Data Processing Addendum

This Data Processing Addendum (“DPA”) describes how Jishu Labs processes personal data on behalf of customers who use Kiku. If you need a signed DPA for an enterprise procurement process, contact us so we can complete the appropriate agreement.

For customer account data, uploaded audio, and generated transcripts handled through Kiku, the customer is generally the controller or business, and Jishu Labs acts as processor or service provider as instructed by the customer through use of the Service.

• Subject matter: Providing voice & audio intelligence and related product features.
• Duration: For the life of the customer account unless deleted earlier.
• Data categories: Account details, uploaded audio, generated transcripts, summaries, speaker labels, settings, billing metadata, and usage data.
• Data subjects: Customer users, invited workspace participants, and individuals recorded in submitted audio.
• Purpose: Operating, securing, supporting, billing, and improving the Service.

Jishu Labs maintains technical and organizational measures designed to protect customer data, including encryption at rest (AES-256), encrypted transport (TLS 1.3), per-account tenant isolation through Supabase Row-Level Security, least-privilege access, environment key separation, and validation at public API boundaries. Additional details are available in the Security Overview.

Jishu Labs uses sub-processors to host, secure, authenticate, store, bill, email, and process data necessary to provide the Service. The current list, including each provider's purpose and region, is available on the Sub-processors page.

Audio and generated transcripts are used only to provide the Service to the customer. Customer content is not used to train Jishu Labs models or the foundation models of our speech and AI sub-processors, and is not sold or licensed to third parties.

We will provide reasonable assistance for data subject requests, security inquiries, deletion requests, and regulatory questions where the requested information is available to us and relates to the customer's use of Kiku.

Customers can export their transcripts through the application. Upon verified deletion request or account closure, Jishu Labs will delete or anonymize customer data according to the Privacy Policy and operational backup retention needs.

For DPA requests or privacy procurement questions, contact us through the contact page or at hello@jishulabs.com.