Global Privacy Policy

Continuous LLC (cntnus) · Effective Date: October 2026 · Version: 2026.10

Continuous LLC ("cntnus," "we," "us," or "our") respects your privacy and engineers our applications around data minimization, tenant isolation, and cryptographic security. This Privacy Policy explains how we collect, use, disclose, and safeguard information across all *.cntnus.app websites, applications, and APIs.

1. Our Role: Data Controller vs. Data Processor

• cntnus as Data Controller: When we collect account registration details, billing information, security audit logs, and first-party usage telemetry, we determine the purposes and means of processing.
• cntnus as Data Processor / Service Provider: When you create canvases, draw strokes, store notes, or sync files ("Customer Content"), you are the Data Controller and we process that data strictly on your instructions.

2. Categories of Information We Collect

1. Identity & Authentication Data: Email address, display name, user identifier (Cognito sub), or OAuth 2.1 credentials.
2. Technical & Security Telemetry: IP addresses, TLS request metadata, rate-limiting counters, and operational logs required to protect against Denial-of-Wallet and unauthorized access.
3. Canvases & Customer Data: Vector stroke data, nested coordinate frames, document names, and bookmarks stored in your account.

3. How We Use Information & Our Commitments

We process information solely to authenticate users, provide infinite canvas features, detect security abuse, and scale cloud resources.

• No Sale of Personal Information: We never sell your personal information to data brokers or cross-context retargeters.
• No AI Model Training on Private Data: We do not use your private canvases, artwork, or notes to train foundational AI models.

4. Global Privacy Control (GPC) & Universal Opt-Out

In compliance with modern privacy standards, all cntnus web properties automatically detect and honor the Global Privacy Control (Sec-GPC: 1) header and navigator.globalPrivacyControl signal.

When a GPC signal is active, our applications immediately suppress any non-essential analytics without requiring banner clicks or registration, displaying ● Privacy Signal Honored (GPC) in the footer.

5. Your Privacy Rights (US States, GDPR, UK)

Depending on your jurisdiction, you have the right to access, port, correct, and delete your personal data. You can export all your documents at any time using in-app export tools or request account deletion by emailing privacy@cntnus.app.

6. Data Retention & Security

Data is stored in Amazon Web Services with AWS KMS encryption at rest and TLS 1.2+ in transit. Account data is retained while active and purged within 30 days of account deletion.