Privacy Policy

Last updated: May 2026

Peony & Lace ("Peony & Lace," "we," "us," or "our") is a product of Ellis Intelligence LLC, a Colorado limited liability company ("Ellis Intelligence," and the data controller for purposes of this policy). Peony & Lace is a trademark/brand operated by Ellis Intelligence LLC; it is not a separate legal entity.

This Privacy Policy explains what limited personal information we collect through the Peony & Lace website (the "Site") during our pre-launch period, why we collect it, and the choices and rights you have. By using the Site, you agree to the practices described here.

Scope. This policy describes a pre-launch marketing site. At this stage the Site is a stub: it displays information about Peony & Lace and a plain-text contact email address. There is no signup form, no email collection, no user accounts, no payments, no advertising or analytics trackers, and (because fonts are self-hosted) no third-party cookies. See "What Changes at Launch" for the forward-looking scope.

1. The Short Version

  • The Site is a pre-launch page. It does not collect your email address or any other personal information — if you'd like to reach us, you email us directly at an address printed on the page.
  • We do not sell or share personal information, and we do not use it for advertising or behavioral targeting.
  • We do not set advertising or analytics cookies. Fonts and assets are self-hosted, so no third parties receive your information through the Site.
  • Questions or requests: [email protected].

2. Information We Collect

a. Information you give us.

The Site does not run a signup form and does not collect your email address or any other personal information. If you email us directly at the address published on the Site, we receive whatever information you choose to include in that message, handled as any ordinary business correspondence.

b. Information collected automatically (server logs).

Like most websites, the server that hosts the Site may automatically record basic technical information in standard web-server logs, which can include your IP address, browser type / user-agent string, the page requested, and the date and time of the request. This is ordinary operational logging used to run and secure the Site.

c. What we do NOT collect.

We do not knowingly collect payment information, account credentials, government identifiers, precise geolocation, or special-category/sensitive data through the pre-launch Site. We do not use third-party analytics, advertising pixels, or social-media trackers.

3. Cookies and Tracking

The Site does not use advertising or analytics cookies and does not load third-party trackers. Because we self-host fonts and front-end assets, your browser does not request resources from third-party servers as a result of visiting the Site.

4. How We Use Your Information

We use the limited information described above only to:

  • Respond to any email you send us directly;
  • Operate, secure, and troubleshoot the Site (via server logs); and
  • Comply with legal obligations and enforce our Terms.

We do not use your information for advertising, profiling, automated decision-making with legal effects, or sale/sharing to third parties.

5. How We Share Information

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We may disclose information only:

  • to service providers strictly necessary to operate the Site — at present limited to our website hosting provider and the email provider behind the contact address published on the Site. These providers act on our instructions and may not use your information for their own purposes;
  • to comply with law, legal process, or lawful government requests; and
  • in connection with a business transaction (e.g., merger, financing, or acquisition), subject to this policy.

6. Data Retention

The Site itself stores no personal information. Any direct email you send us is retained as ordinary business correspondence for a reasonable period, then deleted. Server logs are retained per our hosting provider's defaults.

7. Security

We use reasonable administrative and technical measures appropriate to the limited, low-sensitivity data associated with the pre-launch Site. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights: access/know, correction, deletion, opt out of sale/sharing and targeted advertising (note: we do none of these), and non-discrimination for exercising your rights.

To exercise any right, email [email protected]. We will verify your request and respond within the timeframe required by applicable law.

California (CCPA/CPRA).

California residents have the rights above. In the past 12 months we have collected only standard server-log identifiers, used solely as described in Section 4. We have not "sold" or "shared" personal information as those terms are defined under the CCPA/CPRA.

Colorado (Colorado Privacy Act / CPA).

Colorado residents have rights of access, correction, deletion, data portability, and to opt out of targeted advertising, sale, and certain profiling (we conduct none of these). You may appeal a declined request by replying to our response; if you have concerns you may contact the Colorado Attorney General.

EU/EEA/UK (GDPR/UK GDPR).

If and to the extent the GDPR applies, our legal basis for handling any direct correspondence you send us is our legitimate interests in responding to you and operating and securing the Site (server logs). You have rights of access, rectification, erasure, restriction, portability, and objection, and may lodge a complaint with your local supervisory authority.

9. Children's Privacy

The Site is intended for adults and is not directed to children, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, take additional steps as required by law.

11. Contact Us

Ellis Intelligence LLC
Attn: Privacy — Peony & Lace

Email: [email protected]

12. What Changes at Launch

At launch, when Peony & Lace moves from a pre-launch stub page to a generally available product, this policy will be expanded to cover user accounts; payments processed by Stripe; customer content/data and how it is processed (Flask + SQLite + local models, and the Anthropic API where used); a current, accurate sub-processor list and a Data Processing Addendum (DPA) for business customers; product analytics (if any); and any additional requirements triggered by going live. Until that update is published, only the pre-launch practices above apply.

Peony & Lace is software, not a wedding-planning service.