Privacy Policy

Effective Date: March 4, 2026 • Last Updated: March 4, 2026

All Inspections 4U Academy, LLC ("we," "us," or "our") operates the website at allinspections4uacademy.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, create an account, enroll in courses, or register for classes.

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, password (stored as a secure hash — we never store your actual password), and optionally your Florida license number.

Payment Information: When you purchase a course or register for a class, payment is processed by Stripe. We do not store your full credit card number. We retain transaction records including the last four digits of your card, payment amount, and date for your receipt and invoice history.

Course Activity: We track your course progress, lesson completion, assessment scores, and certificate issuance to provide your learning dashboard and CE documentation.

Contact Information: When you submit a contact form, we store your name, email, and message to respond to your inquiry.

Mailing List: If you subscribe to our newsletter, we store your email address and the source of your subscription.

Automatic Information: Our server logs may record your IP address, browser type, and pages visited. We use this only for security monitoring and site performance.

2. How We Use Your Information

• Provide and maintain your account and course access
• Process payments and send transaction receipts
• Issue CE certificates and maintain your learning records
• Send course-related emails (enrollment confirmations, assessment results, certificates)
• Respond to your contact form submissions and support inquiries
• Send newsletter updates if you've subscribed (you can unsubscribe at any time)
• Improve our website, courses, and services
• Comply with legal obligations, including FL DBPR CE reporting requirements

3. Third-Party Services

We use the following third-party services that may receive your information:

• Stripe — Payment processing. Subject to Stripe's Privacy Policy.
• Resend — Transactional email delivery. Subject to Resend's Privacy Policy.
• Cloudflare — Content delivery / proxy (processes request metadata, including IP addresses) and object storage for course media and documents. Subject to Cloudflare's Privacy Policy.
• Railway — Website hosting infrastructure.
• Neon — Database hosting (encrypted at rest and in transit).

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Passwords stored using bcrypt hashing (irreversible)
• JWT-based authentication with token expiration
• Database encryption at rest
• Security headers (HSTS, CSP, X-Frame-Options)
• Rate limiting on authentication endpoints

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Your Rights

You have the right to:

• Access your personal information through your account dashboard
• Update your name, email, and license information
• Deactivate your account yourself at any time from Account Settings — this disables login and stops further use of your data, while preserving the records we are legally required to retain (see Data Retention below)
• Delete your personal data permanently by contacting us — we will erase or anonymize it except where retention is required by law
• Unsubscribe from marketing emails at any time via the link in each email
• Request a copy of your data by emailing us

6. Data Retention

We retain your account and course completion data for as long as your account is active, plus a minimum of 5 years for CE compliance record-keeping as required by Florida DBPR regulations. Payment records are retained for 7 years for tax and accounting purposes. Deactivating your account disables login and stops further use of your data but preserves these legally-required records. You may request permanent deletion, but CE completion and payment records may be retained as required by law.

7. Cookies, Local Storage and Tracking

We do not use advertising, analytics, or session-replay tracking. This site loads no Google Analytics, no tag manager, no advertising pixel, and no session-recording script. We do not track you across other websites, and we have no third-party advertising relationships.

We use the following, all of which are strictly necessary to operate the site:

• Sign-in session (browser local storage). When you sign in, your session token and basic account details (name, email, role) are stored in your browser's local storage so you stay signed in between pages. Signing out, or clearing your browser's site data, removes it.
• Course player preferences (browser local storage). Volume, mute, caption on/off and sidebar state, so the player behaves the way you left it. These never leave your browser.
• Pre-launch access cookie (ti_maintenance). While the site is in its pre-launch state, entering the access code sets one cookie so you are not asked again for 30 days. It contains no personal information and is marked HttpOnly, Secure and SameSite=Lax. It will be removed when the site opens publicly.
• Infrastructure cookies. Cloudflare, which serves and protects this site, may set its own cookies for security and bot management. Stripe sets cookies on its own checkout pages when you make a payment — we do not embed Stripe's scripts on our pages.

Because we set no advertising or analytics cookies, there is no tracking consent banner to accept or reject. If we ever add such technology, we will update this policy and provide a consent mechanism before it is used.

8. Your Choices and Opting Out

• Opt out of marketing email. Every marketing email carries an unsubscribe link, and you may also email us. Opting out is honoured permanently — we keep a record of the opt-out itself so that we do not email you again by mistake.
• Transactional email cannot be opted out of while your account is active. Receipts, certificate delivery, password resets and required notices about your enrollments are part of the service you purchased. Closing your account stops them.
• Browser storage. You can clear site data or block storage in your browser at any time. Doing so signs you out and resets your player preferences; the site will otherwise work normally.
• Do Not Track. We do not track users across sites, so there is no behaviour for a Do Not Track signal to change. We honour it by not tracking at all.

9. State Privacy Rights

Depending on where you live, state law may give you rights over your personal information. We extend the following to every student, regardless of state, rather than asking you to prove where you live:

• Know and access — what we hold about you and why. Your dashboard shows most of it; email us for a complete copy.
• Correct — fix inaccurate details, including your name and licence number. Most of this you can edit yourself in Account Settings.
• Delete — ask us to erase your personal information, subject to the record-keeping exception below.
• Portability — receive your data in a portable format.
• Opt out of sale or sharing — we do not sell or share your personal information, and never have. There is nothing to opt out of.
• No retaliation — exercising any of these rights will never affect your access to courses, your certificates, or the price you pay.

⚠️ The continuing-education exception. We cannot delete a CE completion record on request. These records are the evidence that you earned credit toward your licence, and we are required to keep them as an approved provider — we retain them for five years from completion (see Data Retention above). If you ask us to delete your data, we will remove your account, your marketing preferences and everything not required for that purpose, and reduce the retained CE record to the minimum needed to prove the credit: your name, licence number, course, completion date, hours and certificate number. Payment records are similarly retained for seven years for tax purposes. This exception protects you as much as us — a deleted completion record is a renewal you cannot evidence.

To exercise any of these rights, email us at the address in the Contact section below. We will respond within 45 days. We may need to verify your identity before acting on a request, which we normally do through the email address on your account.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Florida Data Breach Notification

In compliance with the Florida Information Protection Act (F.S. 501.171), we will notify affected Florida residents within 30 days of discovering a breach of their personal information, as required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email and update the "Last Updated" date above. Continued use of the website after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us:

• Email: [email protected]
• Website: allinspections4uacademy.com/contact