PRIVACY POLICY

Last Updated: October 11, 2026

This policy was prepared with AI assistance and is provided for transparency; it is not legal advice. LDNAIVA encourages you to consult qualified legal counsel regarding your privacy rights.

1. INTRODUCTION & SCOPE

LDNAIVA, powered by Lucids Dream Network ("LDNAIVA," "we," "us," or "our"), operates ldnaiva.one, the Client Portal, the Digital Nomad Portal, the Admin Command Center, and related services (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. By using our Services, you agree to the practices described here. If you do not agree, please do not use the Services.

2. INFORMATION WE COLLECT

We collect information you provide directly and information collected automatically:

  • Contact & identity details: first and last name, email address, phone number, date of birth (client registration), business or agency name, business type/niche.
  • Account credentials: usernames and passwords for client, digital nomad, agency, and admin accounts (stored as secure hashes, never in plain text).
  • Profile content: profile and cover photos, bios, skills, location, availability, portfolios, and privacy preferences you set for your public profile.
  • Communications: contact-form messages, consultation requests, support emails, AI chat transcripts with Lucidus Cypheress AI (after you provide your name and email), and live-chat conversations with our team.
  • Reviews & marketplace activity: reviews you submit (name, rating, message, photos), follow/like/share/message interactions, contracts, and hiring or pitching activity between clients and digital nomads.
  • Payment information: billing details processed by our third-party payment processors. We do not store full payment card numbers on our servers.
  • Technical data: IP address, device type, browser type, operating system, pages visited, timestamps, and referring URLs, collected through standard server logs and analytics.

3. HOW WE USE YOUR INFORMATION

  • To provide, operate, and maintain the Services, including portals, dashboards, messaging, voice/video features, and the AI assistant.
  • To process consultations, registrations, contracts, payments, and service delivery.
  • To respond to contact-form submissions, support requests, and live-chat conversations, and to send thank-you and transactional emails from support@ldnaiva.one.
  • To personalize your experience, including AI chat responses drawn from our admin-managed knowledge base.
  • To display reviews you choose to publish, operate the two-way client/nomad marketplace, and facilitate follows, contracts, and unlocked direct messages.
  • To send service-related notices, security alerts, and — where you have consented — marketing communications you can opt out of at any time.
  • To monitor, secure, and improve the Services, generate real analytics for administrators, and comply with legal obligations.

4. HOW WE SHARE & DISCLOSE INFORMATION

We do not sell your personal information. We share it only as follows:

  • With your direction: profile fields you mark public (per your privacy controls) are visible to other users; mutual follows or accepted contracts unlock direct messaging between clients and digital nomads.
  • Service providers & processors: hosting (Spaceship/cPanel infrastructure), payment processors, email/SMTP delivery (mail.ldnaiva.one), and analytics providers, each bound to process data only on our instructions.
  • Legal & safety: when required by law, court order, or to protect the rights, safety, and security of LDNAIVA, our users, or the public.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection of your data.

Posting a website review does not automatically post it to Google; a separate, clearly labeled Google cross-post option opens Google's official review page where you choose what to share.

5. COOKIES & TRACKING TECHNOLOGIES

We use cookies, local storage, and service-worker caching to keep you signed in, remember preferences, enable installable PWA functionality, and understand aggregate usage. Essential cookies (sign-in sessions, security) are required for the Services to work and do not require consent. Non-essential cookies (analytics, performance) are only set after you accept them in our cookie banner. You can change your choice at any time:

You can also control cookies through your browser settings; disabling essential cookies may limit features such as saved logins and offline access.

6. DATA SECURITY

We use administrative, technical, and physical safeguards appropriate to the nature of the data, including TLS/HTTPS encryption in transit, AES-256-GCM authenticated encryption at rest, server-side session authentication with 30-minute idle timeout, bcrypt-hashed credential storage (cost 12), brute-force login protection, security headers, and audit logging of access events. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential and notifying us promptly of unauthorized use.

7. HEALTH INFORMATION & HIPAA

Some of our users are insurance agents and agencies who may store health-related information through the Services. Where protected health information (PHI) is involved, we apply HIPAA-grade safeguards:

  • Encryption: data is encrypted in transit via TLS/HTTPS and at rest using AES-256-GCM authenticated encryption. Passwords are stored as bcrypt hashes (cost 12), never in plain text.
  • Access controls: unique user accounts, role-based access (client, agent, admin, super-dev), automatic sign-out after 30 minutes of inactivity, and brute-force login protection with temporary lockouts.
  • Audit controls: we maintain tamper-evident logs of logins, failed login attempts, data exports, and account deletions.
  • Your rights: you may request access to, amendment of, or an accounting of disclosures of your health information by emailing support@ldnaiva.one with the subject "Privacy Request." We respond within 30 days.
  • Breach notification: in the event of a breach of unsecured PHI, we will notify affected individuals within 60 days as required by law.
  • Business associates: vendors that handle PHI on our behalf operate under written Business Associate Agreements (BAAs).

This policy is a transparency notice, not a HIPAA Notice of Privacy Practices for a covered entity. If you are a covered entity using our Services, contact us to execute a BAA before storing PHI.

8. DATA RETENTION

We retain personal information only as long as necessary to provide the Services, comply with legal and accounting obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated personal data as described in Section 8; some records (for example, transaction or compliance records) may be retained as required by law.

9. YOUR PRIVACY RIGHTS (GDPR, CCPA/CPRA & GLOBAL)

Depending on where you live, you may have the right to:

  • Access & portability: request a copy of the personal information we hold about you.
  • Correction: request correction of inaccurate or incomplete information.
  • Deletion: request deletion of your personal information, subject to legal retention requirements.
  • Restriction & objection: request limits on processing or object to certain uses, including direct marketing.
  • Opt out of sale/sharing: we do not sell personal information; California residents may still submit requests under the CCPA/CPRA and we will honor them.
  • Non-discrimination: we will not discriminate against you for exercising your privacy rights.

To exercise any right, email support@ldnaiva.one with the subject "Privacy Request." We will verify your identity and respond within 30 days (GDPR) or 45 days (CCPA/CPRA) as required by applicable law. Signed-in clients and agents can also download a copy of their data at any time via GET /api/account/export while logged in, or request full account deletion via POST /api/account/delete.

10. CHILDREN'S PRIVACY

The Services are not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact support@ldnaiva.one and we will promptly delete it.

11. INTERNATIONAL DATA TRANSFERS

LDNAIVA operates from the United States and our hosting infrastructure may process data in the US or other countries. By using the Services, you consent to the transfer of your information to countries that may have different data-protection rules than your own. Where required, we use appropriate safeguards for such transfers.

12. CHANGES TO THIS POLICY & HOW TO CONTACT US

We may update this Privacy Policy as our Services evolve; the "Last Updated" date above reflects the most recent revision. Material changes will be announced on the site or by email where appropriate. Continued use of the Services after changes take effect constitutes acceptance. For privacy questions or requests, contact support@ldnaiva.one.