Data Processing Addendum

This Data Processing Addendum (“DPA”) describes how Jishu Labs LLC processes personal data on behalf of customers who use Shivo. If you need a signed DPA for a procurement process, contact us so we can complete the appropriate agreement.

For customer account data and the spec content handled through Shivo, the customer is generally the controller or business, and Jishu Labs LLC acts as processor or service provider as instructed by the customer through use of the Service.

• Subject matter: generating and keeping specs, requirement checks, acceptance criteria and reviews.
• Duration: for the life of the customer account unless deleted earlier.
• Data categories: account details, feature descriptions, generated specs, requirements, acceptance criteria, review comments, settings and usage data.
• Data subjects: customer users and the people they invite to review.
• Purpose: operating, securing, supporting and improving the Service.

Jishu Labs LLC maintains technical and organizational measures designed to protect customer data, including encrypted transport, encryption at rest, per-account access through Supabase Row Level Security, and separation of public and server-only keys. Details are in the Security Overview.

Jishu Labs LLC uses sub-processors to host, authenticate, store and generate the data needed to provide the Service. The current list is on the Sub-processors page.

Customer specs, requirements and comments are used only to provide the Service. They are not used to train models and are not sold or licensed to third parties.

We will provide reasonable assistance with data subject requests, security questions, deletion requests and regulatory questions where the requested information is available to us and relates to the customer's use of Shivo.

Customers can export their data as JSON from Settings, and download any spec as Markdown. Upon a verified deletion request or account closure, Jishu Labs LLC will delete or anonymize customer data according to the Privacy Policy and operational backup retention needs.

For DPA requests or privacy procurement questions, contact us through the contact page or at admin@jishulabs.com.