Privacy Policy
Effective Date: May 9, 2026
Last Updated: May 9, 2026
Quick summary
This is the short version. Read the full policy below for the binding language.
- Who we are: Alliance Unlimited Inc., a Florida corporation. We sell university-grade education in financial-statement literacy, Excel modeling, and the economics of personal money decisions.
- What we collect: Your email when you sign up for our newsletter. Your name, email, billing address, and payment info when you enroll in a course (payment info goes to Stripe; we never see your card number). Your activity in our courses (videos watched, quizzes attempted, worksheets saved). Your interactions with our website (pages viewed, links clicked).
- Who we share it with: Microsoft (cloud, email, analytics), Stripe (payments), and Anthropic (the AI behind the in-course Tutor, accessed through Microsoft Foundry). We don’t sell your data. We don’t share it with advertisers.
- AI: We use AI heavily and we tell you so. The in-course Tutor uses Anthropic Claude through Microsoft Foundry. Your conversations are not used to train the AI. We use AI to draft marketing content, but a human reviews and approves before publishing.
- Your rights: Access, correction, deletion, portability — write to privacy@allianceunlimited.com and we’ll respond within 30 days.
- Brokerage separation: Real estate, mortgage, and insurance advice runs through Alliance Realty & Financial Services, Inc. (alliancerealtyandfinancial.com), a separate business. This privacy policy applies only to Alliance Unlimited Inc. and the allianceunlimited.com website.
- Our promise: No surprise emails. No auto-renewal billing. No data sales. No advertising-network behavioral profiling beyond Microsoft Ads conversion measurement on our own website.
1. Who We Are
Alliance Unlimited Inc. (“AU,” “we,” “us,” “our”) is a Florida corporation operating the website allianceunlimited.com and providing educational courses to adult learners worldwide. Our mailing address is on file with the State of Florida and available on request. The principal contact for privacy matters is privacy@allianceunlimited.com.
This privacy policy applies only to allianceunlimited.com and to information you provide to Alliance Unlimited Inc. directly. It does not apply to Alliance Realty & Financial Services, Inc. (alliancerealtyandfinancial.com) or to any future Alliance entity, each of which maintains its own privacy practices and policies.
For purposes of the European Union and United Kingdom General Data Protection Regulation, Alliance Unlimited Inc. is the data controller of personal information collected through allianceunlimited.com.
2. Information We Collect
We collect three categories of information.
2.1 Information you give us
- Newsletter signup: your email address. Optionally, your name. The signup confirms you intentionally subscribed (double opt-in via a confirmation email click).
- Course enrollment: your name, email, billing address, and country. The payment itself (credit card number, expiration, CVC) is collected and processed by Stripe, Inc. AU never sees, stores, or transmits your full card number.
- Account creation after enrollment: your name, email, password (stored as a salted hash through Microsoft Entra External ID — never as plain text), and any optional profile information you provide.
- Course interactions: video plays, quiz attempts and scores, worksheet states (auto-saved to enable cross-device access), capstone selections and completions, AI Tutor conversations.
- Forms, surveys, and direct correspondence: any information you provide if you write to us, fill out a form, or respond to a survey.
- Certificate of Completion: your name as it appears on your certificate (shown on the public verification page at allianceunlimited.com/verify/?id= when someone enters your certificate ID).
2.2 Information we collect automatically
When you visit allianceunlimited.com, we automatically collect:
- Technical information: your browser type and version, operating system, device class (desktop, tablet, mobile), screen resolution, language preference, IP address (truncated where required by regional law).
- Usage information: pages you view, links you click, the path you take through our site, time spent on each page, page-load performance metrics (Core Web Vitals), scroll depth, and clicks on key call-to-action buttons.
- Referrer information: the website or marketing channel that brought you to us (including UTM parameters on inbound links — utm_source, utm_medium, utm_campaign, etc.).
- Cookies and similar technologies: see § 4 below.
2.3 Information from third parties
- Microsoft Bing Webmaster Tools / Google Search Console: aggregate, non-personal search analytics about queries that surface our site in Bing or Google search results.
- Microsoft Ads: conversion event data when you arrive from a Microsoft Ads campaign and complete a conversion event on our site.
- LinkedIn, X, Instagram, YouTube: aggregate engagement statistics about our public posts on those platforms (no individual user data unless you publicly engage with our posts in a way that makes your activity visible).
2.4 Information we do not collect
- We do not collect your full credit card number, CVC, or bank account details. Stripe handles payment information directly.
- We do not access your email contacts, calendar, location data, or files outside of what you intentionally upload to your AU account.
- We do not read messages from your other apps, your messages, or your microphone or camera.
- We do not scrape your social media accounts (other than your public profile if you connect via LinkedIn/Microsoft sign-in).
- We do not purchase personal information from data brokers.
3. How We Use Information
We use the information we collect for the following purposes.
| Purpose | What we use | Lawful basis (EU/UK) |
|---|---|---|
| Deliver the courses you enrolled in | Account info, course interactions | Contract |
| Process your payment | Name, email, billing address (Stripe handles card info) | Contract |
| Send you the courses you bought | Email, account info | Contract |
| Issue your Certificate of Completion | Name, course progress | Contract |
| Send the welcome email and access information after you enroll | Contract | |
| Send the renewal-reminder email cadence (60, 30, 7, 0 days before expiration; and within the 90-day post-expiration renewal-eligibility window) | Email, enrollment dates | Legitimate interests in keeping you informed about your access to courses you purchased |
| Send the newsletter and educational primer (only if you opted in) | Email, topic-interest signals from blog clicks | Consent (you can unsubscribe at any time) |
| Power the in-course AI Tutor | Course context, your questions | Contract |
| Detect fraud, abuse, and security threats | Technical info, usage patterns | Legitimate interests in operating safely |
| Comply with legal obligations (tax records, refund processing, regulatory requests) | Whatever is lawfully required | Legal obligation |
| Improve our courses and the website | Aggregate, anonymized usage data | Legitimate interests in improving our product |
| Marketing analytics and Microsoft Ads conversion measurement on our own site | Conversion events, UTM data, anonymized traffic | Legitimate interests in measuring our own marketing |
| Comply with court orders, subpoenas, regulatory demands | Whatever is lawfully required | Legal obligation |
We do not:
- Sell your personal information
- Share your personal information with advertising networks for behavioral profiling
- Use your AI Tutor conversations to train AI models
- Send marketing emails you didn’t opt into
- Auto-renew your course access without explicit, opt-in re-purchase
4. Cookies and Tracking Technologies
We use cookies and similar technologies (including pixels, tags, and local storage) for the purposes below. You can control most of them through your browser settings or through the cookie banner shown on your first visit.
4.1 Strictly necessary
These cookies are required for the site to function. Without them, you cannot log in, complete a purchase, or save your worksheet progress.
| Cookie / technology | Purpose | Provider |
|---|---|---|
| Session cookies | Keep you logged in; preserve your shopping cart | Alliance Unlimited Inc. (first-party) |
| Stripe checkout cookies | Process payment securely | Stripe, Inc. |
| Microsoft Entra External ID | Authenticate your account | Microsoft Corporation |
| localStorage / IndexedDB | Save your worksheet state across pages and sessions | Alliance Unlimited Inc. (first-party) |
4.2 Analytics
These help us understand how the site is used. They run only after you accept the cookie banner.
| Tool | Purpose | Provider | Where deployed |
|---|---|---|---|
| Microsoft Application Insights | Site performance and usage analytics | Microsoft Corporation | All pages |
| Microsoft Clarity | Heatmaps and session recordings (helps us improve UX) | Microsoft Corporation | All pages |
| Google Analytics 4 | Aggregate visitor analytics for the public marketing pages | Google LLC | Public marketing pages only (not on authenticated learner pages) |
| Bing Webmaster Tools | Aggregate search-result analytics | Microsoft Corporation | Server-side only |
4.3 Advertising / measurement
These help us measure the effectiveness of our own ads on our own site.
| Tool | Purpose | Provider |
|---|---|---|
| Microsoft Ads UET (Universal Event Tracking) | Measure ad-conversion events for our Microsoft Ads campaigns | Microsoft Corporation |
We do not use cross-site advertising trackers from Google Ads, Meta (Facebook/Instagram), TikTok, or other ad networks. The only paid advertising platform we use is Microsoft Ads.
4.4 Your cookie choices
- In our cookie banner on first visit, you can accept all, reject non-necessary, or customize your choices.
- In your browser, you can clear cookies, block them, or set Do Not Track preferences. We respect Global Privacy Control (GPC) signals.
- For Google Analytics specifically, you can install the Google Analytics opt-out browser add-on.
If you reject non-necessary cookies, the site still works for purchasing, learning, and account management. Some analytics will be modeled rather than measured directly.
5. AI Processing
We use AI heavily and we are transparent about it. Specifically:
- The in-course AI Tutor is powered by Anthropic Claude, accessed through Microsoft Foundry. When you ask the Tutor a question, your question and the relevant course context are sent to Anthropic Claude through Microsoft Foundry’s secure API. Per Microsoft Foundry’s terms, your data is not used to train Anthropic’s foundation models. Conversations are stored in our infrastructure for your access history and to help you resume the Tutor where you left off.
- Marketing content drafting: our internal Marketer agent uses AI to draft daily blog content from public regulatory feeds (SEC EDGAR, Federal Reserve, Treasury, FDIC, BLS). A human (Dr. Kareem Tannous) reviews and approves every AI-drafted piece before it is published to our website or social channels. No customer data flows through this drafting process.
- Customer support triage: our Sales/Onboarding agent uses AI to draft responses to incoming questions at info@allianceunlimited.com. A human reviews and sends every response. The AI sees only the content of the email it is responding to, not other customer records.
- AI-generated mathematical, financial, and statistical examples in our courses, blog, emails, and social media are for educational purposes only.
6. Third-Party Service Providers (Subprocessors)
We share personal information only with the following service providers, each of which processes your data on our behalf under written agreements that include appropriate data-protection obligations.
| Provider | What they do | Data they receive |
|---|---|---|
| Microsoft Corporation | Cloud infrastructure (Azure), email and productivity (Microsoft 365 / Microsoft Graph), AI hosting (Microsoft Foundry), advertising platform (Microsoft Ads), search platform (Bing Webmaster), authentication (Microsoft Entra External ID), video hosting (Microsoft Stream), web application firewall and CDN (Azure Front Door) | Substantially all categories of data we collect — Microsoft is the platform on which AU operates |
| Stripe, Inc. | Payment processing, tax calculation (Stripe Tax) | Name, email, billing address, payment information |
| Anthropic, PBC | AI inference for the in-course Tutor and internal agents (accessed via Microsoft Foundry, not directly) | Course context and your questions to the Tutor |
| Google LLC | Aggregate visitor analytics on public marketing pages (Google Analytics 4) | Anonymized traffic events on public pages |
| HeyGen, Inc. | AI video generation for course content production (backend only — no learner data) | None of your personal data |
| GoDaddy.com, LLC | Domain registration of allianceunlimited.com (registrar; does not process customer data on our behalf) | None of your personal data |
| LinkedIn Corporation | Receiving public social posts we publish to our company page | Only data we publish publicly on LinkedIn |
We do not share your data with: data brokers; advertising networks for behavioral profiling; analytics SaaS vendors outside of those listed above; email marketing platforms (we use Microsoft 365 / Microsoft Graph); customer-relationship-management (CRM) SaaS vendors.
7. Data Retention
We keep your personal information only as long as we need it.
| Data category | Retention period |
|---|---|
| Newsletter subscriber email | Until you unsubscribe, plus 12 months for re-engagement records |
| Course enrollment record (name, email, billing address, course access) | Active access window plus 7 years for tax and refund-eligibility records |
| Stripe payment records | Per Stripe’s retention policy (typically 7 years for compliance) |
| Course interaction history (quizzes, worksheets, capstone, AI Tutor) | Active access window plus 30 days; archived in aggregate, anonymized form thereafter for product improvement |
| Certificate of Completion record | Indefinitely (the certificate is a permanent record of completion; the public verification URL must continue to work even after course access expires) |
| Website analytics (Application Insights, Clarity, GA4) | 26 months default; anonymized after 14 days |
| Microsoft Ads conversion events | 13 months |
| Customer support email correspondence | 3 years |
| Refund records | 7 years for tax compliance |
| Account closed/deleted on your request | 30 days for processing, then deletion (except where retention is required by law — tax records, refund records) |
8. International Data Transfers
We are based in the United States. Our cloud infrastructure runs primarily in Microsoft Azure data centers in the United States and the European Union. If you are in the European Economic Area, the United Kingdom, or another jurisdiction with data-localization rules, your personal information may be transferred to, processed in, and stored in the United States.
For transfers from the European Economic Area, the United Kingdom, and Switzerland, we rely on:
- EU-U.S. Data Privacy Framework (where applicable; Microsoft is certified under DPF)
- Standard Contractual Clauses approved by the European Commission, executed between Alliance Unlimited Inc. and our subprocessors
- Microsoft EU Data Boundary for AU operations on Microsoft cloud — meaning EU customer data stays in EU data centers where possible
For transfers to and from other jurisdictions (Canada, the United Kingdom under UK GDPR, Australia, Switzerland), we rely on the corresponding regulator-approved transfer mechanisms.
9. Data Security
We protect your information through layered technical and organizational controls:
- Encryption in transit: TLS 1.2 or higher on all customer-facing connections
- Encryption at rest: Microsoft Azure-managed encryption for all data stores (Azure SQL, Cosmos DB, Storage)
- Authentication: Microsoft Entra External ID with optional multi-factor authentication
- Web application firewall: Azure Front Door with WAF and DDoS protection
- Secrets management: All credentials stored in Azure Key Vault; never inlined in code
- Identity: Service-to-service authentication via Microsoft Managed Identity (no shared credentials)
- Access control: Role-based access; principle of least privilege
- Logging and monitoring: Application Insights and Microsoft Defender for Cloud
- Vulnerability management: Regular security review against the OWASP Top 10
- Backups: Automated, encrypted backups across multiple Azure regions
No security system is perfect. If we ever experience a security incident affecting your personal information, we will notify you and any required regulators in accordance with applicable law (typically within 72 hours of discovery for GDPR-covered data).
10. Your Rights
Depending on your location, you have some or all of the following rights with respect to your personal information.
| Right | What it means | How to exercise |
|---|---|---|
| Access | Request a copy of the personal information we hold about you | Email privacy@allianceunlimited.com |
| Correction | Ask us to fix incorrect information | Email or update in your account |
| Deletion | Ask us to delete your personal information (subject to legal-retention exceptions) | Email privacy@allianceunlimited.com |
| Portability | Receive your data in a machine-readable format | Email privacy@allianceunlimited.com |
| Restrict processing | Limit how we use your data while a question is investigated | Email privacy@allianceunlimited.com |
| Object to processing | Object to processing based on legitimate interests | Email privacy@allianceunlimited.com |
| Withdraw consent | Stop receiving newsletters or other consent-based processing | Click “unsubscribe” in any email or update preferences in your account |
| Lodge a complaint | File a complaint with your data protection authority | Contact your local regulator; we will cooperate fully |
| Avoid automated decision-making | We do not make consequential decisions about you using AI alone — refund eligibility is a mechanical rule, not an AI judgment | Already in place |
We respond to requests within 30 days in most cases. We may need to verify your identity before responding to a request that involves personal data.
10.1 California Residents (CCPA/CPRA)
In addition to the rights above, California residents have specific rights under the California Consumer Privacy Act and the California Privacy Rights Act:
- Right to know what categories of personal information we collect, use, disclose, and sell
- Right to delete personal information we collect
- Right to correct inaccurate personal information
- Right to opt-out of sale or sharing of personal information — we do not sell or share personal information for cross-context behavioral advertising. There is nothing to opt out of.
- Right to limit use of sensitive personal information — we collect and use sensitive personal information (account credentials, payment information) only for the purposes you authorized
- Right against retaliation for exercising your rights
Categories of personal information collected in the past 12 months: identifiers (name, email, IP address); commercial information (purchase records); internet activity (browsing on our site); geolocation data (city-level, derived from IP); inferences (topic interest from blog clicks).
Disclosed for business purposes to: Microsoft, Stripe, Anthropic (via Microsoft Foundry), Google (analytics on public pages only).
Sold or shared for cross-context behavioral advertising: None.
To exercise your California rights: email privacy@allianceunlimited.com or call us at the number listed on allianceunlimited.com/contact/.
10.2 European Economic Area, United Kingdom, and Switzerland Residents
In addition to the general rights above, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place where the alleged violation occurred.
The legal basis for our processing of your personal data is described in § 3 above. Where we rely on legitimate interests, you can object to that processing — write to us and we will explain our balancing test or stop processing your data for that purpose, subject to overriding legitimate interests or legal obligations.
10.3 Other U.S. State Privacy Rights
Residents of Colorado, Connecticut, Virginia, Utah, Texas, and other states with general privacy laws have rights similar to California’s. Email privacy@allianceunlimited.com to exercise them.
11. Children’s Privacy
Our services are intended for adults (18 years of age or older). We do not knowingly collect personal information from children under 13 (or under 16 in the EEA / UK). If we learn that we have collected information from a child under the applicable age, we will delete it promptly. If you believe a child has provided us with information, please contact us at privacy@allianceunlimited.com.
12. Marketing Communications
We send the following types of messages.
| Message type | Trigger | How to stop |
|---|---|---|
| Welcome / enrollment confirmation | When you complete a purchase | Required transactional message |
| Course-progress and milestone emails | Quiz pass, capstone completion, etc. | Update preferences in your account |
| Renewal-reminder cadence (Day 60 / 30 / 7 / 0 / +30 / +60 / +83 / +90 relative to access expiration) | Approaching or following access expiration | Required transactional message until you cancel future renewals (which is automatic — there is no auto-renewal) |
| Newsletter (weekly digest, 5-day primer) | You opt in | Click “unsubscribe” in any email |
| Customer support replies | Your question | Reply to the original email or contact us |
| Major service announcements (security incidents, terms updates) | When required by law or material to your service | Cannot opt out of legally required notices |
We do not send promotional emails, third-party offers, surprise discounts, or “limited-time” pressure campaigns.
13. Brokerage Separation Disclosure
All real estate, mortgage, and insurance advice runs through Alliance Realty & Financial Services, Inc. (alliancerealtyandfinancial.com), a separate business. Alliance Unlimited Inc. is purely educational. This privacy policy does not apply to Alliance Realty & Financial Services, Inc.; that entity maintains its own privacy practices.
If you have questions about brokerage-related personal information, contact Alliance Realty & Financial Services, Inc. directly. If you have questions about education-related personal information, contact Alliance Unlimited Inc. at privacy@allianceunlimited.com.
A future entity, Alliance Fiduciaries Inc., is not yet registered as an investment advisory firm. When that entity is formed and registered with state authorities, it will maintain its own privacy practices.
14. Educational Purposes Disclaimer
All mathematical, financial, and statistical examples shared by Alliance Unlimited Inc. — in courses, on the website, in marketing emails, in newsletters, on social media, in advertisements, and elsewhere — are for educational purposes only. They are not investment, legal, tax, or insurance advice. They do not constitute a recommendation to buy or sell any security or financial product. They are not a substitute for advice from a licensed professional who knows your specific situation.
15. Changes to This Policy
We may update this policy as our practices, the law, or our service offerings change. When we do:
- We will post the updated policy at allianceunlimited.com/privacy/
- We will update the “Last Updated” date at the top
- For material changes (those that meaningfully affect your rights), we will notify you by email at least 30 days before they take effect, where we have your email address
Continued use of our services after a material change constitutes your acceptance of the updated policy.
A change history is maintained and available on request.
16. Contact Us
For privacy questions, requests, complaints, or to exercise any rights described in this policy:
Email: privacy@allianceunlimited.com
Postal mail: [Mailing address on file with the State of Florida; available on request]
Phone: Contact details at allianceunlimited.com/contact/
For the EU/UK GDPR, the data controller is Alliance Unlimited Inc.
17. Effective Date
This privacy policy is effective as of May 9, 2026 and supersedes any prior privacy practices for allianceunlimited.com.