ContinuServe logo

Privacy Policy for the ContinuFlow Mobile Application

Effective Date: October 20, 2026

This privacy policy (“Privacy Policy”) describes how ContinuServe LLC and its affiliates (“ContinuServe”, “CS”, “we”, “our”, or “us”) handle information in connection with the ContinuFlow Mobile Application (“App”). The App is a native mobile client that enables authorized enterprise users to access and use certain functionality of ContinuServe’s enterprise platform through authenticated connections to ContinuServe’s backend application programming interfaces (APIs) (“ContinuFlow” or “Platform”) and is intended exclusively for authorized enterprise users (“User(s)”, “You”, “you”, or “your”). This policy is based on and should be read together with the ContinuServe Website Privacy Policy available at: Privacy Policy – ContinuServe. To the extent there is any conflict between this Privacy Policy and the ContinuServe Website Privacy Policy with respect to the App, this ContinuServe Website Privacy Policy will govern. All terms initially capitalized herein shall have the meaning set forth in the Terms of Use or Privacy Policy – ContinuServe to which this Privacy Policy is an integral part.

1. Purpose of the App                                                                                

The ContinuServe Mobile App enables authorized enterprise users to securely access services, use functionality available through the Platform and information available through ContinuServe’s existing Platform.

The App does not operate as a standalone service. The App may process and securely temporarily store limited information on the user’s device, including authentication/session information and the last-used email address, as necessary to authenticate users, maintain an authenticated session, provide security, and enable the App’s functionality. The App processes information through authenticated API connections to ContinuServe’s secure enterprise Platform and backend systems (collectively known as “CS Systems”).  

This Privacy Policy applies to the App and to information processed through or in connection with the App. The App enables authorized users to securely access certain functions of the CS’s Platform, including:

  • reviewing invoices;
  • approving invoices;
  • rejecting invoices;
  • modifying invoice approvals;
  • reviewing workflow status; and
  • other limited related functions.

The App may also enable Users to view and act on accounts payable and invoice workflows, including vendor details, invoice amounts, purchase order, batch and record identifiers, status information, approver information, general ledger line items, attachments, notes, comments, audit/history information, and email message previews.

The App is intended solely for authorized enterprise users who already have a service agreement with CS. It is not directed to the general public or to children as defined under applicable law, and ContinuServe does not knowingly collect personal information from children through the App.

2. Information We Collect

The App processes personal information, business and financial information and authentication/session information necessary to authenticate authorized users, maintain authenticated sessions, provide requested functionality, maintain security, and support the operation of the App.

Information processed through the App may include:

  • Identity and profile information, including your name, email address, user ID, login type, designation within organization, client mappings, time zone, profile picture URL (where provided);
  • Authentication and session information, including ContinuFlow access and refresh tokens, session information, session idle timestamps, and the last-used email address;
  • User preferences, including a push-notification preference flag;
  • Invoice and accounts payable information, including invoice numbers, vendor details, invoice amounts and dates, purchase order, batch and record identifiers, status information, approvers, stores, general ledger line items, tags and related workflow information;
  • Attachments, invoice PDFs, exports, internal notes, audit/history information, comments and other supporting content;
  • Email message preview information, including subject, sender, recipients, copied recipients and HTML body content, where such information is made available through the Platform;
  • Files and documents that a User selects for attachment or downloads through the App.

The App does not:

  • Store business records locally on the device as a permanent storage repository. Business information may nevertheless be processed by the App while you are using the App through authenticated API connections.
  • Collect information for advertising or marketing purposes
  • Track users across applications or websites
  • collect biometric information
  • collect payment information
  • access Apple HealthKit
  • access Apple Wallet

Enterprise information made available through the App may, however, contain personal information or other sensitive or regulated information depending on the information processed by the applicable enterprise customer and Platform services.

To maintain secure access to the App, we store authentication-related information such as access tokens, refresh tokens, session information, the last-used email address, and session idle timestamps in encrypted device storage where necessary. This information is used for authentication, session continuity, security, and automatic sign-out functionality. Upon logout or session timeout, ContinuServe access and refresh/session tokens are cleared from the device. The last-used email address may remain on the device to facilitate login. Other authentication or security information may be retained only for as long as reasonably necessary to fulfil the applicable security, legal, or operational purposes, following which such information will be deleted or otherwise handled in accordance with applicable law and ContinuServe’s data retention policies.. A push-notification preference may also remain on the device after logout. User-downloaded files may remain on the device until deleted by the User or the operating system. Temporary download, preview, or file-picker cache files are not systematically purged by the App. Users may exercise their rights in relation to their Personal Information, including requesting its deletion, as set out in Section 12 (Rights under applicable laws) of this Privacy Policy, subject to applicable law.

We may automatically collect certain information through cache and other similar technologies. We may also retain information regarding your choices and preferences while you are using or accessing the Platform.

3. Authentication Any authentication information required for access is processed through ContinuServe’s existing secure enterprise systems. The App participates in the authentication process by transmitting and processing the information necessary to authenticate authorized users with ContinuServe’s enterprise authentication and backend systems. Depending on the authentication mechanism made available by the User’s organization, authentication may use an email address and password or Microsoft Single Sign-On (SSO).

Where password-based authentication is used, the App uses the password for authentication but does not store the password on the device. Where Microsoft SSO is used, SSO tokens are used for the authentication exchange and are not retained by the App after the SSO authentication process is completed.

Following successful authentication, the App may securely retain ContinuServe access and refresh/session tokens for the duration of the authenticated session and may process session profile information, including user ID, name, email address, and designation, client mappings, time zone, profile information, and other profile attributes returned by the applicable APIs to provide authorized functionality and maintain session security.

Single Sign-On (SSO) Authentication

Multi-Factor Authentication (MFA)

Authorized users access the App using authentication mechanism, which may include Single Sign-On (SSO) and Multi-Factor Authentication (MFA).

ContinuServe may implement and maintain appropriate authentication, access-control, and security measures for users accessing the ContinuServe environment. Such measures may include the use of third-party authentication and access-management services, including Microsoft Azure AD and Guest User services, as determined by ContinuServe from time to time.

4. Data Processing

Save and except as provided under this Privacy Policy, the App processes data through encrypted communications and application programming interfaces (APIs), connecting the App with ContinuServe’s secure enterprise Platform and backend systems.

The App processes information received through authenticated APIs as necessary to provide its functionality. This may include session profile information, such as user ID, name, email address, and designation, client mappings, time zone, profile picture URL and last login information, where returned by the applicable APIs and enterprise or business information made available to an authorized User through the App. The App may retain limited information such as last used email, push notification on/off, limited authentication, session-management, and temporary cached information necessary to provide the App’s functionality and security and files that Users elect to download or save to the device.

ContinuServe may process information in jurisdictions other than the jurisdiction in which the User resides, including jurisdictions where CS or CS service providers’ operate. Information accessed through the App may be processed, stored, or accessed by ContinuServe and its authorized service providers, including hosting, cloud authentication, security, analytics, and other technology providers, in the United States or other jurisdictions where such providers operate, as necessary to provide the services. Accordingly, your Personal Information may be transferred to, stored, or processed in the United States or other jurisdictions where privacy laws may not provide the same level of protection as those in your state, province, or country. ContinuServe takes reasonable steps to ensure that such processing is subject to appropriate security and confidentiality protections.

We may process your information so you can  log in to your account,and use the App, maintain your authenticated session as well as keep your account in working order, to respond to your inquiries related to the functionality of the App, to authenticate authorized users, maintain and secure authenticated sessions, enable authorized access to enterprise information and workflows, maintain the security and availability of the App and Platform, troubleshoot and address technical issues and solve any potential issues you might have with the requested functionality of the App, communicating any material change to our terms and policies, and other similar information related to the upkeep, maintenance and functionality of the App.

5. Information the App Does Not Access

The App does not access, collect, monitor, or use any of the following device features or data categories except where necessary for the User selected function or required subsequently by App functionality that is disclosed in an updated Privacy Policy:

  • Contacts
  • Address book information
  • Microphone
  • Precise location data
  • Background location data
  • Health or fitness information
  • Messages
  • Call logs
  • Biometric information
  • Calendar information
  • Device advertising identifiers for tracking purposes

The App may allow a User to select documents or images from the device for attachment in supported functionality and may access files that the User expressly selects through the device’s file-selection functionality.

The App only utilizes device capabilities necessary to display, process User actions, maintain the security, functionality of the App, and securely communicate with the Platform or ContinuServe’s backend system.

6. Data Sharing

We may disclose or make Personal Information available to the following categories of recipients as necessary to provide, secure, support, and operate the App and Platform, or as otherwise permitted or required by applicable law including but not limited to:

  • Affiliates. Our corporate parent, subsidiaries, and affiliates.
  • Service providers. Third parties that provide services on our behalf or help us operate the App or our business, including providers of functionality, security, hosting, authentication, support, analytics, AI-powered features, information technology, customer support, email delivery, payment aggregators and website analytics, as well as third-party application programming interfaces (APIs).
  • Partners. Third parties with whom we partner, including parties with whom we jointly offer services.
  • Professional advisors. Professional advisors, such as lawyers and auditors, where necessary in the course of the professional services they render to us.
  • Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described in this Privacy Policy. We may also disclose Personal Information to an acquirer, successor, or assignee of the App as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which Personal Information is transferred to one or more third parties as one of our business assets.
  • At your direction of applicable enterprise customer or User, we may share Personal Information with third parties where authorized.

This Privacy Policy does not apply to third-party services that maintain their own privacy policies. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.

The App does not use Personal Information for the following purposes:

  • Sell Personal Information.
  • Rent Personal Information.
  • Share Personal Information for advertising purposes.
  • Share Personal Information for cross-context behavioral advertising.
  • Provide user information to data brokers.

Any enterprise data accessible through the App remains subject to organizational controls and the applicable agreements between ContinuServe and the relevant enterprise customer, together withCS’s privacy and security practices available at Privacy Policy – ContinuServe.  

7. Data Security, Breach Response and Notification 

ContinuServe employs industry-standard administrative, technical, and organizational safeguards to protect enterprise data processed through its Platform to protect your Personal Information from unauthorized access, alteration, or disclosure.

Communications between the App and ContinuServe’s backend systems are encrypted in transit using secure protocols. Enterprise data remains protected within controlled environments and authorized systems subject to applicable access controls, security procedures, and contractual obligations. Users are responsible for determining the information they provide through the Platform and for managing user access permissions within their organization.

ContinuServe has implemented reasonable procedures (in accordance with applicable law) to detect, respond to, and address breaches involving Personal Information. Where required by applicable law, ContinuServe will cooperate with relevant regulatory authorities and notify affected Users of breaches involving their Personal Information, subject to applicable legal requirements and exceptions.

8. Enterprise Use Only

The App is intended solely for authorized enterprise users who have been granted access by their organization.

Use of the App is subject to the applicable agreements between ContinuServe and the customer’s organization. Where CS processes Personal Information on behalf of an enterprise customer, the applicable enterprise customer’s instructions and agreements with CS may govern such processing in addition to the terms of this Privacy Policy.

9. Children’s Privacy

The App is intended exclusively for business and enterprise use and is not directed to children. ContinuServe does not knowingly collect information from children through the App and does not knowingly permit children to create accounts or access the App.

If ContinuServe becomes aware that Personal Information has been collected from a child in violation of applicable law, ContinuServe will take reasonable steps to delete such information.

10. Use of Artificial Intelligence

As part of our services, we offer features powered by artificial intelligence, machine learning, and similar technologies (collectively, the “AI Tools”). These AI Tools are designed to enhance user experience and provide analytical, predictive, and decision-support capabilities. The use of AI Tools is governed by this Privacy Policy and any applicable service agreements. Certain AI Tools may be available through the Platform. AI functionality may not be available through the App.

We provide certain AI Tools through third-party service providers (“AI Service Providers”). To deliver AI functionality, information submitted to the AI Tools, including user inputs, prompts, uploaded content, generated outputs, and other information necessary to process a request, may be transmitted to and processed by such AI Service Providers on our behalf.

We use AI Tools for purposes such as:

  • Generating AI Insights;
  • AI Predictive Analysis.

All Personal Information processed through AI Tools is handled in accordance with this Privacy Policy and our contractual arrangements with AI Service Providers. We implement reasonable administrative, technical, and organizational measures designed to protect Personal Information and ensure it is processed only for authorized purposes.

AI-generated content, insights, recommendations, and predictive analyses are provided for informational and decision-support purposes only. Such outputs may be inaccurate, incomplete, or outdated and should not be relied upon as the sole basis for financial, legal, tax, regulatory, compliance, employment, healthcare, or other significant business decisions.

We take reasonable steps to limit retention of information submitted to AI Tools to what is necessary to provide the requested functionality, maintain security, comply with legal obligations, and support our legitimate business operations. Retention practices may vary depending on the AI Service Provider and the specific features being used.

Where applicable, Personal Information shared with AI Service Providers will not be used to train or improve third-party AI models except as permitted by applicable agreements, law, or authorized by the applicable customer.

11. Option to Opt Out

Where available, you may request to opt out of certain AI-enabled processing by contacting us using the contact information provided in this Privacy Policy. Please note that some AI functionality may be unavailable if such processing is disabled.

The AI Tools are provided through the Platform and where applicable, through the App and may be accessed through the App where available.

Users should not submit confidential, regulated, export-controlled, or sensitive personal information to AI Tools unless authorized by their organization and supported by applicable agreements.

12. Rights under applicable laws: You are entitled to exercise all statutory rights regarding Your Personal Information as provided under the prevailing data protection laws, depending on your state of residence, relationship with ContinuServe, and the circumstances of processing. We are committed to facilitating these rights in a transparent manner, ensuring Your data is handled in strict compliance with legal requirements. Requests to exercise applicable privacy rights may be submitted using the contact information provided in this Privacy Policy.

Depending on your jurisdiction and subject to applicable law, you may have certain rights in relation to your Personal Information, including the right to request access to and information about the Personal Information we process, request correction of inaccuracies, obtain a copy of your Personal Information, request its deletion, and withdraw your consent where processing is based on consent. The availability and exercise of these rights may be subject to applicable legal requirements, limitations, and exceptions.

To exercise any of the rights described above, you may contact us using the contact details provided in this Privacy Policy. Upon receiving your request, we may take reasonable steps to verify your identity and assess the request in accordance with applicable law. We will respond to such requests within the timelines prescribed under applicable law. Where permitted or required by law, we may decline or limit a request and will communicate the reasons for doing so. Certain requests relating to enterprise-managed accounts or information processed on behalf of your employer or organization may be referred to the relevant organization for appropriate action.

13. Retention of Data

Except for (i) limited authentication and session-management information required for operation of the App; and (ii) to fulfill the purposes for which we collected the customer data or enterprise business records, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for the compliance and protection purposes, the App does not retain enterprise business records or customer data as a permanent storage repository.

The App may temporarily process or store limited information, including authentication tokens, session information, security-related information, or temporary cached data, where necessary to provide secure access, maintain functionality, and protect the security of the App and Platform. Certain information, including the last-used email address, User preferences, temporary cached files, and files downloaded or saved by the User, may remain on the device after logout or for longer periods.

Following logout or session timeout, access and refresh/session tokens are cleared from the device. Information saved to shared device locations or retained through applicable device or cloud backup mechanisms may also remain after the App is uninstalled.

All enterprise data retention, storage, deletion, and management activities are governed by ContinuServe’s Platform and the applicable customer agreements.

Retention periods may vary depending on the type of information, contractual obligations with enterprise customers, and applicable legal requirements. 

14. No automated decision-making and profiling:

As part of the service, CS does not engage in automated decision-making or profiling that produces legal or similarly significant effects. We provide our analysis to our customers, who may use it to make decisions that could affect the User and its enterprise.

15. Changes to This Privacy Policy

ContinuServe may update this Privacy Policy from time to time to reflect changes in legal, regulatory, operational, or technical requirements. Updated versions will be made available through the App or other appropriate channels.

16. Contact Information

If you have questions regarding this Privacy Policy or the ContinuServe Mobile App, please contact:

ContinuServe LLC;

3100 Cumberland Blvd SE, Suite 950, Atlanta, GA 30339

Email: privacy@continuserve.com

Data Protection Officer: dpo@continuserve.com