Privacy Policy
Effective Date
Last Updated
1. Introduction
Edgelace LLC ("Edgelace," "we," "our," or "us") respects your privacy. This Privacy Policy explains how we handle information when you visit https://edgelace.com/, create an Edgelace account, purchase or manage a subscription after commerce is activated, or use the Service.
2. Information We Collect
Current coming-soon website
The current coming-soon website does not include an account or active checkout. It includes an early-access waitlist form. The form sends the email address you enter, your selection of the required checkbox consenting to early access updates and occasional product updates, a hidden anti-abuse field, and a short-lived Cloudflare Turnstile verification token. Before storage, we trim the email address and convert it to lowercase. For an accepted signup, we store only the normalized email address, a random signup identifier, a fixed source identifier, the applicable early access update and product update consent versions, the server-recorded product-updates consent time, and server-generated creation and expiration times. A submission that fills the hidden anti-abuse field is discarded. The hidden field value, Turnstile token, and raw request body are processed only long enough to protect and validate the form and are not retained in the waitlist database or application logs.
The waitlist form does not ask for your name, mailing address, phone number, payment information, account credentials, application source code, security findings, or report contents.
Contact and business correspondence
On the coming-soon website, the Support, Investors, Privacy, and legal contact links open your email application rather than submitting a website form. When available, the application Support page also offers a form that sends the name, email address, category, subject, and message you enter through Edgelace's server to our support mailbox. Nothing is sent through a contact link or the application form unless you choose to send it. If you email, call, or use the application form, we receive the information you choose to provide, which may include your email address or calling number, message, attachments, and ordinary communication metadata. A support message is not itself an authenticated account-deletion request. Please do not send passwords, authentication codes, card numbers, target credentials, private source code, security findings, or report contents through these channels.
Account and service information
When accounts and paid subscriptions are activated, we may receive the account name, verified email address, internal account identifier, and information you provide for support. Edgelace may also process authorized target details, assessment status, report metadata, and other service records needed to deliver the software. Canonical report contents are governed by the Service's applicable retention and deletion controls and are not disclosed to the seller handling a purchase.
Subscription and transaction information
When paid checkout is activated, the seller and Merchant of Record identified at checkout collects and processes payment-method details, billing information, location and tax information, and other information needed for the transaction. Edgelace does not receive or store your full card number. We may receive limited commerce records from that seller, including customer, subscription, transaction, product, and price identifiers; the selected plan and billing cadence; subscription and payment status; billing-period and scheduled-change dates; currency and totals; refund, adjustment, or dispute status; and limited contact information needed to match the transaction to your Edgelace account and provide support.
Information processed to deliver and protect the website
Cloudflare processes limited request and device information, such as IP address, browser, and network signals, as needed to deliver and protect the website. The waitlist uses Cloudflare Turnstile to distinguish legitimate submissions from automated abuse. Turnstile may process signals such as the client IP address, TLS fingerprint, user-agent header, site key, and associated origin for bot detection. Edgelace sends the short-lived token to Cloudflare for verification and validates the result, but does not store Turnstile tokens, IP addresses, user agents, hidden anti-abuse field values, or request bodies in the waitlist database. Cloudflare describes its processing in the Turnstile Privacy Addendum.
Local preferences
The website stores your selected light or dark theme under edgelace-coming-soon-theme-v1 until you change it or clear site data. It stores the privacy-choice schema and policy versions, category choices, decision time, and 180-day expiration under edgelace-consent-v1. These values remain in your browser's local storage and are not sent to Edgelace.
3. How We Use Information
We use waitlist information to record and deduplicate your request for early access, maintain evidence of your combined email consent, send early access updates and occasional Edgelace product updates when email delivery is activated, prevent abusive submissions, respond to privacy requests, and enforce the retention limits below. We use the hidden field and Turnstile result only to protect the form from automated abuse.
Joining the waitlist requires one affirmative email-consent choice covering both early access updates and occasional product updates. Product updates are included in the waitlist signup rather than presented as a separate or optional choice. Declining optional browser cookies does not block the waitlist. Once email delivery is activated, messages will include a way to unsubscribe. You may also withdraw the combined waitlist email consent or request deletion by contacting us. Unsubscribing or withdrawing that consent stops both types of waitlist email.
We use correspondence information to answer product, support, investor, privacy, and legal inquiries; verify and complete privacy requests; maintain appropriate business records; and protect our rights and the rights of others.
We also use information to deliver, secure, troubleshoot, and prevent abuse of the Service; authenticate accounts; reconcile subscription state; administer the Starter trial and paid monthly allowance windows; grant or restrict access based on verified transaction records from the identified seller; provide customer support; maintain necessary transaction records; coordinate refunds and disputes; comply with tax, accounting, sanctions, fraud-prevention, and other legal obligations; and enforce our Terms.
4. Service Providers and Storage
The coming-soon website is hosted on Cloudflare Pages. The waitlist record described in Section 2 is stored in a dedicated Cloudflare D1 database that is isolated from Edgelace product and analytics databases. Cloudflare Turnstile provides necessary anti-abuse verification. Cloudflare processes limited request and device information on our behalf subject to its applicable terms and privacy commitments.
We do not currently connect the waitlist to Resend, Flodesk, or another email marketing platform, and no confirmation or marketing email is sent when you submit the form. We also do not currently use Google Analytics, Meta or Facebook Pixel, or another optional analytics or advertising provider on the coming-soon website. If an email provider is activated later, it will receive only the information needed to send the early access updates and occasional product updates covered by the combined waitlist consent and to honor withdrawals or unsubscribes.
When paid checkout is activated, the seller identified before payment will act as Merchant of Record for that transaction. It independently processes transaction information under its own terms and privacy notice to operate checkout, collect payment, calculate and remit applicable taxes, screen for fraud and sanctions risk, issue receipts and invoices, and administer refunds and disputes. Edgelace receives only the limited commerce records described above and uses them to provision and support the Service. That role does not constitute an endorsement, certification, warranty, approval, or guarantee of Edgelace or any report.
The website links to services operated by third parties, including LinkedIn and Instagram. If you follow an external link, the destination service receives your request and handles information under its own privacy terms. Edgelace does not control those third-party services.
5. Cookies, Local Storage, and Privacy Choices
No optional analytics, advertising pixels, or third-party behavioral tracking technologies are active on the coming-soon website. Necessary local storage supports your theme and privacy preferences. Cloudflare Turnstile is necessary anti-abuse infrastructure for the waitlist rather than optional analytics or marketing technology.
The privacy controls let you accept or decline future Analytics and Marketing categories. Both remain disabled by default. If we add a provider or materially change a purpose, we will update this Policy, identify the provider and purpose, and ask for consent again before the optional technology can run.
You can change or withdraw your cookie choices at any time through in the footer. A valid Global Privacy Control signal locks the browser-based Marketing category off. Privacy choices expire after 180 days, after which the website asks again. These browser choices are independent from the required combined email consent shown on the waitlist form. Changing cookie choices does not unsubscribe you from waitlist email. You may withdraw the combined waitlist email consent, unsubscribe when email delivery is activated, or request deletion by contacting us.
6. Retention and Deletion
The theme preference remains until you change it or clear site data. A privacy-choice record expires after 180 days and is removed when the website next reads an expired or invalid value, or when you clear site data. Cloudflare may retain limited delivery and security records according to its applicable retention practices.
Waitlist records are assigned the earliest applicable deletion deadline: a verified deletion request, 18 months after signup, or 90 days after the final launch notification. Expired records are purged at least monthly, so operational deletion occurs during the next scheduled purge. Rejoining with an existing address does not extend the original retention deadline. A later email provider may retain suppression information needed to honor an unsubscribe, but it may not silently restore withdrawn waitlist email consent.
We retain support, investor, privacy, legal, and other business correspondence only for as long as reasonably necessary to respond, manage the relationship or request, maintain appropriate records, protect our rights, and meet legal obligations. The email or telecommunications providers involved may retain related records under their own policies.
When paid service is activated, we retain customer, subscription, transaction, entitlement, refund, adjustment, and dispute records for as long as reasonably necessary to provide the Service, maintain accurate financial and security records, resolve disputes, enforce agreements, and comply with tax, accounting, anti-fraud, and other legal obligations. The seller for each transaction retains information under its own privacy notice and legal obligations. Closing an Edgelace account may not require either party to delete records that must lawfully be retained.
To make a privacy request, contact hello@edgelace.com. We may retain limited information when required by law or necessary to establish, exercise, or defend legal claims.
7. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of Internet transmission or electronic storage is completely secure, so we cannot guarantee absolute security.
8. Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent. You may exercise a relevant right concerning Edgelace's records, including a waitlist deletion or combined email-consent request, by contacting hello@edgelace.com. We may need to verify your identity before completing a request. Requests concerning information the identified seller controls as Merchant of Record may also need to be submitted to that seller under its privacy notice.
We do not sell personal information of our users. We do not share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising an applicable privacy right.
9. International Processing and Changes
Information may be processed in the United States and other locations where we or our service providers operate. Privacy protections in those locations may differ from those in your jurisdiction.
We may update this Privacy Policy as our prelaunch website or legal obligations change. We will post the revised Policy here and update the "Last Updated" date. A new optional provider or materially different purpose will also require a new privacy choice before activation.
10. Contact Us
For privacy questions or requests, contact:
- Edgelace LLC
- 5900 Balcones Drive, Suite 100, Austin, TX 78731, USA
- hello@edgelace.com