Privacy Policy

1. Introduction

NAIAN LLC (“Naian,” “we,” “us”) is committed to protecting your privacy. This Privacy Policy explains what personal information we collect when you visit naianevolve.com or use our services, how we use it, and your rights in relation to it. By using our Site, you agree to the practices described below.

2. Information We Collect

We collect information in the following contexts:

• Contact & inquiry forms , name, email address, company name, and message content when you submit a contact, audit intake, or website design inquiry form.
• Newsletter & lead magnets , email address (and optionally name) when you subscribe to our newsletter or request the SEO checklist download.
• On-site chat widget, name, email address, and conversation transcript if you use our chat widget and choose to engage. Data is only collected after you voluntarily provide it.
• Analytics, anonymized usage data including pages visited, session duration, device type, and referral source via Vercel Analytics and Google Analytics (where active). No personally identifiable information is linked to analytics events.
• Google reCAPTCHA v3 — behavioral signals processed automatically on forms to distinguish human visitors from bots. Subject to Google's Privacy Policy and Terms of Service.

3. How We Use Your Information

• To respond to your inquiries and provide the services you requested.
• To send relevant service communications, project updates, or newsletters, only where you have opted in.
• To assess, triage, and schedule incoming project requests and health check submissions.
• To improve our website and tools through anonymized analytics and usage patterns.
• To protect our forms and infrastructure from automated spam and abuse.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Data Storage & Security

Form submissions and lead data are stored in Supabase (a hosted PostgreSQL service with row-level security) accessible only to authorized Naian personnel. Our website is hosted on Vercel, which provides enterprise-grade infrastructure security including automatic HTTPS/TLS on all connections. We do not store payment card data, any future payment processing will be handled by PCI-compliant third-party providers.

5. Third-Party Services

The following third-party services may process data in connection with your use of our Site:

• Supabase, database and lead storage. Data stored in US-based infrastructure under Supabase's privacy and security policies.
• Google reCAPTCHA v3 — invisible spam protection on all public forms. Governed by Google's Privacy Policy.
• Vercel Analytics — privacy-preserving site analytics. No cookies, no personal identifiers.
• Google Analytics / Google Tag Manager , aggregated traffic analytics, if active in your session. Can be controlled via your browser's cookie settings.
• Cal.com, scheduling platform for discovery calls. Governed by Cal.com's Privacy Policy. We receive only the booking confirmation details you enter during scheduling.
• Resend, transactional and newsletter email delivery. When you submit a form or subscribe to our newsletter, your email address is transmitted to Resend for delivery purposes. Resend processes this data as our service provider under a data processing agreement. No email content is retained by Resend beyond what is necessary for delivery and suppression list management.

6. Cookies & Local Storage

We use browser cookies and localStorage for essential site functionality, including saving your cookie consent preference, chat session continuity, and popup dismissal state. Analytics cookies may be set by Google Analytics if you accepted cookie preferences. For full details, see our Cookie Policy.

7. Data Retention

Contact and lead form submissions are retained for up to 24 months for follow-up and business relationship purposes, after which they are deleted or anonymized. Newsletter subscribers are retained until they unsubscribe. Chat transcripts are retained for up to 12 months for quality and training purposes. You may request deletion of your data at any time by contacting us at the address below.

8. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data, as well as the right to restrict or object to certain processing. To exercise any of these rights, contact us at the email address in Section 12. We will respond within 30 days.

8A. Notice to California Residents (CCPA)

This section provides additional disclosures required under the California Consumer Privacy Act (“CCPA”) for California residents. It supplements the rest of this Privacy Policy.

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers, name, email address, company name, and IP address
• Professional or Employment-Related Information , company name and role, provided voluntarily in forms
• Internet or Electronic Network Activity , pages visited, session duration, referral source, and device type, collected via analytics tools
• Communications Content , message content submitted through contact forms and chat

Sources of Personal Information

• Directly from you, when you fill out a contact, audit intake, newsletter, or website design inquiry form
• Indirectly from you, through automatic data collection as you navigate the Site (analytics, reCAPTCHA)

Business Purposes for Collection

• To respond to your inquiries and fulfill service requests
• To send marketing communications where you have consented
• To maintain the security and integrity of the Site
• To analyze traffic and improve user experience
• To comply with legal obligations and respond to law enforcement requests where required by applicable law

Sale of Personal Information

We do not sell your personal information to third parties, as that term is defined under the CCPA. We may share information with service providers under written contracts that restrict them from using it for any purpose beyond performing services for Naian.

Your CCPA Rights

• Right to Know, you may request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete, you may request deletion of personal information we hold about you, subject to certain exceptions (e.g., legal retention obligations)
• Right to Non-Discrimination , we will not deny you services, charge different prices, or provide a different level of service for exercising your CCPA rights

To submit a verifiable consumer request, email us at the address in Section 12. Only you, or a person authorized by you and registered with the California Secretary of State, may make a request on your behalf. We will respond within 45 days, as required by law.

9. Business Transfers

If NAIAN LLC is involved in a merger, acquisition, asset sale, or similar corporate transaction, user data, including personal information collected through this Site, may be transferred to the acquiring entity as part of that transaction. We will notify affected users by updating this Privacy Policy and, where practicable, by email prior to any such transfer. The acquiring entity will be required to honor the terms of this Privacy Policy or notify you of material changes before any new practices take effect.

10. Children's Privacy

Our services are directed to business owners and professionals. We do not knowingly collect personal information from individuals under the age of 13. If we become aware that a child under 13 has submitted personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be reflected in the “Last updated” date at the top of this page. Continued use of the Site after an update constitutes acceptance of the revised policy.

12. Related Policies

This Privacy Policy covers personal data only. For questions about content ownership, intellectual property, or DMCA takedown requests, see our Copyright Policy. For the full terms governing use of our services, see our Terms of Service.

13. Contact

For privacy questions, requests, or data deletion: hello@naianevolve.com