Privacy Policy

Aug 3, 2026

Key Points

Before reading our full Privacy Policy, here are the most important things to know about how Continuum handles your data:

We do NOT sell your personal information.
Continuum and its third-party AI providers do not use your personal information or meeting content to train AI models. Your meeting content stays yours.
AI processing is integral to the Services. AI-enabled transcription, summarization, and related features cannot be disabled independently.
Your data is encrypted at rest and in transit. We undergo annual SOC 2 Type II attestation by an independent CPA firm, and conduct regular security audits.
This Privacy Policy reflects Canadian privacy principles, including consent-based data handling and accountability.

1. Introduction and Scope

OnePlace Company Inc., operating as Continuum ("Continuum," "we," "our," or "us"), is an AI-powered client intelligence platform designed for financial advisors and wealth management professionals. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use our website (oncontinuum.com), desktop and mobile applications, and related services (collectively, the "Services").

This Privacy Policy does not apply to third-party websites, applications, or services that may be linked to or integrated with our Services. We encourage you to review the privacy policies of any third-party services you access through Continuum.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please discontinue use of our Services.

We process your personal information with your consent or as otherwise permitted or required by applicable law. In some cases, at the time of collection of your personal information, we may provide you with additional information regarding the processing of your personal information.

We may also, in certain circumstances, obtain your specific consent for the use or sharing of your personal information, including where required by law. Where we rely on consent, you may withdraw it subject to legal or contractual restrictions; because AI-enabled processing is integral to the Services, withdrawal may require you to stop using the Services and close your account.

2. Personal Information We Collect

We collect and process the following categories of personal information:

Category	Examples	Who We May Share With
Profile and Contact Data	First and last name, email address, phone number, professional title, company name	Service Providers; Parties You Authorize
Payment Data	Payment card type, last four digits of card number, billing address, billing email	Service Providers (specifically our payment processor, currently Stripe, Inc.)
Device and IP Data	IP address, device identifiers, browser type and version, operating system, approximate location derived from IP	Service Providers; Analytics Providers
Web Analytics	Pages visited, referring URL, session duration, click patterns, feature usage	Service Providers; Analytics Providers
Professional and Employment Data	Job title, employer, professional designations, AUM range, practice type	Service Providers; Parties You Authorize
Calendar and Meeting Data	Calendar event details, meeting invitations, attendee lists, meeting titles, scheduling metadata	Service Providers; Parties You Authorize
Transcriptions	AI-generated transcriptions of meetings captured through our Services	Service Providers (including AI processing providers); Parties You Authorize (for transcriptions and related outputs)
CRM and Client Data	Client contact information, account notes, service history, and other data you import from third-party CRM systems	Service Providers; Parties You Authorize
Communications Data	Emails and messages you choose to import or connect to the platform	Service Providers; Parties You Authorize
Other Information You Provide	Support requests, survey responses, feedback, and any other information you voluntarily share with us	Service Providers; Parties You Authorize

For more information on with whom we may share your personal information, please see Section 6 (How We Disclose Your Information).

3. How We Collect Personal Information

We collect personal information from the following sources:

Directly From You

When you create an account, configure your profile, import data, connect integrations, contact our support team, respond to surveys, or otherwise interact with our Services.

Automatically Through the Services

When you use our Services, we automatically collect certain technical and usage data through cookies, server logs, and similar technologies. See Section 8 (Cookies and Tracking Technologies) for more detail.

From Third-Party Sources

We may receive information from third-party services you connect to Continuum, such as your calendar provider, CRM system, email client, or video conferencing platform. We may also receive information from analytics providers, business partners, and publicly available sources.

From Your Organization

If you access Continuum through an enterprise account, your organization's administrator may provide us with your name, email, and role information, configure and manage your account, and, depending on permissions, access information associated with the enterprise account.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

Providing and Improving the Services. Creating and managing your account, processing transactions, delivering AI-powered meeting transcription, summaries, workflows, and client intelligence features, including actions you initiate or approve through connected services, providing customer support, and improving our platform through research, testing, and product development.

AI-Powered Features. Processing your meeting recordings to generate transcriptions, summaries, action items, and client insights. For full details on our AI data practices, see Section 5 below.

Communications. Sending transactional messages (account confirmations, security alerts, service updates), and, where you have opted in, marketing communications about our Services. You may opt out of marketing communications at any time.

Security and Fraud Prevention. Detecting, investigating, and preventing unauthorized access, fraud, and other harmful activities, and ensuring the security and integrity of our Services.

Legal Compliance. Complying with applicable laws, regulations, legal processes, or enforceable governmental requests, and enforcing our Terms of Use.

Analytics and Personalization. Understanding how our Services are used, analyzing trends, and personalizing your experience.

5. AI-Specific Data Practices

Because Continuum is an AI-powered platform, we want to be especially transparent about how we handle your data in connection with our AI features.

How AI Processes Your Data

When you use Continuum's AI features (including meeting transcription, summarization, workflows and client intelligence), your data is processed by our AI systems, which may include third-party AI infrastructure providers, to generate outputs such as transcripts, summaries, action items, deliverables and insights. This processing is performed solely to deliver the Services to you.

Meeting Participant Notice and Customer Responsibilities

If you or your organization use the Services to record, transcribe, or analyze a meeting, you or your organization are responsible for providing any required notice to participants and obtaining any required consent. When Continuum processes personal information contained in customer-provided meeting content, we generally act as a service provider or processor on behalf of the customer.

Third-Party AI Providers

We use third-party AI providers to power certain features. These providers are contractually prohibited from using your personal information to train, improve, or develop their own AI models. Your personal information is processed only to provide the requested functionality and is retained by those providers only as permitted under our agreements with them.

No Model Training

We do not use customer personal information to train AI models.

We contractually require our third-party AI providers not to use customer personal information or meeting content to train, fine-tune, or improve their models.

Human Review and Automated Decision-Making

Continuum's AI-generated outputs are assistive drafts. Users are expected to review and approve outputs before relying on or sharing them, and Continuum does not use AI alone to make decisions about individuals.

Data Minimization

We apply data minimization principles to our AI processing. We collect and process only the personal information necessary to deliver the features you use, and we do not retain raw data longer than required for service delivery.

6. How We Disclose Your Information

We may disclose your personal information to the following categories of recipients:

Service Providers

We engage trusted third-party companies to perform services on our behalf, including cloud hosting and infrastructure, payment processing (currently Stripe, Inc.), AI transcription and processing, analytics, customer support, and email delivery. These providers are contractually bound to use your personal information only for the purposes we specify and to maintain appropriate security measures.

A current list of our subprocessors is available through our Trust Center at https://app.drata.com/trust/69f04f0d-7f6e-437d-babc-76758067413a. We update this list as our subprocessors change and provide notice where required by applicable law or contract.

Parties You Authorize

We may share information with third parties you explicitly authorize, such as CRM platforms, calendar services, or other integrations you enable. When you use the Services to send or share deliverables, summaries, messages, or other outputs, we disclose the selected information to the recipients you designate.

Your Organization

If you use Continuum through an enterprise account, your organization may administer the account and access information associated with it according to the organization's settings, permissions, and agreements with Continuum.

Legal Obligations

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Continuum, our users, or the public.

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will make reasonable efforts to notify you before your information becomes subject to a different privacy policy.

With Your Consent

We may disclose your personal information for other purposes with your explicit consent.

7. Data Processing Addendum

For enterprise customers that require a Data Processing Addendum ("DPA") to comply with applicable data protection laws, we offer a DPA that governs our processing of personal information on your behalf. To request a DPA, please contact us at privacy@oncontinuum.com.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate, analyze, and improve our Services.

Types of Cookies We Use

Essential Cookies. Required for core functionality such as authentication, security, and session management. These cannot be disabled without affecting the Services.

Functional Cookies. Enable personalized features such as remembering your preferences, language settings, and display options. Disabling these may reduce your experience quality.

Performance and Analytical Cookies. Help us understand how users interact with our Services by collecting usage data, which may include identifiers and device information. This data helps us identify trends, measure feature performance, and improve the user experience.

Advertising and Targeting Cookies. Used to measure campaigns and deliver or assess advertising, including through third-party advertising technologies.

Managing Cookies

You can manage cookies through your browser settings and, where available, through a cookie preference tool on our website. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of our Services.

For more information about cookies generally, visit allaboutcookies.org.

9. Data Storage and Security

We take the security of your personal information seriously and implement a combination of technical, organizational, and administrative safeguards.

Policies and procedures. We maintain a privacy framework governing the protection of personal information through its lifecycle. This framework defines the roles and responsibilities of our personnel, provides a process for dealing with complaints regarding the protection of the information, and addresses the retention and destruction of personal information. We also have a designated Privacy Officer, reachable at privacy@oncontinuum.com, to monitor our compliance with applicable laws and offer personnel privacy and data security training.

Encryption. Personal information stored in Continuum's production systems is encrypted at rest, and data transmitted between user devices and the Services is encrypted in transit using industry-standard protocols.

Access Controls. Access to personal information is restricted to authorized personnel who require it to perform their duties, subject to strict access control policies.

Infrastructure Security. Our cloud infrastructure employs network security controls, virtual private cloud (VPC) configurations, security monitoring, vulnerability management, and other protective measures.

SOC 2 Type II Attestation. We maintain SOC 2 Type II attestation, which is independently audited to verify our security controls.

Incident Response. We maintain an incident response plan to detect, investigate, and respond to security incidents promptly. In the event of a data breach that affects your personal information, we will notify you and applicable authorities in accordance with applicable law.

No Guarantee. While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

10. International Data Transfers

Continuum is headquartered in Canada. Depending on the service, customer configuration, and third-party provider, personal information may be stored in Canada and may also be transferred to or processed in other jurisdictions, including the United States, where certain service providers and AI infrastructure partners operate. When personal information is used or stored outside your jurisdiction, it may be subject to the laws of that jurisdiction, including laws that permit or require disclosure to government authorities, courts, or law enforcement.

When we transfer personal information across borders, we use safeguards designed to protect it in accordance with applicable data protection requirements. These safeguards may include contractual data protection clauses, security assessments of our service providers, and compliance with applicable adequacy frameworks.

By using our Services, you acknowledge that your personal information may be transferred to and processed in jurisdictions outside your own, which may have different data protection standards.

11. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our approach to retention for key data categories:

Recordings. Audio recordings of meetings are processed to generate transcriptions and are not retained by Continuum after transcription is complete. Third-party providers process and retain recordings in accordance with our agreements with them.

Transcriptions, Summaries, and Insights. Retained for as long as your account is active or as needed to provide the Services, subject to customer agreements, organization settings, and legal or regulatory requirements. You may delete individual items through the platform if permitted by your organization's settings and permissions.

Profile and Account Data. Retained for as long as you maintain an active account. Upon account deletion, this data is deleted or de-identified in accordance with our retention schedule, customer agreements, and applicable legal requirements.

Payment Data. Retained for as long as needed to process your subscription and comply with financial record-keeping requirements.

Device and Usage Data. Retained for a reasonable period to ensure system performance, security monitoring, and analytics.

Customer Data Following Account Closure. We retain, return, export, delete, or de-identify customer data in accordance with the applicable customer agreement, organization settings, legal obligations, and our retention schedule.

Where we retain personal information after account termination, we restrict access and use it only for the purpose that requires retention.

12. Your Rights and Choices

Depending on your jurisdiction of residence, you have the following rights regarding your personal information:

Access. You may request information about what personal information we hold about you and obtain a copy.

Correction. You may request that we correct inaccurate or incomplete personal information. You can also update your profile information directly in your account settings.

Deletion. You may request that we delete your personal information. You may delete individual meeting records, transcripts, and imported data through the platform if permitted by your organization's settings and permissions. To request full account deletion, contact us at privacy@oncontinuum.com.

Withdrawal of Consent. You may withdraw your consent to our processing of your personal information, subject to legal or contractual restrictions. Because AI-enabled processing is integral to the Services, withdrawal may require you to stop using the Services and close your account.

Data Portability. You may request a copy of your personal information in a structured, commonly used, machine-readable format.

Automated Decision-Making. You may request information about our use of automated decision-making that has a legal or similarly significant effect on you, where required by applicable law. As described above, Continuum's AI-generated outputs are assistive drafts and are not used by Continuum alone to make decisions about individuals.

Complaint. You may raise a concern with our Privacy Officer at privacy@oncontinuum.com.

Opt-Out of Marketing. You may unsubscribe from marketing communications at any time using the "unsubscribe" link in our emails or by contacting us.

To exercise any of these rights, please email us at privacy@oncontinuum.com with the subject line: "Privacy Request: [nature of your request]." We may need to verify your identity before completing the request. We will respond within 30 days, or within another period permitted by applicable law. If we refuse or limit a request, we will explain the reasons and any available complaint or appeal process, where required by law.

13. Canadian Privacy Rights

Continuum is a Canadian company, and we are committed to complying with applicable federal and provincial privacy laws. Under these laws, you have the right to:

Know what personal information we collect about you, why we collect it, and how it is used and disclosed.
Access your personal information held by us and be informed of its use and disclosure.
Challenge the accuracy of your personal information and request corrections.
Withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions. We will inform you of the consequences of withdrawal.
De-indexing. Where the applicable legal conditions are met, you may request that we cease disseminating or de-index personal information.
File a complaint with the applicable federal or provincial privacy commissioner if you believe your privacy rights have been violated.
Change your cookie preferences. Manage cookie preferences as described in Section 8. Available controls may vary depending on your browser, location, and the tools provided on our website.

We adhere to the accountability principle: we are responsible for the personal information in our custody or control, including information transferred to third parties for processing on our behalf.

If you wish to exercise any of these rights or have questions about our Canadian privacy practices, please contact us at privacy@oncontinuum.com.

14. U.S. State Privacy Rights

California Residents

If you are a California resident, you may have additional rights under California privacy law, including rights to know, access, correct, and delete personal information; opt out of the sale or sharing of personal information; limit certain uses and disclosures of sensitive personal information; and receive equal service and pricing when exercising your rights. We do not sell personal information. Where required by applicable law, we will treat a recognized opt-out preference signal, such as Global Privacy Control, as a valid request.

To exercise your California privacy rights, please contact us at privacy@oncontinuum.com.

Other U.S. States

Residents of other U.S. states with applicable privacy laws may have rights to access, correct, delete, or obtain a copy of personal information; opt out of sale, targeted advertising, or certain profiling; and appeal a refusal, depending on the state. Please contact us at privacy@oncontinuum.com to inquire about your specific rights.

15. Children's Privacy

The Services are intended for business users who are at least 18 years old and may not be used by individuals under 18. We do not knowingly permit individuals under 18 to create accounts. If we learn that an individual under 18 has created an account, we will take reasonable steps to close it and delete associated personal information, subject to applicable legal obligations. This restriction does not prevent enterprise customers from submitting personal information about minors as part of customer data where permitted by law; in those circumstances, Continuum processes the information on the customer's behalf.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our website, sending you an email notification, or providing an in-app notice. Where required by law, we will obtain consent before using or disclosing personal information for a new purpose.

We encourage you to review this Privacy Policy periodically.