Privacy Policy

Controller Details

The Continual Platform and continualmi.com are operated by Continual MI, LLC, a United States company. Use the support contact below for privacy requests, account questions, billing support, and security reports.

What Data We Process

• Account identifiers such as Continual account ID, email address, display name, and avatar data provided by sign-in
• API keys, request metadata, and usage records needed to serve API calls and meter what they cost
• Prompts and model output sent through the API, and any state an entity holds on your behalf
• Billing identifiers such as the merchant-of-record customer ID, balance top-ups, ledger entries, and webhook event records
• Support messages, refund requests, and other account communications
• Technical diagnostics needed to secure the service and troubleshoot incidents

Why We Process It

• To create and maintain accounts and API keys.
• To serve API requests, return model output, and hold any state an entity keeps on your behalf.
• To meter usage and draw down the balance the account has paid for.
• To authenticate users and protect the service from abuse.
• To process payments, balance top-ups, refunds, disputes, and billing support.
• To investigate incidents, security events, and harmful or defective outputs.

Legal Bases

• Performance of a contract when we serve API requests, keep account state, and fulfill paid balance.
• Legitimate interests for security, fraud prevention, incident review, and service improvement.
• Legal obligations for accounting, payment, consumer-law, and complaint-handling duties.
• Consent where a feature or future tracking technology specifically requires it.

Processors And Transfers

The service currently depends on the following processor categories and infrastructure providers:

• Continual account services and Google sign-in for authentication
• Paddle (Paddle.com Market Limited, or Paddle.com Inc. for customers in the United States, or Paddle.com (Canada) Ltd. for customers in Canada), our merchant of record, for checkout, payments, tax, invoices, and billing records
• Hetzner Online GmbH for hosting, databases, and runtime persistence
• Vast.ai and RunPod for the rented GPU capacity our models run on
• For some models, a third-party inference provider under contract

Prompts and the output returned for them are processed on rented GPU capacity operated by our infrastructure providers and, for some models, by a third-party inference provider under contract. Depending on where you are located, your information may be processed in the United States, the EEA, and other countries where we or our providers operate. If local law requires a specific transfer mechanism or safeguard, we will rely on the applicable legal mechanism for that transfer.

No Sale Of Personal Information

We do not sell personal information for money. We also do not intentionally share personal information for cross-context behavioral advertising. If that changes, we will update this policy and provide any opt-out or consent choices required by applicable law before using the data in that way.

Children

The Continual Platform is a developer service intended for adults. We do not knowingly collect personal information from children under 13, and the paid service is not intended for users under 18.

Retention

• Account, API key, and usage data are kept while the account remains active and for a reasonable period afterward for security, backup, and support purposes.
• Billing, payment, refund, dispute, and tax records may be kept for as long as necessary to satisfy accounting, fraud-prevention, and legal obligations.
• Support submissions, abuse reports, and security logs may be retained for as long as reasonably necessary to investigate issues and protect the service.

Your Rights

• Access to your personal data
• Correction of inaccurate account information
• Deletion where the data is no longer needed or where applicable law gives you that right
• Restriction or objection where applicable
• Portability for data you provided to the service where applicable
• The right to complain to your local privacy regulator where applicable

Depending on your location, you may have additional privacy rights under applicable law. Until self-service export and deletion tooling is fully deployed, rights requests should be handled through the listed support contact. We may need to verify your account before fulfilling a request. If you are in the EEA, UK, or Switzerland, you may also lodge a complaint with your local data protection authority. California residents may also have the right to know, delete, correct, limit certain sensitive-data uses, opt out of qualifying sales or sharing, and be free from discrimination for exercising privacy rights.

Security

We use administrative, technical, and organizational safeguards designed to protect account, billing, and runtime data. No online service can guarantee perfect security, so you should use a secure sign-in method, keep API keys secret, and contact support promptly if you suspect unauthorized access or a leaked key.

Local Storage And Device Data

The site and console store some device-side preferences in browser storage, and a session cookie when you are signed in. If non-essential analytics or marketing technologies are added later, this notice and any required consent flows must be updated before deployment.

Changes To This Policy

We may update this policy as the service, providers, laws, or business operations change. The updated date at the top of the page shows when the current version was published. Material privacy changes will be handled with additional notice where required by law.