigration advice. For matters specific to your situation, please schedule an appointment with Felipe Díaz or a member of the Toro Taxes team at either of our two active office locations.

3. No Tax, Legal, or Financial Advice

Information made available through this Site, the Virtual Assistant, automated tools, or any related communication is provided for general informational purposes only and should not be treated as professional tax, legal, accounting, or financial advice.

No attorney-client, CPA-client, enrolled agent-client, or other professional relationship is created by using the Site or the Virtual Assistant. Any tax positions, filings, document review, or personalized recommendations must be reviewed by Felipe Díaz or the Toro Taxes team through an appropriate appointment or professional process.

4. Do Not Send Sensitive Documents Through Public Channels

For your protection, please do not send sensitive tax, identity, financial, or legal documents through any of the following channels:

• This website or any web form on the Site
• The Virtual Assistant or any public AI assistant
• Public AI tools or browser-based AI assistants
• WhatsApp or WhatsApp Business messages
• SMS or text messages
• Phone voicemail
• Social media comments, posts, or direct messages (Facebook, Instagram, TikTok, LinkedIn)
• Unsecured email, public links, or public chat platforms
• Shared computers, public or unsecured devices
• Unsecured cloud folders or public file-sharing links

Examples of sensitive documents that should not be sent through the channels above include, but are not limited to: full Social Security Number (SSN), full ITIN, passport, driver's license or other government-issued ID, W-2 forms, 1099 forms, IRS letters or notices, tax returns, bank statements, payroll records, accounting files, business financial statements, EIN confirmation letters, corporate or LLC formation documents, immigration or status documents, and any other sensitive tax, identity, financial, or legal documents.

If a client chooses to send sensitive information anyway through a third-party platform, they do so at their own risk, and the information may be handled under that platform's own terms, privacy policies, and security practices. Sensitive documents should be shared only through an appointment or secure process provided by Toro Taxes at one of our two active office locations.

5. Information We May Receive

We may receive information that you choose to provide voluntarily, including but not limited to: name, phone number, email address, general message or inquiry, preferred service or topic of interest, appointment preferences, and preferred office location.

We do not request, and we discourage submission of, sensitive identifiers or financial data through the Site or the Virtual Assistant.

6. Technical Information

When you visit the Site, we (or our service providers) may automatically receive certain technical information, such as IP address, browser type and version, device type and operating system, access times and dates, referring pages or sources, and general usage data and cookies.

This information is used for operational, analytical, security, and improvement purposes. Technical and analytical data is generally retained for up to 24 months unless a longer period is required for legal, regulatory, security, or business compliance purposes.

7. Third-Party Services

We may use or link to communication, social media, advertising, messaging, telephone, SMS, business communication, AI, productivity, device, security, scheduling, and other third-party platforms and service providers, including but not limited to: AI assistants and productivity tools (such as Claude / Anthropic, OpenAI / ChatGPT, Google Gemini, Microsoft Copilot, xAI / Grok); Retell AI (voice AI); Zapier (automation); Calendly (scheduling); Microsoft and Google products and services; cybersecurity and device-protection tools; WhatsApp / WhatsApp Business; Systeme.io (website/landing platform); CrossLink Professional Tax Solutions; PitBullTax; IRS and state tax agency portals; Facebook / Meta, Instagram, TikTok, LinkedIn; SMS / text messaging providers; telephone carriers; call routing, recording, transcription and voicemail providers; advertising and marketing platforms; and any other secure tax, bookkeeping, document management, communication, scheduling, payment, advertising, productivity, security, or workflow tools reasonably necessary to operate Toro Taxes services.

Not all of these tools are used for every user or every interaction. Use of these tools is on an "as needed" or "where applicable" basis. Your use of any third-party tool may be governed by that provider's own privacy policy, terms of service, data processing practices, and security standards. We encourage you to review those policies separately.

8. Use of AI Tools and Automation

Toro Taxes may use AI-assisted tools, automation platforms, transcription tools, voice assistants, scheduling tools, drafting tools, workflow tools, and productivity tools to support operations, respond to inquiries, route communications, organize information, or improve service.

Important protections:

• AI tools are used to support operations and provide general information. They are not used to provide final personalized tax, legal, accounting, or financial advice.
• Users should not submit sensitive taxpayer documents or full identifiers through public AI tools, browser-based AI assistants, public chat, WhatsApp, SMS, social media, or any unsecured channel.
• Any final tax decision, filing position, document review, or personalized recommendation must be reviewed by Felipe Díaz or the Toro Taxes team through an appropriate appointment or professional process.
• Toro Taxes does not use automated decision-making technology ("ADMT") to make legally significant decisions about clients without human review.

9. Tax Preparation and Tax Resolution Software; Official Tax Systems

Toro Taxes uses professional tax preparation and tax resolution software, and official tax systems, including: CrossLink Professional Tax Solutions (primary preparation software for federal and state returns); PitBullTax (tax resolution software for IRS representation, transcript review, and resolution matters); and IRS tools, portals, and e-Services, state tax agency systems, and related official platforms as needed.

These tools are used only as reasonably necessary in connection with professional services. Sensitive taxpayer information should only be provided through appropriate professional channels or scheduled appointments at one of our two active office locations, not through the public website or the Virtual Assistant.

10. Google Workspace, Drive, Gmail, and Business Records

Toro Taxes may use Google Workspace services such as Gmail, Google Drive, Google Sheets, Google Calendar, and related Google tools for business communications, document organization, internal tracking, scheduling, and operational records. A Gmail / Google Workspace email may be used for business communications or operational purposes where applicable.

We use reasonable safeguards and access controls in connection with these tools, but no online platform can be guaranteed to be 100% secure. Google Workspace is not the only storage or communication method we may use, and not all documents or communications are stored or processed in Google services.

11. Device, Browser, Security, and Productivity Tools

Toro Taxes may use computers, mobile devices, operating systems, web browsers, antivirus or cybersecurity tools, cloud services, productivity software, and related technology providers in ordinary business operations. These tools may process technical information, security logs, device information, files, communications, or metadata as part of normal business, security, backup, productivity, or maintenance functions, and may be governed by their own privacy policies, terms, and security practices.

We use reasonable safeguards and access controls, but no device, software, cloud service, browser, security tool, or online platform can be guaranteed to be 100% secure.

12. Communications Through Phone, SMS, WhatsApp, and Social Media

Toro Taxes may communicate with users through phone calls, SMS / text messages, WhatsApp, email, social media platforms, direct messages, voicemail, or other communication channels when users contact us, request information, schedule appointments, or otherwise interact with our business.

Consent to communications. By providing your contact information, contacting us, requesting information, scheduling an appointment, or otherwise communicating with Toro Taxes, you consent to receive communications related to your inquiry, appointment, requested services, or business relationship through appropriate channels such as phone calls, email, voicemail, or similar communications. SMS/text messages are sent only where users have voluntarily opted in, where legally permitted, or where they initiate the SMS conversation. Message and data rates may apply.

Operational vs. marketing communications. Communications from Toro Taxes may be operational (such as appointment confirmations, follow-ups, requested information, or service-related messages) or, where applicable, promotional or marketing in nature. Opt-out requests apply to non-essential or marketing communications; certain operational communications may continue as reasonably necessary to provide requested services or maintain the business relationship.

• Communications through third-party platforms are subject to the privacy policies, security practices, and terms of service of those platforms.
• Users should not send sensitive tax, identity, financial, or legal documents through SMS, WhatsApp, social media direct messages, public comments, voicemail, or any unsecured channel.
• Toro Taxes may use reasonable business communication tools, including call routing, voicemail, transcription, and business messaging, to respond, route, organize, or follow up on communications where applicable.

12-A. SMS / Text Messaging Program

13. Call Recording, Voicemail, Audio Collection, and Voice Assistant Interactions

Phone calls, voicemail messages, voice assistant interactions, audio communications, and related communications may be recorded, transcribed, summarized, routed, retained, or reviewed for quality assurance, quality control, training, follow-up, documentation, security, audit, compliance, or service improvement purposes, where permitted by law and with notice or consent where required.

These functions may be supported by third-party providers, including voice AI providers (such as Retell AI), telephone carriers, call routing or transcription providers, scheduling platforms, and similar service providers. If you do not wish for a particular call, voicemail, or audio to be recorded, transcribed, or retained, please indicate that during the communication or contact us using the information in Section 29.

14. Social Media and Public Comments

Toro Taxes may maintain or use social media profiles or pages on platforms such as Facebook, Instagram, TikTok, LinkedIn, or similar platforms. Information posted publicly — including comments, reviews, public messages, or shared content — may be visible to others, indexed by search engines, or retained by the platform according to its own policies. Users should not post sensitive personal, tax, financial, legal, or identity information in public comments, public posts, or public messages.

15. Marketing and Advertising Platforms

Toro Taxes may use advertising or marketing platforms, including but not limited to Meta / Facebook, Instagram, TikTok, LinkedIn, Google, or similar platforms, to share general information about services, build brand awareness, or reach prospective clients where applicable. Where enabled, these platforms may use cookies, pixels, device identifiers, conversion tracking, or similar technologies according to their own policies.

We do not sell personal information for monetary consideration. Where targeted advertising or cross-context behavioral advertising occurs through these platforms, users may exercise opt-out rights as described in Sections 21 and 22 of this Policy.

16. How We Use Information

We may use information for purposes including: responding to inquiries and requests; facilitating appointments and follow-up at either of our two active office locations; sending information you have requested; operating, maintaining, and improving the Site and the Virtual Assistant; supporting tax preparation, tax resolution, bookkeeping, or related professional services where you have engaged us; improving user experience; communicating with users through phone, SMS, email, WhatsApp, social media, or other channels where applicable; conducting quality control, training, and service improvement (including review of recordings, transcripts, or audio where applicable); complying with legal and regulatory obligations; and protecting the rights, property, and security of Toro Taxes, our team, and our users.

17. Data Retention for Personal Information

Toro Taxes retains personal information only for as long as is reasonably necessary to fulfill the purposes described in this Policy, comply with legal and regulatory obligations, resolve disputes, and enforce agreements. General retention guidelines:

• General inquiries and contact form submissions (not resulting in an engagement): up to 3 years from last contact, unless a longer period is required by law.
• Appointment scheduling data and operational records: up to 4 years from last interaction.
• Tax preparation client records and supporting documents: minimum of 7 years from the date of return, in accordance with IRS guidelines and applicable state law.
• ITIN application and CAA records: as required under IRS Certified Acceptance Agent program rules.
• Call recordings, voicemail, and transcripts: up to 24 months unless retention is required longer for legal, compliance, security, or dispute-resolution purposes.
• Marketing and communication preferences: retained until you request deletion or opt out.

After the applicable retention period, physical records are securely destroyed (e.g., cross-cut shredded), and electronic records are securely deleted or anonymized.

18. Safeguarding Taxpayer Information

Toro Taxes takes taxpayer data protection seriously.

• Taxpayer information may be subject to special confidentiality and security obligations under IRC § 7216, IRS Circular 230, the Gramm-Leach-Bliley Act (GLBA), and the FTC Safeguards Rule.
• We use reasonable administrative, technical, and organizational safeguards. Access is limited to authorized personnel or service providers as reasonably necessary.
• We discourage, and do not intend for users to submit, sensitive tax documents through public pages, public AI tools, browser-based AI assistants, productivity tools, WhatsApp, SMS, social media, voicemail, public comments, unsecured cloud folders, shared computers, or unsecured links.
• No method of transmission over the Internet, telephone network, or method of electronic storage is 100% secure. We cannot guarantee absolute security.

Toro Taxes maintains a Written Information Security Plan (WISP) in accordance with the FTC Safeguards Rule (16 CFR Part 314) and IRS Publication 4557. A copy is available upon written request and with consent of the designated Data Security Coordinator.

19. Service Providers and Business Operations

We may share information with service providers only as reasonably necessary to operate the Site, schedule appointments, communicate with users, provide requested services, prepare or resolve tax matters, maintain records, comply with legal obligations, prevent fraud, or protect rights and security. Service providers may include website hosting, scheduling, communication/SMS/telephone/voicemail/transcription/messaging platforms, AI/automation/productivity providers, device/browser/cloud/cybersecurity providers, document storage, tax preparation and resolution software, advertising/marketing/social media platforms, payment processors, professional advisors, government tax authorities (where required or authorized by law), and the Toro Taxes franchisor, franchise system representatives, corporate support teams, authorized vendors, and quality assurance or compliance personnel where reasonably necessary.

We do not sell customer lists, and we do not sell personal information for monetary consideration.

Toro Taxes Franchise System. 20D, LLC operates as a Toro Taxes franchised office and location doing business under the Toro Taxes brand. As part of the Toro Taxes franchise system, certain information may be shared with or accessible to the Toro Taxes franchisor, corporate support teams, franchise system representatives, authorized vendors, technology providers, quality assurance personnel, compliance reviewers, training teams, or other authorized franchise-related service providers where reasonably necessary — for purposes such as brand support, operational support, software/technology support, quality assurance, training, franchise compliance, audit support, customer service, security, dispute resolution, recordkeeping, legal compliance, or improving services. Not all information is shared in every case; access is limited to what is reasonably necessary, and sensitive taxpayer information should only be handled through appropriate professional, operational, or secure processes.

20. Data Breach Notification

In the event of a security incident that results in unauthorized access to, acquisition of, or disclosure of personal information, Toro Taxes will: assess and contain the incident in accordance with our Written Information Security Plan (WISP); notify affected individuals in accordance with applicable federal and state breach notification laws, including the Oklahoma Security Breach Notification Act (24 O.S. §§ 161 et seq.), the FTC Safeguards Rule, and the breach notification requirements of any other state in which affected individuals reside; notify the IRS Stakeholder Liaison, the Federal Trade Commission (for covered events), and relevant state Attorneys General and regulatory authorities as required by law; and cooperate with law enforcement and forensic investigations as appropriate. Specific notification timelines and content will follow applicable federal and state requirements.

21. Universal Opt-Out Mechanisms and Do-Not-Track Signals

Several state privacy laws require or permit recognition of universal opt-out preference signals, such as the Global Privacy Control (GPC). Where required by law and technically feasible, Toro Taxes will recognize and honor such universal opt-out preference signals communicated through your browser or device, including the GPC, as an opt-out of the sale or sharing of personal information and of targeted or cross-context behavioral advertising, in jurisdictions where such recognition is required.

Because there is no universally accepted standard for "Do Not Track" (DNT) browser signals, we generally do not respond to DNT signals separately, except as required by law. Users may continue to exercise opt-out rights as described in Section 22.

22. State-Specific Privacy Rights

Because Toro Taxes operates a publicly accessible website and may be contacted by individuals located throughout the United States, this Section describes privacy rights that may apply to residents of states with comprehensive consumer privacy laws. The availability and scope of these rights depend on your state of residence, the applicability thresholds of each state's law, and any applicable exemptions (including, where applicable, exemptions for information processed under the Gramm-Leach-Bliley Act).

22.1 Rights Generally Available

Depending on your state of residence and the applicable law, you may have some or all of the following rights: Right to Know / Access; Right to Correct; Right to Delete; Right to Data Portability; Right to Opt Out of Sale; Right to Opt Out of Sharing / Targeted Advertising; Right to Opt Out of Profiling; Right to Limit Use of Sensitive Personal Information; Right to Appeal; and Right to Non-Discrimination / Non-Retaliation. We do not sell personal information for monetary consideration.

22.2 States with Comprehensive Privacy Laws

The following states have enacted comprehensive consumer privacy laws that may provide some or all of the rights described above to their residents: California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Delaware (DPDPA), New Hampshire (NHPA), New Jersey (NJDPA), Tennessee (TIPA), Minnesota (MCDPA), Maryland (MODPA), Nebraska (NDPA), Indiana (INCDPA), Kentucky (KCDPA), Rhode Island (RIDTPPA), and Florida (FDBR, where applicable). Residents of states not listed above may still have privacy rights under other applicable state or federal laws.

22.3 California-Specific Disclosures

If you are a California resident, you have the rights described in Section 22.1 under the CCPA/CPRA. Categories of personal information collected in the preceding 12 months may include identifiers (name, email, phone, IP address), commercial information (services requested), internet or other electronic network activity, and inferences. Sources: directly from you, automatically from your device, and from service providers. We do not sell personal information for monetary consideration. California residents may use an authorized agent to submit requests, subject to verification. We generally respond to verifiable requests within 45 days, with the possibility of one 45-day extension. No financial incentives are offered in exchange for personal information.

22.4 Submitting a Privacy Rights Request

To exercise any of the rights described in this Section, contact us using the information in Section 29. Please include your full name, your state of residence, the right(s) you wish to exercise, a description of your request, and sufficient information for us to verify your identity. We will respond within the timeframe required by applicable law and may need to verify your identity before fulfilling certain requests. If we deny your request, you may have the right to appeal; instructions will be provided in our response.

23. Children's Privacy

The Site and the Virtual Assistant are not directed to children under 13, and we do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA). We comply with applicable law in jurisdictions with age-appropriate design code laws or enhanced protections for minors. If you believe a child has provided personal information, please contact us so we can take appropriate action.

24. External Links

The Site or the Virtual Assistant may link to external websites or services that we do not control. We are not responsible for the privacy practices, content, terms, or security of external sites. We encourage you to review their privacy policies separately.

25. GLBA and Tax Professional Obligations

Toro Taxes is a tax preparation business and may be considered a "financial institution" for certain purposes under the Gramm-Leach-Bliley Act (GLBA) and the FTC Safeguards Rule. Certain information processed in connection with tax preparation, representation, or related professional services may be subject to GLBA, IRC § 7216, IRS Circular 230, and the FTC Safeguards Rule, and may be subject to exemptions or alternative treatment under certain state privacy laws. Toro Taxes maintains a Written Information Security Plan (WISP) consistent with these obligations.

26. Governing Law and Dispute Resolution

This Policy is governed by and construed in accordance with the laws of the State of Oklahoma, without regard to its conflict-of-laws principles, except to the extent that mandatory federal law or the privacy law of another state applicable to a specific resident's rights provides otherwise. Any dispute arising out of or relating to this Policy shall be subject to the exclusive jurisdiction and venue of the state or federal courts located in Oklahoma County, Oklahoma, except where prohibited by applicable law or where consumer-protection statutes of another state grant a resident non-waivable venue rights. Nothing in this Policy limits any non-waivable statutory rights you may have under your state of residence.

27. Severability

If any provision of this Policy is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall remain in full force and effect. The invalid provision shall be deemed modified to the minimum extent necessary to render it valid and enforceable, consistent with the original intent of this Policy.

28. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" and "Last Updated" date above will be revised when material changes are made. Where required by law, we will provide additional notice of material changes. Continued use of the Site after changes are posted constitutes acceptance of the updated Policy.

29. Contact

When submitting a privacy rights request, please reference Section 22 of this Policy and include the information requested in Section 22.4.

This Privacy Policy is effective as of January 1, 2026.