Privacy Policy

Shivo (“we,” “our,” or “us”) is operated by Jishu Labs LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI spec and PRD generator at shivo.jishulabs.com (the “Service”). We are committed to protecting your privacy and the confidentiality of the specs you write with us.

We collect the following types of information:

• Account information: your name, email address and password when you create an account.
• Spec content: the feature descriptions you write, the specs, requirements and acceptance criteria generated from them, your edits, and their version history.
• Review activity: review requests, approvals, change requests and comments on your specs.
• Usage data: how many specs you generate, which templates you use, and how features are used.
• Contact messages: your name, email address and message when you write to us through the contact form.
• Device information: browser type, operating system and IP address, for security and rate limiting.
• Product analytics: pages visited, clicks, scroll depth, page performance (Core Web Vitals), JavaScript errors and session replays, recorded with PostHog. Replays mask everything you type, and on signed-in workspace pages they mask all on-screen text, so the specs in your workspace are not captured.

• To provide and maintain the Service
• To generate specs, requirement checks and acceptance criteria from the descriptions you submit
• To keep your specs, versions, requirements and reviews available in your workspace
• To answer the messages you send us
• To communicate important service updates and security notices
• To enforce plan limits and prevent abuse
• To improve the quality of the Service

Your specs, requirements and comments are scoped to your account and encrypted at rest. We never use your content to train models, sell or license it, or make it available to other users. You can delete any spec, or your whole account, at any time.

Your data is stored with Supabase, protected by Row Level Security policies so that only your account can read your own records. Some review state is kept in your browser's local storage. We retain your data for as long as your account is active. You can export your data as JSON from Settings at any time, and deleting your account removes its data permanently.

We use the following third-party services to operate Shivo:

• Supabase: authentication and database hosting.
• AI model provider: generates spec text from the descriptions you submit, sent securely through its API.
• Netlify: hosting and web infrastructure.
• Resend: delivers contact-form messages to our inbox.
• PostHog: product analytics and session replay, provided by PostHog, Inc. and hosted in the United States. This data is not sold or used for advertising, and it is not used to train AI models.

The current list is on the Sub-processors page.

You have the right to access your personal data, export it, correct inaccurate information, delete your account and all associated data, and opt out of non-essential communications. To exercise these rights, use Settings or contact us at the email below.

We use essential cookies for sign-in, sessions and the demo workspace, and PostHog analytics cookies and local storage (names start with ph_) for product analytics. The analytics storage is set on .jishulabs.com and shared with jishulabs.com and the other Jishu Labs tools. If you declined cookies on jishulabs.com, analytics is not loaded. We do not use advertising cookies. See the Cookie Policy for details.

We may update this Privacy Policy from time to time. We will post the new policy on this page and update the “Last updated” date. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy, contact us through our contact page or email admin@jishulabs.com.