Privacy Policy
ContinuitySystems.ai, Inc. ("ContinuitySystems.ai," "we," "us," or "our") is committed to protecting the privacy of our customers and their employees. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our platform.
1. Information We Collect
Information You Provide
We collect information you provide when you register for an account, create an organization, add employees, or contact us. This includes:
- Account information: name, email address, job title, organization name
- Employee data: names, phone numbers, email addresses, department, facility assignment
- Emergency response data: safety status responses, location information provided during emergency calls
- Payment information: processed through our payment processor; we do not store full card numbers
Information Collected Automatically
When you use our platform, we automatically collect:
- Log data: IP addresses, browser type, pages accessed, timestamps
- Usage data: features used, actions taken, session duration
- Device information: device type, operating system, browser version
Information from Third Parties
If you sign in with Microsoft or Google, we receive your name and email address from those providers in accordance with their privacy policies.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the ContinuitySystems.ai platform
- Send emergency notifications and conduct accountability campaigns on behalf of your organization
- Generate AI-powered reports, summaries, and recommendations
- Authenticate users and maintain account security
- Process payments and manage subscriptions
- Provide customer support and respond to inquiries
- Send service-related communications and product updates
- Comply with legal obligations and enforce our terms
3. Data Sharing and Disclosure
We do not sell your personal information. We may share your information with:
- Service providers: Azure (hosting, AI, communication), Twilio (voice/SMS), SendGrid (email), Stripe (payments) — each under data processing agreements
- Your organization: Administrators and authorized managers within your organization can access employee data and response records
- Legal requirements: When required by law, court order, or to protect the rights and safety of our users
- Business transfers: In connection with a merger, acquisition, or sale of assets
4. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS 1.2+) and at rest (Azure Transparent Data Encryption)
- ASP.NET Core Data Protection for sensitive PII fields
- SOC 2 Type II certified infrastructure
- Role-based access controls and multi-tenant data isolation
- Regular penetration testing and security audits
5. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Emergency response records are retained for a minimum of 7 years to support compliance and after-action review requirements. You may request deletion of your personal data subject to legal retention obligations.
6. Your Privacy Rights
Depending on your location, you may have rights including:
- Access to personal information we hold about you
- Correction of inaccurate information
- Deletion of your personal data (subject to retention requirements)
- Portability of your data in a machine-readable format
- Objection to certain processing activities
To exercise these rights, contact us at privacy@continuitysystems.ai.
8. International Data Transfers
Your data is stored and processed in the United States on Azure infrastructure. For customers in the EU/EEA, we rely on Standard Contractual Clauses for international data transfers. Government customers may request deployment to Azure Government Cloud for data residency requirements.
9. Children's Privacy
Our platform is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us immediately.
10. Contact Us
For privacy questions or to exercise your rights: