Data Processing Addendum

This Data Processing Addendum (“DPA”) describes how Jishu Labs processes personal data on behalf of customers who use Sensei. If you need a signed DPA for an enterprise procurement process, contact us so we can complete the appropriate agreement.

For customer account data and submitted code handled through Sensei, the customer is generally the controller or business, and Jishu Labs acts as processor or service provider as instructed by the customer through use of the Service.

• Subject matter: Providing AI-powered code analysis and related product features.
• Duration: For the life of the customer account unless deleted earlier.
• Data categories: Account details, submitted snippets, analysis results, settings, and usage data.
• Data subjects: Customer users and invited workspace participants.
• Purpose: Operating, securing, supporting, and improving the Service.

Jishu Labs maintains technical and organizational measures designed to protect customer data, including encrypted transport, access control, environment key separation, scoped repository access, and validation at public API boundaries. Additional details are available in the Security Overview.

Jishu Labs may use sub-processors to host, secure, authenticate, store, or analyze data necessary to provide the Service. The current list is available on the Sub-processors page.

We will provide reasonable assistance for data subject requests, security inquiries, deletion requests, and regulatory questions where the requested information is available to us and relates to the customer's use of Sensei.

Customers can export product data through the application where available. Upon verified deletion request or account closure, Jishu Labs will delete or anonymize customer data according to the Privacy Policy and operational backup retention needs.

For DPA requests or privacy procurement questions, contact us through the contact page.