Legal

Privacy Policy

This Privacy Policy describes how Alliance Permitting collects, uses, discloses, and protects information about you when you visit our website, use our permit expediting platform, or otherwise interact with us.

Effective date: May 6, 2026  · Last updated: May 6, 2026

1.Scope of this Policy

This Privacy Policy applies to Alliance Permitting (“Alliance Permitting,” “we,” “us,” or “our”) and to information we collect through:

• The website at alliancepermitting.com and any related subdomains;
• Our permit expediting platform, including any portal, dashboard, or account login;
• Our contact, quote-request, and demo-request forms;
• Email, telephone, text-message, and other communications with us; and
• Our pages on third-party social networks (LinkedIn, X, Facebook, and Instagram) to the extent permitted by those platforms.

This Policy does not apply to information collected by third-party sites or services we do not own or control, even if you reach them through a link on our website.

2.Information we collect

2.1 Information you provide directly

We collect information you give us when you fill out a form, create an account, request a quote, upload project documents, or communicate with us. This includes:

• Identifiers and contact details — name, business email address, telephone number, mailing or jobsite address, company name, job title.
• Project information — property address, scope of work, project type, drawings, plans, permit applications, contractor license details, proof of ownership, jurisdiction, and any other documents or information you submit to support a permit application.
• Account credentials — username, password (stored in hashed form), and account preferences when you register for our platform.
• Communications — the content of emails, chat messages, voicemails, and other communications you send us, including any attachments.
• Billing information — if you purchase services, billing contact, purchase order details, and tax ID. Payment card details are processed by our payment processor and are not stored on our servers.

2.2 Information collected automatically

When you use our website or platform, we and our service providers automatically collect certain information about your device and how you interact with us, including:

• Device and connection data — IP address, approximate location derived from IP, browser type and version, operating system, device identifiers, screen resolution, and language preference.
• Usage data — pages and features viewed, links clicked, referring URL, time stamps, session duration, and similar interaction data.
• Log data — server logs, error reports, and diagnostic data needed to operate and secure the service.

We collect this information using cookies, pixels, software development kits, and similar technologies. See Cookies and tracking for details and choices.

2.3 Information from third parties

We may receive information about you from third parties, such as:

• Municipal and government permitting offices, where information is exchanged as part of an application or appeal we manage on your behalf;
• Business partners or referrers who provide your contact information so we can follow up about a project;
• Analytics, advertising, and marketing providers that help us understand traffic and improve outreach; and
• Publicly available sources, including business directories and licensed databases.

3.How we use information

We use the information described above for the following business purposes:

• Provide our services — research jurisdiction requirements, prepare and submit permit applications, coordinate plan review and inspections, communicate with permitting authorities on your behalf, and otherwise perform the services you request.
• Operate our platform — authenticate users, host project files, deliver status updates, generate reports, and provide customer support.
• Communicate with you — respond to inquiries, send service-related notices (transactional), share project updates, and follow up on quotes or demos.
• Marketing and outreach — send newsletters, product updates, case studies, and promotional materials. You can opt out of marketing emails at any time using the unsubscribe link or by contacting us.
• Improve and develop — analyze usage, conduct research, evaluate AI model performance on permitting workflows, fix bugs, and develop new features. We use de-identified or aggregated data wherever practical.
• Security and fraud prevention — detect and prevent unauthorized access, abuse, or violations of our terms.
• Legal and compliance — comply with applicable laws, respond to lawful requests, enforce our agreements, and protect our rights, property, or safety, and that of our customers and the public.

4.How we share information

We do not sell personal information for money. We share information in the following circumstances:

• Permitting authorities — to perform the services you engage us for, we submit applications, plans, and supporting documents to the relevant city, county, state, or other jurisdiction. Information you submit through our platform is shared with these authorities as needed for your project.
• Service providers — vendors that perform services on our behalf, such as cloud hosting, document storage, customer-relationship management, email delivery, analytics, payment processing, e-signature, identity verification, and customer support. These providers are bound by contract to use the information only to provide their service to us.
• Professional advisors — attorneys, accountants, auditors, and insurers, where reasonably necessary.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, in which case personal information may be transferred to the successor entity, subject to commitments consistent with this Policy.
• Legal obligations and protection — when we believe disclosure is required by law, subpoena, court order, or other legal process, or is necessary to protect the rights, property, or safety of Alliance Permitting, our customers, or others, or to investigate fraud or violations of our terms.
• With your consent — for any other purpose disclosed at the time of collection or with your direction.
• Aggregated or de-identified data — we may share data that has been aggregated or de-identified so that it cannot reasonably be used to identify you.

Some of the disclosures above may be considered “sharing” or a “sale” under certain U.S. state privacy laws. See California-specific disclosures and Other U.S. state rights for how to opt out.

5.Cookies and tracking technologies

We use cookies and similar technologies to operate our site, remember your preferences, measure performance, and support marketing. The categories we use include:

Your choices. Most browsers let you refuse or delete cookies through their settings. You can also opt out of certain analytics and advertising cookies through industry tools such as the DAA WebChoices tool and the NAI opt-out. If we display a cookie banner in your region, you can manage your preferences there.

Global Privacy Control. We recognize the Global Privacy Control (“GPC”) signal as an opt-out of the “sale” or “sharing” of personal information for residents of states that require it. When we detect a GPC signal from your browser, we treat it as a request to opt out for that browser and device.

Do Not Track. Our site does not respond differently to “Do Not Track” browser signals beyond honoring GPC as described above, because no common standard for DNT has been finalized.

6.Data retention

We keep personal information for as long as necessary to provide our services and to satisfy the purposes described in this Policy, including to comply with our legal, accounting, and reporting obligations and to enforce our agreements. Specific factors we consider include the nature of the information, the duration of our relationship with you, the existence of a permit project, and applicable retention or limitations periods.

When we no longer need personal information, we delete or de-identify it. Backups and archive copies may persist for a limited additional period before being overwritten.

7.Data security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit, access controls, logging, and employee training. No method of transmission over the internet or method of electronic storage is 100% secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account password confidential and for promptly notifying us of any suspected unauthorized use of your account.

8.Your privacy rights

Subject to applicable law and verification of your identity, you may have the right to:

• Access the personal information we hold about you and request a copy in a portable format;
• Correct inaccurate or incomplete personal information;
• Delete personal information we hold about you, subject to certain exceptions;
• Opt out of the “sale” or “sharing” of personal information and of targeted advertising;
• Limit the use of certain sensitive personal information;
• Withdraw consent where processing is based on consent;
• Appeal a decision we make about your request, where state law provides that right; and
• Be free from retaliation for exercising any of these rights.

To exercise any of these rights, contact us using the information in How to contact us. We will verify your request using information already in our possession, and we may ask for additional information if needed. An authorized agent may submit a request on your behalf with proof of authorization. We will respond within the timeframe required by applicable law (typically 45 days, with a possible extension).

9.California-specific disclosures

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), gives you the rights described in Section 8. The categories of personal information we have collected, used, and disclosed in the past 12 months are summarized below.

Sources include you, your devices, our service providers, permitting authorities, and public sources.

“Sale” and “sharing.” We do not sell personal information for money. The use of certain advertising and analytics cookies on our website may be considered “sharing” of personal information for cross-context behavioral advertising under the CCPA/CPRA. To opt out, use our “Do Not Sell or Share My Personal Information” mechanism (linked in the website footer), enable a Global Privacy Control signal in your browser, or contact us using the details in Section 16.

Shine the Light. California Civil Code §1798.83 permits California residents to request information about disclosures of personal information to third parties for direct-marketing purposes. To make such a request, contact us at the address below.

10.Other U.S. state rights

Residents of other U.S. states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Indiana, and others — may have rights similar to those described in Section 8, including the right to access, correct, delete, port, and opt out of targeted advertising, the sale of personal data, and certain profiling. Where required, we will honor appeal requests if we deny your initial request.

To exercise these rights, contact us using the information in How to contact us.

11.EEA, UK, and Swiss residents

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation, the UK GDPR, or the Swiss Federal Act on Data Protection may apply. Our lawful bases for processing include performance of a contract (to deliver the services you request), legitimate interests (to operate, secure, and improve our business in a way that is not overridden by your rights), compliance with a legal obligation, and your consent (for example, for certain marketing communications).

You have the right to access, rectify, delete, restrict, and port your personal data, to object to certain processing, and to withdraw consent. You may also lodge a complaint with your local data protection authority. We do not have an EU establishment; cross-border transfers, where they occur, are made under appropriate safeguards such as the Standard Contractual Clauses.

12.SMS / text messaging

If you provide your mobile number and consent to receive text messages from us, message and data rates may apply, and message frequency varies. You can reply STOP at any time to opt out, or HELP for assistance. We do not share mobile opt-in data or consent with third parties for their own marketing purposes.

13.Children's privacy

Our website and platform are not directed to children, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us so we can delete it.

14.Third-party links and services

Our site may contain links to third-party websites, plug-ins, and applications, including social-media platforms. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party sites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every site you visit.

15.Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice (such as a banner on our website or an email to registered users). Your continued use of our website or services after the updated Policy takes effect constitutes acceptance of the changes.

16.How to contact us

If you have questions about this Policy, want to exercise your privacy rights, or wish to make a complaint, please contact us:

If we cannot resolve your concern, you may contact the data protection authority in your jurisdiction (for U.S. residents, your state attorney general; for EEA residents, your local supervisory authority).