Last updated: September 28, 2026

What we collect

What you tell us on forms: your name, email, phone, and state, and what you share about your plans, such as whether you are buying or refinancing, your timeframe, the area you are interested in, and any message. Survey answers you send us through Microsoft Forms, including your name and email if you give them.
Ask Alli chat: the questions you type into the Ask Alli assistant.
Mortgage application data is collected by the third-party loan-origination system we route applications through, under its separate privacy policy. Alliance receives the file to underwrite and close — never sold, never shared beyond investors and service providers required to complete your transaction.
Payments: payments on this site are processed by Stripe (cards) or Coinbase (cryptocurrency) under their own privacy policies. We receive a payment confirmation, not your full card number.
Technical information: like most websites, our servers and security tools record basic technical information, such as your IP address, browser type, and the pages you request.
Ad click identifiers: if you arrive from one of our ads, the link carries an ad click ID (for example gclid, msclkid, or fbclid). We keep it in your browser for that visit so an inquiry can be credited to the ad.
Analytics, only after you click “Got it” on our cookie notice: see “Analytics and advertising tools” below.

How we use AI services

We use Anthropic's Claude AI service:

to answer the questions you type into Ask Alli;
to screen Contact Us messages for spam, which sends the name, email, phone, topic, state, and message you submit to Anthropic;
to assign a priority to lead-form inquiries, using the plans and timeframe you tell us, not your name or contact details.

Analytics and advertising tools

Before you click “Got it”: the Google tag loads on every page with analytics and advertising storage set to “denied.” In this mode Google does not set cookies, but it may still receive basic technical information from the page request.
After you click “Got it”: Google Analytics, Microsoft Clarity (heatmaps and session recordings, with personal information masked), Azure Application Insights (page speed and errors), and the Google Ads and Microsoft Advertising tags, which measure whether our ads led to a visit or an inquiry. These tools set cookies or use similar storage in your browser.
Measuring ad results from inquiries: when you submit a lead form, our server may send Microsoft Advertising (and Google Ads, if we turn it on) a record that an inquiry happened, with the ad click ID and your email, phone, and name converted to a one-way code (a SHA-256 hash), so they can match it to an ad click. We do not send those details in plain text. This happens on our server and is not controlled by the cookie notice or Do Not Track.

Who we share information with

Service providers that run this site and our services for us: Microsoft Azure (hosting, storage, and email delivery), Anthropic (AI), Google and Microsoft (analytics and ad measurement), IDX Broker (property search), Stripe and Coinbase (payments), and Microsoft Forms (surveys).
The Alliance agent or loan officer your inquiry is sent to.
Anyone we are required to share with by law.

What we never do

Sell your personal information to advertisers or data brokers.
Share your application data outside the scope of your transaction.
Use your information for purposes not described in this policy.
Retain financial documents in unencrypted form.

How we secure data

Data sent to and from this site is encrypted with HTTPS (TLS 1.2 or higher).
Data we store is kept in Microsoft Azure, which encrypts it at rest (AES-256).
API keys and credentials are kept in Azure Key Vault, not in our code.
Access to our systems is limited by role, and we keep security and application logs for 30 to 90 days.

Your rights

Under CCPA (California), GDPR (EU), and similar frameworks, you have the right to:

Access the personal information we hold about you.
Correct any inaccurate information.
Delete your information, except records that federal or state law requires us to keep for loan and real estate files.
Port your data in a machine-readable format.
Opt-out of any marketing communications.

Submit a data request

Email info@alliancerealtyandfinancial.com with subject line "Data Request" and specify access, correction, deletion, or portability. We respond within 30 days.

YouTube

We publish our own short videos on our YouTube channel, Alliance Realty & Financial Services, Inc, using YouTube API Services. Our publishing tool, ARFS Social Autoposter, signs in only to our own channel.

What it accesses: it uploads our videos to our channel, reads the upload status of those videos, and posts a comment on our own videos. It does not access, collect, store, or share any YouTube data about viewers or other YouTube users.
YouTube Terms of Service: when you watch or interact with our videos on YouTube, the YouTube Terms of Service apply.
Google Privacy Policy: how Google handles your data on YouTube is described in the Google Privacy Policy.
Revoking access: access granted to our tool can be revoked at any time on the Google security settings page.
Storage and deletion: the only YouTube credential we keep is the access token for our own channel, stored in Azure Key Vault. It is deleted within 30 days after access is revoked. We hold no YouTube data about you; to ask about any data we may hold, use the data request address above.

Cookies

Essential: our site stores your cookie-notice choice, your accessibility toolbar settings, your Ask Alli conversation for the visit, the ad click ID described above, and, if you sign in to the SYSTEMSs™ Portal, your sign-in session. Property search (IDX Broker) and checkout (Stripe, Coinbase) are provided by those companies and may set their own cookies.

Analytics and advertising: these cookies are set only after you click “Got it” on our cookie notice. To withdraw, clear this site's cookies and site data in your browser settings; the notice will appear again, and these tools stay off until you click “Got it.”

Do Not Track

If your browser sends a Do Not Track signal, the analytics and advertising tools listed above stay off, even if you click “Got it.” Do Not Track does not stop the basic Google tag request or the server-side ad measurement for lead forms described above.

Children

Our services are not directed to individuals under 18 and we do not knowingly collect personal information from children.

Changes

We post material changes here at least 30 days before they take effect. Material changes that affect existing loan files are also sent by email.

Privacy Policy