Data Processing Addendum

This Data Processing Addendum (“DPA”) describes how Jishu Labs LLC processes personal data on behalf of customers who use Keisan. If your procurement process needs a signed DPA, contact us and we will complete the appropriate agreement.

For account data, submitted briefs and estimates handled through Keisan, the customer is generally the controller or business, and Jishu Labs LLC acts as processor or service provider on the customer's instructions, given through use of the Service.

• Subject matter: providing AI project estimation and related product features.
• Duration: for the life of the customer account, unless deleted earlier.
• Data categories: account details, submitted briefs, estimates, rate cards, projects, proposals, settings, billing metadata and usage data.
• Data subjects: customer users, and the clients they share approval links with.
• Purpose: operating, securing, supporting, billing and improving the Service.

Jishu Labs LLC maintains technical and organizational measures designed to protect customer data, including encryption at rest, encrypted transport, account-scoped access through database row-level security, least-privilege access, separation of environment keys and validation at public API boundaries. More detail is in the security overview.

Jishu Labs LLC uses sub-processors to host, secure, authenticate, store, bill, email and process the data needed to provide the Service. The current list, with each provider's purpose and region, is on the sub-processors page.

Briefs and estimates are used only to provide the Service to the customer. Customer content is not used to train Jishu Labs LLC models or the foundation models of our AI sub-processors, and is not sold or licensed to third parties.

We will provide reasonable help with data subject requests, security questions, deletion requests and regulatory questions where the information is available to us and relates to the customer's use of Keisan.

Customers can export their data from the application. On a verified deletion request or account closure, Jishu Labs LLC will delete or anonymize customer data as the Privacy Policy describes, subject to operational backup retention.

For DPA requests or privacy questions from procurement, use the contact page or write to admin@jishulabs.com.