Data Processing Addendum

This Data Processing Addendum (“DPA”) describes how Jishu Labs processes personal data on behalf of customers who use Kioku. If you need a signed DPA for an enterprise procurement process, contact us so we can complete the appropriate agreement.

For customer account data, captured decisions, and linked context handled through Kioku, the customer is generally the controller or business, and Jishu Labs acts as processor or service provider as instructed by the customer through use of the Service.

• Subject matter: Providing AI-powered decision and context memory and related product features.
• Duration: For the life of the customer account unless deleted earlier.
• Data categories: Account details, captured decisions, linked context, saved versions, settings, billing metadata, and usage data.
• Data subjects: Customer users and invited workspace participants.
• Purpose: Operating, securing, supporting, billing, and improving the Service.

Jishu Labs maintains technical and organizational measures designed to protect customer data, including encryption at rest (AES-256), encrypted transport (TLS 1.3), per-account tenant isolation through Supabase Row-Level Security, least-privilege access, environment key separation, and validation at public API boundaries. Additional details are available in the Security Overview.

Jishu Labs uses sub-processors to host, secure, authenticate, store, bill, email, and process data necessary to provide the Service. The current list, including each provider's purpose and region, is available on the Sub-processors page.

Decisions and linked context are used only to provide the Service to the customer. Customer content is not used to train Jishu Labs models or the foundation models of our AI sub-processors, and is not sold or licensed to third parties.

We will provide reasonable assistance for data subject requests, security inquiries, deletion requests, and regulatory questions where the requested information is available to us and relates to the customer's use of Kioku.

Customers can export their decisions through the application. Upon verified deletion request or account closure, Jishu Labs will delete or anonymize customer data according to the Privacy Policy and operational backup retention needs.

For DPA requests or privacy procurement questions, contact us through the contact page or at hello@jishulabs.com.