Legal · Privacy

Privacy Policy

How we handle your data, why we collect what we collect, and the rights you keep at every step. Plain English, no surprises.

Last updated · October 27, 2026

01

Introduction

Jumbi (“we”, “our” or “us”) is operated by Jishu Labs LLC. This Privacy Policy explains how we collect, use, disclose and protect your information when you use our AI readiness assessment service at jumbi.jishulabs.com (the “Service”). We are committed to protecting your privacy and the confidentiality of the code you assess and the results we produce for you.

02

Information We Collect

We collect the following types of information:

  • Account information: Your name, email address and password when you create an account.
  • Code you submit: The code you paste and the files you upload so Jumbi can assess them.
  • Assessment results: The overall and category scores, findings (including the file names they point to), gaps, action plans and recommendations Jumbi produces for you.
  • Settings: Preferences you choose in settings, such as your role and notification choices.
  • Contact messages: Your name, email address and message when you write to us through the contact form.
  • Technical data: Your IP address and browser details, which our hosting provider records in server logs and which we use to rate-limit the contact form.
  • Product analytics: Pages visited, clicks, scroll depth, page performance (Core Web Vitals), JavaScript errors and session replays, recorded with PostHog. Replays mask everything you type, and on signed-in workspace pages they mask all on-screen text, so the code and assessments in your workspace are not captured.
03

How We Use Your Information

  • To provide and maintain the readiness assessment Service
  • To scan the code you submit and produce your scores, gaps and action plan
  • To keep your assessment history, reports and analytics in your account
  • To answer messages you send us and send important service and security notices
  • To protect the Service against abuse
  • To improve the quality of our assessments
04

Code and Assessment Privacy

The privacy of your code and your assessments is our top priority. Today, assessments are scored by Jumbi's own rules on our servers; the code you submit is not sent to a third-party AI provider. What Jumbi saves to your account are the results of the assessment.

Everything is scoped to your account and stored encrypted at rest. We never share your code or assessments with other users, use them to train AI models, sell or license them, or make them publicly accessible. You can delete any assessment, or your whole account, at any time.

05

Data Storage and Retention

Your data is stored with Supabase in a PostgreSQL database protected by row level security policies, so only your account can read your assessments. Data is encrypted at rest and sent over TLS. We keep your data while your account is active. You can export your assessments as JSON at any time, and deleting your account removes all associated data permanently.

06

Third-Party Services

We use the following third-party services to operate Jumbi:

  • Supabase: Authentication and the PostgreSQL database that holds your account and assessments.
  • Netlify: Hosting and production web infrastructure.
  • Resend: Delivers the messages you send through the contact form to our inbox.
  • PostHog: Product analytics and session replay, provided by PostHog, Inc. and hosted in the United States. This data is not sold or used for advertising, and it is not used to train AI models.

The current list is also on the Sub-processors page.

07

Your Rights

You have the right to access your personal data, export your assessments, correct inaccurate information, delete your account and all associated data, and opt out of non-essential communications. To exercise these rights, use Settings or contact us at the address below.

08

Cookies

We use essential cookies for signing in, keeping your session and running the demo workspace, and PostHog analytics cookies and local storage (names start with ph_) for product analytics. The analytics storage is set on .jishulabs.com and shared with jishulabs.com and the other Jishu Labs tools. If you declined cookies on jishulabs.com, analytics is not loaded. We do not use advertising cookies. For details, see our Cookie Policy.

09

Changes to This Policy

We may update this Privacy Policy from time to time. We will post any material change on this page and update the “Last updated” date above.

10

Contact Us

If you have questions about this Privacy Policy, use our contact page or email admin@jishulabs.com.

Questions about this document? Get in touch.