Privacy Policy

1. Introduction

Jishu Labs (“we,” “our,” or “us”) operates Shivo (shivo.jishulabs.com), an AI-powered specification generation and validation platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. Information We Collect

Personal Information

When you create an account, we collect your name, email address, and password. If you subscribe to a paid plan, we collect billing information through our payment processor (Stripe). We do not store credit card numbers on our servers.

Usage Data

We automatically collect certain information when you use Shivo, including your IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This data helps us improve performance and understand how our service is used.

Specification Content

When you generate or save specifications, the content (titles, descriptions, features, constraints, and generated output) is stored in our database. This content is associated with your account and is not shared with other users unless you explicitly choose to share it.

3. How We Use Your Information

• To provide, operate, and maintain the Shivo platform
• To generate specifications using AI models based on your input
• To manage your account, preferences, and subscriptions
• To send transactional emails (account verification, password resets, review notifications)
• To improve our AI models and validation engines (using anonymized, aggregated data only)
• To detect, prevent, and address technical issues and security threats
• To communicate product updates, if you have opted in to marketing emails

4. AI Processing & Third-Party Models

Shivo uses third-party AI models to generate specifications. When you submit a generation request, your input (title, description, features, constraints) is sent to our AI provider for processing. We do not send your personal information (name, email) to AI providers. AI providers process your data according to their own privacy policies and do not use your data for training unless explicitly permitted.

5. Data Storage & Security

Your data is stored on Supabase infrastructure with encryption at rest (AES-256) and in transit (TLS 1.2+). We implement role-based access controls, audit logging, and regular security reviews. While no method of electronic storage is 100% secure, we take commercially reasonable measures to protect your personal information.

6. Data Retention

We retain your account data and specifications for as long as your account is active. When you delete your account, all personal information and specification data is permanently deleted within 30 days. Anonymized, aggregated analytics data may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data and account
• Export: Download all your data in JSON format from Settings
• Objection: Object to processing of your personal data for marketing purposes

To exercise any of these rights, contact us at privacy@jishulabs.com.

8. Cookies

Shivo uses essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies. For more details, see our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this Privacy Policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: privacy@jishulabs.com