Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
Chipotle's privacy policy includes a few points for concern. The company states it may record, share, and create transcripts of customer service calls and chats, including those with its AI chatbot, Pepper (risk_flags-1). By using Pepper, users explicitly consent to Chipotle sharing chat contents, including personal information, with its service providers (risk_flags-2). Additionally, CCTV footage from restaurants may be used for business analytics and to improve customer service, beyond just security (risk_flags-3). Finally, Chipotle retains personal information for as long as necessary to achieve the purposes for which it was collected, and also for legal obligations, tax/audit purposes, or other legally permitted reasons (gotchas-1).
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
Clauses that indicate a potential for significant user harm, legal, or financial risks.
medium95% confidence confidence
Recording and Sharing of Customer Service Interactions
Chipotle may record, share, or create transcripts of customer service calls or chats, including interactions with their AI chatbot, Pepper. This information may be retained and processed by service providers.
Why it matters: Your conversations with customer service, including those via AI chatbot, may be recorded, shared, and analyzed by Chipotle and its service providers, potentially exposing personal information shared during these interactions.
We may record, share, or create transcripts of your calls to us, your chats with Pepper, or any other method by which you connect with us and may retain the information disclosed during these interactions to assist you in the future, to improve our customer service and service offerings, to meet our legal obligations or to protect our legal interests, as well as for other business purposes that are detailed in this Privacy Policy. We may also use service providers to provide these services which means they may create or have access to these recordings or transcripts, including in real time.
**1.[](https://www.chipotle.com/privacy-policy)COLLECTION OF INFORMATION**, paragraph 10 · Citation strength: strong
medium90% confidence confidence
Consent to Share AI Chatbot Data with Service Providers
By using Chipotle's AI chatbot, Pepper, users explicitly consent to Chipotle disclosing and sharing the chat contents, including any personal information provided, with its service providers.
Why it matters: Using the AI chatbot implies consent for your chat data and personal information to be shared with third-party service providers, which might lead to broader disclosure than expected.
By using Pepper, you direct Chipotle to disclose to and share with our service providers the contents of the chat, including, any personal information you provide through the chat.
**1.[](https://www.chipotle.com/privacy-policy)COLLECTION OF INFORMATION**, paragraph 10 · Citation strength: strong
medium85% confidence confidence
Use of CCTV Footage for Business Analytics and Customer Service Improvement
Chipotle may use video surveillance (CCTV) footage from its restaurants for loss prevention, safety, and security purposes, and also to operate its business, conduct business analytics, and improve customer service.
Why it matters: Your image and activities captured by CCTV in restaurants may be used for various business purposes beyond security, including analytics and service improvement.
We may also use video surveillance (e.g. CCTV) in our restaurants for loss prevention, safety, and security purposes.We may use CCTV footage from our restaurants to operate our business, such as to conduct business analytics and improve our customer service.
**1.[](https://www.chipotle.com/privacy-policy)COLLECTION OF INFORMATION**, paragraph 3 · Citation strength: strong
Data Use
Clauses that describe how the user’s data is collected, processed, and shared.
low85% confidence confidence
Collection of Personal Information from Gift Card Recipients
When purchasing an e-gift card for someone else, Chipotle collects the recipient's name and email address solely for the purpose of delivering the e-gift card.
Why it matters: If you send an e-gift card, the recipient's name and email are collected by Chipotle, but stated to be used only for gift card delivery.
If you purchase an e-gift card for a friend or family member, we collect the name and email address for the recipient in order to deliver an email containing your e-gift card on your behalf. We do not use the recipient’s information for any other purpose.
**1.[](https://www.chipotle.com/privacy-policy)COLLECTION OF INFORMATION**, paragraph 4 · Citation strength: strong
Cancellation & Renewal
Clauses that describe how users can cancel subscriptions or services, and details about automatic renewals.
✓
Looking good
No billing surprises spotted
Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.
Gotchas
Potentially overlooked clauses that may be detrimental or unexpected for users.
low90% confidence confidence
Retention of Personal Information for Legal and Business Purposes
Chipotle retains personal information as long as necessary for the purposes it was collected, as well as for legal obligations, tax/audit purposes, or other legally permitted reasons.
Why it matters: Your personal information may be retained by Chipotle for an extended period if required by law or for specific business purposes, even after the initial collection purpose is met.
We retain personal information for as long as necessary to achieve the purposes for which the information was collected. In certain cases, we may need to retain personal information for purposes required under applicable law, for tax or audit purposes, or for other purposes permitted under law.
For safety and security purposes, paragraph 7 · Citation strength: strong
Protections
Clauses that offer explicit benefits or safeguards to the user.
✓
Looking good
No source-backed concerns shown
Verbaterm only flags concerns it can cite. Uncited model claims stay out of the review and do not count against the company.
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.