Data Processing Addendum

This Data Processing Addendum (“DPA”) describes how Jishu Labs LLC processes personal data on behalf of customers who use Kozo. If you need a signed DPA for a procurement process, contact us and we will complete the appropriate agreement.

For account data, submitted prompts, imported DDL and generated schemas handled through Kozo, the customer is generally the controller or business, and Jishu Labs LLC acts as processor or service provider, following the customer's instructions given through use of the Service.

• Subject matter: Providing AI database schema generation and related product features.
• Duration: For the life of the customer account unless deleted earlier.
• Data categories: Account details, prompts, imported DDL, generated schemas, saved versions, settings, billing metadata and usage data.
• Data subjects: Customer users.
• Purpose: Operating, securing, supporting, billing and improving the Service.

Jishu Labs LLC maintains technical and organizational measures designed to protect customer data, including encryption at rest, encrypted transport over TLS, account-scoped access through Supabase row level security, least-privilege access, separation of environment keys and validation at public API boundaries. More detail is in the Security overview.

Jishu Labs LLC uses sub-processors to host, secure, authenticate, store, bill, email and process the data needed to provide the Service. The current list, with each provider's purpose and region, is on the Sub-processors page.

Prompts and generated schemas are used only to provide the Service to the customer. Customer content is not used to train Jishu Labs models or the models of our AI sub-processors, and is not sold or licensed to third parties.

We will provide reasonable help with data subject requests, security inquiries, deletion requests and regulatory questions, where the information is available to us and relates to the customer's use of Kozo.

Customers can export their data from the application at any time. On a verified deletion request or account closure, Jishu Labs LLC will delete or anonymize customer data in line with the Privacy Policy and operational backup retention.

For DPA requests or privacy procurement questions, use the contact page or email admin@jishulabs.com.