Privacy

Effective November 11, 2026. Last updated November 11, 2026.

Ellery Research LLC, a Florida company ("Ellery", "we"), runs a research database of the advisor industry. This page says what we collect about the people who use Ellery, what Ellery holds about the advisors in the public record, and the choices each of them has.

The short version

• We collect what it takes to run your account, and nothing for advertising.
• We do not sell personal information, and we hold no personal contact details for the advisors in the record: no phone numbers and no personal email addresses. For a branch office where only one person is registered, which is often a home, Ellery keeps only the town, the state and, where the public regulatory record lists one, the ZIP code; the street address is removed before the record is stored, and the ZIP code is used only to tell a firm's head office or campus apart from its branches, and is not shown. A branch office shared by two or more people is kept as the public record lists it, street address included.
• The advisor data is professional information that regulators publish, with its source and date.

If you use Ellery

What we collect

• If you write to us through the form on our website: your name, email, firm, topic and message, and our replies and notes, kept until 24 months have passed with no word either way, unless they belong to an open account.
• Account details: your name, work email, company, your role on the account (owner or member), and a password, which we store only as a one-way hash; and, when you start a trial yourself, which of our pages you came from (the page, never anything about you).
• What you save: your saved lists, alerts, settings and keys you create. Keys are stored only as a one-way hash, shown to you once.
• Your agreement to the Terms: when you ticked the box, from which network address and browser, and which version of the Terms of Service and this policy you agreed to.
• Sign-in and security records: when you sign in, from which network address and browser, so we can keep your account safe and spot misuse.
• Billing: our payment processor, Stripe, takes your card. We never see or store the card number; we keep the plan, the status and Stripe's reference to your account.
• Your team: the owners of your company account see each person's name, work email and when they last signed in; other members see names.
• Shared links: a link you share to a page works for a year for anyone who has it, shows only the name and town on that page to someone not signed in, and we count how often it is opened that way.
• AI connections: which tool was called, when, and how long it took; not what you asked. The advisors an answer lists count toward your plan's allowances: a bulk list like a download, any other answer like a screen.
• Usage counts: which advisors (by their public CRD number) your account downloaded or was shown, kept 30 days to count your plan's allowance and the fair-use limit, then deleted.

How we use it

To run the service and your account, send your account's emails (the links to confirm your address and set your password, list alerts, the monthly email unless you switch it off, a notice before a closed account's data is deleted, and a note if you try to sign up with an address that already has an account), send a few short notes about a free trial, while it runs and just after it ends, bill your plan, keep the service secure, answer you when you write to us, and improve Ellery. We do not use it for advertising and we do not sell it. The monthly email and the trial notes can be switched off in Settings, or with the link at the foot of each one.

Who else handles it

Only the companies that help us run Ellery, each for its part: hosting (our server provider, DigitalOcean, and Netlify for the public site, which records your network (IP) address and the pages you request in its server logs), counting website visits (Cloudflare Web Analytics), email delivery (Resend), our own mailboxes (Google Workspace, which holds the messages you send us and our replies) and payments (Stripe). Each may use it only to provide that service to us. We may also disclose information when the law requires it, or to protect Ellery and its users.

Cookies

The app sets one cookie, to keep you signed in. There are no advertising or tracking cookies. To count visits to our website, we use Cloudflare Web Analytics, which sets no cookies and does not track individual visitors (it handles your network address only to process the request, and does not store it): it sees the page, where the visit came from, and the browser, country and device type. The site and app load their typefaces from Google Fonts, which receives your browser's request for them. The app also keeps a few preferences in your browser's own storage (such as the columns you chose for downloads), which never leave it.

How long we keep it

While your account is open. When it closes, we delete your account data and saved lists within 90 days, except records we must keep by law (billing records, for example) and the record of your agreement to the Terms of Service (when, from which network address and browser, and which version), which we keep for five years after the rest of your account data is deleted, to show what was agreed. Separately: sign-in and security records (including the network address a sign-up or an AI connection came from) are kept for up to a year; our web server's request logs (network address, the page requested with any search in its address, browser) are kept for 30 days; a sign-up that is never confirmed is deleted after 30 days; the daily copies of the account database roll off after seven days, and the server's own backups after at most four weeks. To enforce our single free-trial limit and prevent fraud, we permanently retain the domain names of companies that have used a trial, and a one-way scrambled cryptographic hash (which cannot be reversed to reveal the address) of personal email addresses that have used a trial. This data is used solely to block repeat trials.

Your choices

You can see your details and change your password in Settings, and switch off emails there. Ask us to correct your details, for a copy of your data, or to delete it, at privacy@elleryresearch.com. If you live in a state with its own privacy law, such as California, you have the rights it gives you, and we will not treat you differently for using them.

If you are an advisor in the record

Ellery holds and shows the professional information that regulators publish about registered advisors:

• your name, any other names the public record lists for you, and your CRD number;
• the firms you have been registered with and when, and the year you entered the industry;
• your branch office: for an office shared by two or more people, its address as the public record lists it; for an office where you are the only person registered, only its town, its state and, where the public regulatory record lists one, its ZIP code (the street address is removed before the record is stored, and the ZIP code is used only to tell a firm's head office or campus apart from its branches, and is not shown);
• your registrations, the states you are registered in, the qualifying exams you have passed and when, and your professional designations.

A firm's main office is kept as the firm files it with the SEC. Where the firm's filing marks that office as also a residence, Ellery keeps no street for it, only its town, state and ZIP code where the record gives them. Ellery also keeps what the firm reports about itself on Form ADV (its assets, clients, employees, fees, and whether its office is also a residence); for a firm of one, that describes its advisor. All of this comes from the SEC's adviser record and Form ADV, 13F filings, and state registers. Each figure shows its source and date and links to the regulator's own page.

Ellery holds no personal contact details for you (no phone number, no personal email address), keeps no street address for an office where you are the only person registered, and does not sell your information.

• Something is wrong: if the regulator's record is right and Ellery's is not (we read it wrongly, or have not read it again since it changed), tell us at data@elleryresearch.com and we will fix it. Ellery does not change what the public record says: an error in the record itself must be resolved by you with the primary regulatory source (for example, through your firm on Form ADV or directly with the SEC), and Ellery will follow the corrected record at its next read.
• Your rights: where a privacy law gives you rights over this information, write to privacy@elleryresearch.com and we will answer within the time that law sets.

Security

Passwords, keys and sign-in tokens are stored as one-way hashes; connections are encrypted; each company's lists and settings are walled off from every other company's, and Ellery's own staff see them only to run and support the service; and access to the systems that run Ellery is limited to the people who need it. No system is perfectly secure; if something goes wrong that affects you, we will tell you as the law requires.

Children

Ellery is a business service, not meant for anyone under 18, and we do not knowingly collect information from children.

Changes and contact

If we change this page in a way that matters, we will say so in the app or by email before it applies. Questions: privacy@elleryresearch.com. Ellery Research LLC, Florida.