Data processing addendum

This data processing addendum (“DPA”) describes how Jishu Labs LLC processes personal data on behalf of customers who use Kioku. If your procurement process needs a signed DPA, contact us and we will complete the appropriate agreement.

For account data, decision records and linked context handled through Kioku, the customer is generally the controller or business, and Jishu Labs LLC acts as processor or service provider, following the customer's instructions given through use of the Service.

• Subject matter: providing decision and context memory and the related product features.
• Duration: for the life of the customer account, unless deleted earlier.
• Data categories: account details, decision records, notes submitted for structuring, context items, recall questions, projects, settings and usage data.
• Data subjects: customer users, and people named in the decisions and context customers capture.
• Purpose: operating, securing, supporting and improving the Service.

Jishu Labs LLC maintains technical and organizational measures designed to protect customer data, including encryption at rest, TLS in transit, account isolation through Supabase Row Level Security, least-privilege access, separation of environment keys, and validation at public API boundaries. More detail is in the security overview.

Jishu Labs LLC uses sub-processors to host, authenticate, store, email and process the data needed to provide the Service. The current list, with each provider's purpose, is on the sub-processors page.

Decisions and linked context are used only to provide the Service to the customer. Customer content is not used to train AI models, and it is not sold or licensed to third parties.

We will give reasonable help with data subject requests, security questions, deletion requests and regulatory questions, where the information is available to us and relates to the customer's use of Kioku.

Customers can export their data as JSON from Settings and copy or download any decision as an architecture decision record. On a verified deletion request or account closure, Jishu Labs LLC will delete or anonymize customer data as described in the privacy policy, subject to operational backup retention.

For DPA requests or privacy procurement questions, use the contact page or email admin@jishulabs.com.