Privacy Policy

Reply Engine ("Reply Engine," "we," "us," or "our") is a product of Ellis Intelligence LLC, a Colorado limited liability company ("Ellis Intelligence," and the data controller for purposes of this policy). Reply Engine is a trademark/brand operated by Ellis Intelligence LLC; it is not a separate legal entity.

This Privacy Policy explains what limited information we collect through the Reply Engine website (the "Site") during our pre-launch period, why we collect it, and the choices and rights you have. By using the Site, you agree to the practices described here.

1. The Short Version

• The Site is a pre-launch page. It does not ask you to submit any personal information — there is no form on the Site.
• We do not sell or share your personal information. We do not use it for advertising or behavioral targeting.
• We do not set advertising or analytics cookies. Fonts and assets are self-hosted, so no third parties receive your information through the Site.
• If you email us, you can ask us to delete that correspondence at any time: [email protected].

2. Information We Collect

a. Information you give us.

The Site has no forms. The only way we receive information directly from you is if you choose to email us — for example at [email protected] — in which case we receive whatever you include in that message.

b. Information collected automatically (server logs).

Like most websites, the server that hosts the Site may automatically record basic technical information in standard web-server logs, which can include your IP address, browser type / user-agent string, the page requested, and the date and time of the request. This is ordinary operational logging used to run and secure the Site.

c. What we do NOT collect.

We do not knowingly collect payment information, account credentials, government identifiers, precise geolocation, or special-category/sensitive data through the pre-launch Site. We do not use third-party analytics, advertising pixels, or social-media trackers.

3. Cookies and Tracking

The Site does not use advertising or analytics cookies and does not load third-party trackers. Because we self-host fonts and front-end assets, your browser does not request resources from third-party servers as a result of visiting the Site.

4. How We Use Your Information

We use the limited information described above only to:

• Respond to any email you choose to send us;
• Operate, secure, and troubleshoot the Site (via server logs); and
• Comply with legal obligations and enforce our Terms.

We do not use your information for advertising, profiling, automated decision-making with legal effects, or sale/sharing to third parties.

5. How We Share Information

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We may disclose information only:

• to service providers strictly necessary to operate the Site — at present this is limited to our website hosting provider and the email service we use to receive correspondence. These providers act on our instructions and are not permitted to use your information for their own purposes;
• to comply with law, legal process, or lawful government requests; and
• in connection with a business transaction (e.g., merger, financing, or acquisition), subject to this policy.

6. Data Retention

We keep any correspondence you send us only as long as reasonably needed to respond and for recordkeeping afterward, then delete or anonymize it. Server logs are retained per our hosting provider's defaults.

7. Security

We use reasonable administrative and technical measures appropriate to the limited, low-sensitivity data we hold. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access / know what we hold about you;
• Correction of inaccurate information;
• Deletion of your information;
• Opt out of sale/sharing and targeted advertising (note: we do none of these); and
• Non-discrimination for exercising your rights.

To exercise any right, email [email protected]. We will verify your request (typically by confirming control of the email address on file) and respond within the timeframe required by applicable law.

California (CCPA/CPRA). California residents have the rights above. In the past 12 months we have not collected personal information through the Site beyond standard server-log identifiers and any correspondence you initiated by email, used solely as described in Section 4. We have not "sold" or "shared" personal information as those terms are defined under the CCPA/CPRA.

Colorado (Colorado Privacy Act / CPA). Colorado residents have rights of access, correction, deletion, data portability, and to opt out of targeted advertising, sale, and certain profiling (we conduct none of these). You may appeal a declined request by replying to our response; if you have concerns you may contact the Colorado Attorney General.

EU/EEA/UK (GDPR/UK GDPR). If and to the extent the GDPR applies, our legal bases are: your consent when you choose to email us (you may withdraw consent at any time), and our legitimate interests in operating and securing the Site (server logs). You have rights of access, rectification, erasure, restriction, portability, and objection, and may lodge a complaint with your local supervisory authority.

9. Children's Privacy

The Site is intended for adults and is not directed to children, and we do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us information, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, take additional steps as required by law. Continued use of the Site after an update constitutes acceptance of the revised policy.

11. Contact Us

12. What Changes at Launch (Forward-Looking)

At launch, this policy will be significantly expanded. When Reply Engine moves from a pre-launch stub to a generally available product, we expect this policy to additionally cover: user accounts (authentication data, profile information); payments processed by Stripe (we do not store full card numbers); customer content/data submitted to the product, and how it is processed by our application (Flask + SQLite + local models, and the Anthropic API where used); a current, accurate list of sub-processors and a Data Processing Addendum (DPA) for business customers; product analytics/telemetry (if any); and any additional state, federal, or international requirements triggered by going live. Until that update is published, only the pre-launch practices above apply.

Disclaimer. Reply Engine produces drafts for review by your security team, not security attestations.