Lamaute Labs LLC
Privacy Policy
Elysium UI Framework, Elysium Designer, elysiumui.com
Last updated: July 3, 2026.
This Privacy Policy explains how Lamaute Labs LLC (“Lamaute Labs,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information when you use the Elysium UI website, documentation, downloads, open-source framework, Elysium Designer software, license-related services, support channels, and related services that link to this Privacy Policy (collectively, the “Services”).
Plain-English Summary
- We collect the information needed to operate the site, provide downloads and documentation, respond to support requests, manage Elysium Designer trials and licenses, keep the Services secure, and comply with law.
- The Elysium UI open-source framework is designed to run in your own development environment or application. Using the framework by itself does not make Lamaute Labs the controller of data collected by applications you build with it.
- We do not intentionally collect payment card numbers directly. Purchases, license delivery, and payment processing may be handled by PyLocket and its payment providers under their own policies.
- We use privacy-respecting analytics for the website, including Cloudflare Web Analytics, and we do not use the Services for behavioral advertising, targeted advertising, or cross-site tracking unless this Policy is updated to disclose that practice.
- We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are used in U.S. privacy laws.
- We do not require sensitive personal information to use Elysium UI, and we ask that you not send us sensitive information unless specifically requested for a lawful and necessary purpose.
- You can contact us at support@elysiumui.com to ask privacy questions, request access, deletion, correction, opt-out, or appeal a privacy-rights decision where applicable law gives you those rights.
1. Who We Are and How to Contact Us
Controller / business: Lamaute Labs LLC
Website: https://www.elysiumui.com/
Email: support@elysiumui.com
Mailing address: 704 228th Ave NE, #1154, Sammamish, WA 98074
For privacy requests, please use the contact methods above and include enough information for us to understand and verify your request. Please do not include passwords, payment card numbers, government identifiers, or sensitive information in ordinary support emails.
2. Scope of This Policy
This Policy applies to information we collect through or in connection with:
- elysiumui.com and pages that link to this Policy, including marketing pages, documentation, download pages, contact forms, and support pages;
- the Elysium UI open-source framework, but only to the extent you interact with Lamaute Labs, such as by visiting our website, downloading from our site, submitting issues or support requests, signing up for updates, or participating in official communities that we operate;
- Elysium Designer trials, license delivery, activation, update checks, purchase-related records, and support interactions;
- emails, chats, forms, surveys, promotions, newsletters, and other communications with us that relate to the Services; and
- security, fraud-prevention, compliance, accounting, and operational records associated with the Services.
This Policy does not apply to third-party websites, repositories, package registries, payment processors, app stores, forums, cloud providers, or services that we do not control, even if they link to or from our Services. Examples may include GitHub, PyPI or other package registries, Cloudflare, PyLocket, payment processors, email providers, and other third-party tools. Those third parties process information under their own privacy policies.
Developers who use Elysium UI to build their own applications are responsible for the privacy practices, legal notices, consent flows, security, and data processing of their own applications. Lamaute Labs is not the controller or processor of personal information collected by applications that third-party developers build with the Elysium UI framework unless a separate written agreement says otherwise.
3. Definitions
"Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. Similar terms such as "personal data" have the meanings given by applicable law.
"Framework" means the open-source Elysium UI framework and related open-source code distributed under its applicable open-source license.
"Designer" means Elysium Designer, commercial or trial software, installers, license tools, and related desktop components made available by or for Lamaute Labs.
"Services" means the website, documentation, downloads, Framework-related interactions with Lamaute Labs, Designer-related services, license services, support, and related offerings that link to this Policy.
4. Information We Collect
The categories below describe the types of information we may collect. We may not collect every category from every person. The information collected depends on how you interact with the Services, what features you use, and what information you choose to provide.
| Category | Examples | Sources |
|---|---|---|
| Contact identifiers | Name, email address, company or project name, job title, mailing address, phone number if you choose to provide it. | From you when you contact us, sign up, request support, join a waitlist, request a trial, purchase, or subscribe to updates. |
| Account, license, and transaction records | License key, license status, product purchased, trial status, activation records, support entitlement, subscription or renewal status, order ID, invoice metadata, refund or chargeback metadata. | From you, PyLocket, payment processors, app stores, or other vendors involved in purchases, trials, license delivery, and support. |
| Payment information | Limited payment metadata, such as payment status, last four digits, card brand, billing country, tax data, and transaction identifiers when made available by processors. We do not intentionally collect or store full payment card numbers directly. | From payment processors or commerce providers, not directly from full card entry fields controlled by us. |
| Website and analytics information | Pages viewed, referring page, browser type, operating system, approximate location from IP address, device type, performance metrics, timestamps, clickstream events, search queries on the website, and similar usage data. | Automatically from your browser or device when you visit the website or documentation. |
| Device and activation information | Device type, operating system, app version, installer version, license activation timestamp, activation status, error codes, approximate region, IP address, and hashed or pseudonymous device/license identifiers used to prevent abuse and enforce license limits. | From Designer, installers, license services, PyLocket, or related activation/update systems. |
| Support and communications | Messages, attachments, screenshots, bug reports, crash details, logs, diagnostic files, survey responses, feedback, and related correspondence you send us. | From you when you email, message, submit issues, complete surveys, or request support. |
| Developer/community information | Public issue comments, pull requests, repository activity, usernames, profile information, and community messages if you interact with official public repositories or communities. | From you and third-party platforms such as GitHub or community tools. |
| Security and fraud-prevention information | IP address, request metadata, abuse signals, login or activation attempt data, suspicious activity indicators, blocked requests, and other information needed to protect the Services. | Automatically from our systems, Cloudflare, PyLocket, payment processors, hosting providers, and security tools. |
| Business, legal, and compliance records | Tax records, accounting records, rights-request records, legal correspondence, consent records, and compliance documentation. | From you, vendors, authorities, advisors, and our internal records. |
5. Information We Do Not Seek to Collect
We do not require sensitive personal information to use the Elysium UI website, Framework, or Designer. Please do not send us sensitive information unless we specifically ask for it and it is necessary for a support, legal, or compliance purpose. Sensitive information may include government identifiers, precise financial account numbers, health information, biometric information, race or ethnicity, religion, union membership, genetic data, precise geolocation, sexual orientation, children’s information, passwords, secrets, private keys, production credentials, or regulated customer data.
If you include sensitive information in a support message, log, screenshot, crash report, or sample project, we may process it only as necessary to respond to your request, protect the Services, comply with law, or delete or restrict it. You are responsible for removing secrets, credentials, tokens, private customer data, and confidential information from files you submit to us.
6. Website Analytics, Cookies, and Similar Technologies
We may use cookies, local storage, server logs, pixels, beacons, or similar technologies for security, functionality, preferences, license flow continuity, fraud prevention, performance measurement, and analytics. We do not currently use advertising cookies or cross-site behavioral advertising technologies on the Services unless this Policy is updated to disclose that practice.
Cloudflare Web Analytics. The website may use Cloudflare Web Analytics or related Cloudflare analytics features to understand performance, page views, and aggregate usage. Cloudflare Web Analytics is intended to collect limited performance and page-view information and not track individual users across customer websites.
Browser controls. You can set your browser to refuse or delete cookies. Some security, checkout, licensing, account, support, or preference features may not work correctly if cookies or similar technologies are disabled.
Do Not Track. Some browsers offer "Do Not Track" signals. Because there is no uniform industry standard for responding to them, we do not respond to all such signals. Where legally required, we will honor recognized opt-out preference signals, such as Global Privacy Control, for sale, sharing, or targeted advertising. Because we do not currently sell personal information or share it for cross-context behavioral advertising, such signals generally do not change our current data practices.
7. How We Use Personal Information
We use Personal Information for the following purposes:
- Provide, operate, maintain, secure, and improve the Services;
- Host the website, documentation, download pages, support pages, and related infrastructure;
- Deliver, activate, manage, enforce, renew, troubleshoot, and support Elysium Designer trials and licenses;
- Process purchases, refunds, tax records, account records, and license delivery through PyLocket, payment processors, and other service providers;
- Respond to support requests, bug reports, security reports, questions, feedback, and other communications;
- Send transactional messages, such as license delivery, receipts, product updates, security notices, support responses, and service announcements;
- Send marketing communications, newsletters, promotions, or surveys where permitted by law and subject to your opt-out choices;
- Analyze aggregate usage, performance, errors, feature demand, and website traffic so we can improve the Services;
- Detect, prevent, investigate, and respond to fraud, abuse, security incidents, spam, license abuse, unauthorized access, and illegal activity;
- Debug, test, develop, and improve Elysium UI products, documentation, support workflows, and business operations;
- Comply with legal, tax, accounting, export-control, sanctions, regulatory, and contractual obligations;
- Enforce agreements, terms, licenses, policies, and legal rights; and
- Evaluate or complete a merger, acquisition, financing, corporate reorganization, sale of assets, bankruptcy, or similar business transaction.
8. Legal Bases for Processing
Where GDPR, UK GDPR, Swiss law, or similar law requires a legal basis for processing, we rely on one or more of the following legal bases:
| Legal basis | Examples |
|---|---|
| Contract | To provide trials, licenses, downloads, support, purchases, updates, and requested Services. |
| Legitimate interests | To operate and improve the Services; secure the Services; prevent fraud and license abuse; respond to support; understand aggregate usage; manage business operations; and protect legal rights, except where overridden by your rights and interests. |
| Consent | For optional marketing, certain cookies or analytics where required, optional surveys, or other processing for which we ask consent. You may withdraw consent where applicable. |
| Legal obligation | For taxes, accounting, export controls, sanctions, lawful requests, rights requests, and other legal compliance. |
| Vital interests or public interest | Rarely, where necessary to protect someone’s life, safety, or public interests recognized by law. |
9. How We Share Personal Information
We do not sell Personal Information. We also do not share Personal Information for cross-context behavioral advertising or process it for targeted advertising unless this Policy is updated and you are given any required rights and choices.
We may disclose Personal Information to the following categories of recipients for the purposes described in this Policy:
| Recipient category | Purpose / examples |
|---|---|
| Service providers and processors | Hosting, Cloudflare, security, analytics, email, customer support, documentation, forms, storage, logging, diagnostics, monitoring, and other vendors that help us operate the Services. |
| PyLocket and license-related vendors | Trial management, checkout flow, license delivery, license activation, app protection, update delivery, installer services, purchase records, and customer support workflows. |
| Payment processors and commerce providers | Payment authorization, fraud checks, refunds, receipts, tax calculation, chargebacks, invoicing, and subscription or renewal management. |
| Repository, package, and community platforms | GitHub, PyPI or other package registries, forums, issue trackers, and community tools when you choose to interact with them. |
| Professional advisors | Lawyers, accountants, auditors, insurers, banks, consultants, and other professional advisors. |
| Authorities and legal recipients | Courts, law enforcement, regulators, government agencies, counterparties, or others when we believe disclosure is required or appropriate to comply with law, legal process, or protect rights, safety, and security. |
| Business transaction parties | Potential or actual buyers, investors, lenders, successors, affiliates, or advisors in connection with a merger, acquisition, financing, sale of assets, restructuring, bankruptcy, or similar transaction. |
| With your direction or consent | Recipients you ask us to share with or authorize, such as when you request an integration, public testimonial, referral, or support handoff. |
When we use service providers, we seek to limit their access to information reasonably necessary to provide services to us and require appropriate confidentiality, security, and data-use restrictions where required by law.
10. Payments, Trials, Licenses, and PyLocket
Elysium Designer trials, purchases, license delivery, license activation, and related workflows may be processed by PyLocket and its payment providers. PyLocket and payment providers may collect information needed to process checkout, deliver licenses, prevent fraud, comply with tax and accounting rules, and provide support. They may provide Lamaute Labs with order, license, customer, support, payment-status, and transaction metadata, but Lamaute Labs does not intentionally receive or store full payment card numbers.
License activation and update checks may involve sending license identifiers, activation status, software version, operating system, approximate region, IP address, error codes, and hashed or pseudonymous device identifiers to verify entitlement, enforce license terms, prevent abuse, deliver updates, and troubleshoot issues. If offline activation or manual support is available, the process may require you to send activation or diagnostic information to us or to PyLocket.
11. Open-Source Framework, Developer Projects, and End Users
The Elysium UI Framework is open-source software. Downloading or using the Framework from a third-party package registry, repository, CDN, or mirror may cause that third party to collect information under its own privacy policy. We do not control those third-party platforms.
The Framework is not intended to transmit information about your application’s end users to Lamaute Labs by default. If you build an application using Elysium UI, you are responsible for what your application collects, stores, transmits, or shares. You must provide your own privacy notices, obtain required consents, secure your application, and comply with laws applicable to your use case, customers, users, and jurisdictions.
If you submit code, issues, pull requests, examples, screenshots, crash logs, telemetry, or sample projects to us or to an official public repository, do not include confidential information, secrets, credentials, proprietary customer data, or sensitive personal information unless specifically requested through an appropriate secure channel.
12. Elysium Designer Data Practices
Elysium Designer may process files, designs, components, configuration, code, assets, and project data locally on your device. We do not intentionally collect your local project files through Designer unless you choose to submit them to us for support, upload them through a feature, or use an integration that sends them to a third-party service. If future versions add optional cloud sync, collaboration, telemetry, crash reporting, AI-assisted design, or online project storage, we will provide additional disclosures and choices where required by law.
Designer may contact online services to activate licenses, check license status, deliver updates, verify entitlement, prevent abuse, show announcements, access documentation, or provide support. These interactions may collect device, software, license, and network metadata as described in this Policy.
13. Marketing Communications
If you sign up for newsletters, product updates, waitlists, promotions, or similar communications, we may use your contact information to send those messages. You may unsubscribe from marketing emails by using the unsubscribe link, replying with an unsubscribe request where supported, or contacting support@elysiumui.com. Even if you opt out of marketing, we may still send transactional or service messages, such as license delivery, security notices, support responses, legal notices, and account or purchase-related communications.
14. Data Retention
We keep Personal Information only as long as reasonably necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law. Retention periods depend on the type of information, the sensitivity of the information, our operational needs, legal requirements, security needs, and whether deletion is technically feasible.
| Information type | Retention approach |
|---|---|
| Website analytics and logs | Typically retained in aggregate or log form for the period needed for analytics, security, debugging, and operations, unless needed longer for security, legal, or abuse investigations. |
| Support communications | Retained while a request is active and for a reasonable period afterward to maintain records, improve support, resolve disputes, and comply with legal obligations. |
| Trial, license, transaction, tax, and accounting records | Retained as needed to provide licenses and support, prove entitlement, prevent fraud, comply with accounting and tax obligations, enforce agreements, and resolve disputes. |
| Marketing records | Retained until you unsubscribe or we no longer need the information, subject to suppression lists needed to honor opt-outs. |
| Rights requests and compliance records | Retained as needed to document our response, verify identity, prevent fraud, and comply with applicable privacy laws. |
| Security and fraud records | Retained as needed to protect the Services, investigate abuse, maintain blocklists, and comply with legal obligations. |
When information is no longer needed, we may delete it, de-identify it, aggregate it, or retain it in backup or archival systems until those systems are overwritten or retired according to ordinary backup cycles. We may retain de-identified or aggregated information for lawful business purposes.
15. Security
We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, and destruction. These safeguards may include access controls, encryption in transit, vendor controls, security monitoring, logging, least-privilege practices, and other measures appropriate to the nature of the information and our business.
No security measure is perfect. We cannot guarantee that information will be secure, private, available, error-free, or immune from unauthorized access, loss, misuse, or disclosure. You can help protect information by using strong passwords, keeping software updated, securing your devices, avoiding credential reuse, removing secrets from support files, and contacting us if you believe your information or license credentials have been compromised.
16. International Data Processing and Transfers
Lamaute Labs is based in the United States. We may process and store information in the United States and other countries where we or our service providers operate. These countries may have privacy laws that differ from the laws in your location. Where required by law, we rely on appropriate safeguards for international transfers, such as standard contractual clauses, adequacy decisions, data processing agreements, or other lawful transfer mechanisms.
17. Your Choices and Privacy Rights
Depending on your location and applicable law, you may have some or all of the following rights with respect to Personal Information:
- Access / know: request confirmation of whether we process your information and access to certain information we hold about you;
- Portability: receive a copy of certain information in a portable format;
- Correction: ask us to correct inaccurate information;
- Deletion: ask us to delete information, subject to legal exceptions;
- Opt out: opt out of sale, sharing for cross-context behavioral advertising, targeted advertising, certain profiling, or marketing where applicable;
- Restriction or objection: restrict or object to certain processing where applicable;
- Limit sensitive information: limit certain uses of sensitive personal information where applicable;
- Withdraw consent: withdraw consent where processing is based on consent;
- Appeal: appeal a decision we make about a privacy-rights request where applicable; and
- Non-discrimination: not be discriminated against for exercising privacy rights.
To exercise a right, contact support@elysiumui.com or write to 704 228th Ave NE, #1154, Sammamish, WA 98074. We may ask you to verify your identity and authority before fulfilling a request. If you submit a request through an authorized agent, we may require proof of authorization and may still ask you to verify your identity directly where permitted by law.
We will respond within the time required by applicable law. If we deny your request in whole or in part, we will explain the reason where required and provide appeal instructions where applicable. Some information may be exempt from access, correction, deletion, or portability, such as information needed for security, fraud prevention, legal compliance, accounting, tax records, product support, dispute resolution, or exercising legal rights.
18. U.S. State Privacy Notice
This section supplements the rest of the Policy for residents of U.S. states with comprehensive privacy laws that apply to our processing. These laws may include, as applicable, laws in California, Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states that adopt similar laws. Some laws apply only if a business meets revenue, data-volume, sale, or targeting thresholds. If a particular state law does not apply to us or to your request, we may still respond voluntarily when practical.
Our disclosures for the last 12 months are summarized below. "Disclosed" means shared with service providers, processors, vendors, or other recipients for business purposes. It does not mean sold.
| Category | Examples collected | Business-purpose disclosure / sale-sharing status |
|---|---|---|
| Identifiers | Name, email, mailing address, account/license ID, order ID, IP address, device/license identifiers. | Yes, to service providers, processors, PyLocket, payment processors, support, security, legal, and business transaction recipients. Not sold or shared for cross-context behavioral advertising. |
| Customer records / commercial information | Purchases, products, licenses, trial status, receipts, payment status, refunds, subscription or renewal records. | Yes, to service providers, PyLocket, payment processors, accounting, tax, support, legal, and business transaction recipients. Not sold or shared for cross-context behavioral advertising. |
| Internet or electronic network activity | Website visits, pages viewed, referring pages, browser, OS, timestamps, clickstream, logs, Cloudflare analytics, security events. | Yes, to hosting, analytics, security, infrastructure, and support providers. Not sold or shared for cross-context behavioral advertising. |
| Approximate geolocation | Approximate region or country inferred from IP address. | Yes, to hosting, security, analytics, license, payment, tax, and fraud-prevention providers. Not sold or shared for cross-context behavioral advertising. |
| Audio, electronic, visual, or similar information | Emails, support messages, screenshots, attachments, logs, bug reports, and recordings only if you provide or authorize them. | Yes, to support, storage, email, security, and legal providers as needed. Not sold or shared for cross-context behavioral advertising. |
| Professional or employment-related information | Company, role, project, repository profile, or business contact information if you provide it. | Yes, to service providers and business contacts as needed for support, sales, and operations. Not sold or shared for cross-context behavioral advertising. |
| Inferences | We may infer product interest or support needs from your interactions, but we do not build behavioral advertising profiles. | Limited disclosure to service providers for operations, support, and product improvement. Not sold or shared for cross-context behavioral advertising. |
| Sensitive personal information | We do not seek or require sensitive personal information. We may receive it only if you choose to submit it, such as in logs or support attachments. | Used only as necessary for the purpose provided, security, legal compliance, or deletion/restriction. We do not use sensitive information to infer characteristics. |
We do not knowingly sell or share personal information of consumers under 16 years of age. We do not process Personal Information for targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects.
California "Shine the Light." California Civil Code Section 1798.83 permits California residents to request certain information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes without your consent. California residents may submit requests using the contact information in this Policy.
Nevada privacy rights. Nevada residents may submit a request directing us not to make certain sales of covered information as defined by Nevada law. We do not currently sell covered information as defined by Nevada law, but you may submit a request using the contact information in this Policy.
19. EEA, UK, and Swiss Privacy Notice
If you are in the European Economic Area, United Kingdom, or Switzerland and the GDPR, UK GDPR, Swiss Federal Act on Data Protection, or analogous law applies, the following additional terms apply.
Controller: Lamaute Labs LLC is the controller for Personal Information we collect for our own purposes through the Services, unless a separate agreement says otherwise.
Representative: We do not currently maintain an establishment in the EEA or UK. If we are required to appoint an EU or UK representative, we will update this Policy.
Data Protection Officer: We have determined that we are not required to appoint a Data Protection Officer. Privacy inquiries may be sent to support@elysiumui.com.
Rights: You may have rights to access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and to lodge a complaint with a supervisory authority.
International transfers: Information may be transferred to the United States and other countries. Where required, we rely on lawful transfer safeguards.
Automated decision-making: We do not make decisions based solely on automated processing that produce legal or similarly significant effects. License systems may automatically allow, deny, or limit access based on license status, trial status, fraud signals, or technical entitlement checks, but these decisions relate to product access and can be reviewed by contacting support.
20. Children’s Privacy
The Services are not directed to children under 13, and we do not knowingly collect Personal Information from children under 13. If you believe a child under 13 has provided Personal Information to us, contact support@elysiumui.com and we will take reasonable steps to delete it. If a higher age threshold applies in your location, we will comply with applicable law.
21. Third-Party Links, Integrations, and Repositories
The Services may link to third-party websites, repositories, package registries, documentation sites, community spaces, checkout pages, payment providers, app stores, issue trackers, social media, or other services. We are not responsible for the privacy, security, content, or practices of third parties. Your use of those services is governed by their policies and terms. You should review those policies before providing information to third parties.
22. De-identified and Aggregated Information
We may use information that has been de-identified, anonymized, or aggregated for analytics, research, product improvement, security, benchmarking, and business purposes. We will not attempt to re-identify de-identified information except as permitted by law, such as to test whether de-identification measures are effective.
23. AI, Machine Learning, and Model Training
We do not use your Personal Information, private project files, license records, or support attachments to train public artificial intelligence models. If we use AI-assisted tools for support, development, abuse detection, analytics, or internal productivity, we will seek to use them in a manner consistent with this Policy, applicable law, and appropriate confidentiality and security obligations. If a future product feature uses your data for AI-assisted design, cloud processing, model training, or personalization beyond ordinary service operation, we will provide additional disclosures and choices where required by law.
24. Security Research and Vulnerability Reports
If you report a vulnerability, abuse issue, or security concern, we may use the information you provide to investigate, reproduce, remediate, document, and communicate about the issue. Please do not access, exfiltrate, alter, or disclose data that does not belong to you. Submit only the information reasonably necessary to verify the issue, and avoid including personal or confidential information unrelated to the report.
25. Business Transfers
If Lamaute Labs is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, Personal Information may be disclosed to transaction participants and transferred as part of that transaction. We will use reasonable efforts to require the recipient to handle Personal Information consistently with this Policy or provide notice where required by law.
26. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will update the "Last updated" date and provide notice where required by law, such as by posting the updated Policy on the website, sending a notice, or presenting an in-product notice. Your continued use of the Services after an updated Policy becomes effective means the updated Policy applies to information collected after the effective date, subject to applicable law.
27. Contact
For privacy questions, requests, or appeals, contact:
Lamaute Labs LLC
704 228th Ave NE, #1154, Sammamish, WA 98074
support@elysiumui.com