Data processing addendum

This data processing addendum (“DPA”) describes how Jishu Labs LLC processes personal data on behalf of customers who use Michi. If your organization needs a signed DPA for procurement, contact us and we will complete the appropriate agreement.

For account data, submitted goals and generated roadmaps handled through Michi, the customer is generally the controller, and Jishu Labs LLC acts as processor on the customer's instructions, given through use of the Service.

• Subject matter: turning learning goals into roadmaps and the related product features.
• Duration: for the life of the customer account, unless deleted earlier.
• Data categories: account and profile details, submitted goals, generated roadmaps, projects, sprints, team details, contact messages and technical data.
• Data subjects: the customer's users and the members they add to a team.
• Purpose: operating, securing, supporting and improving the Service.

Jishu Labs LLC maintains technical and organizational measures to protect customer data, including encryption at rest, TLS in transit, account-scoped access through Supabase Row Level Security, least-privilege access, separated environment keys and authentication checks on signed-in routes. More detail is in the security overview.

Jishu Labs LLC uses sub-processors to host, authenticate, store and process the data needed to provide the Service. The current list, with each provider's purpose, is on the sub-processors page.

Goals and generated roadmaps are used only to provide the Service to the customer. Customer content is not used to train models, ours or our AI sub-processor's, and is not sold or licensed to third parties.

We provide reasonable help with data subject requests, security questions, deletion requests and regulatory questions, where the information is available to us and relates to the customer's use of Michi.

On a verified request, we provide a copy of the customer's roadmaps. On a verified deletion request or account closure, Jishu Labs LLC deletes or anonymizes customer data in line with the privacy policy and backup retention needs.

For DPA requests or privacy procurement questions, use the contact page or write to admin@jishulabs.com.