Genni

Legal

Data Processing Agreement

Version 2026-09-draft-1 · Updated 27 September 2026

Draft pending legal review. This is the version in force until the reviewed text is published here; if it changes materially, you will be asked to accept the new version.

This agreement forms part of the Terms of Service between your organisation (the "Controller") and Scribble Green Limited, trading as Scribble Green Technology ("Scribble Green", "we", "us") (the "Processor"). It covers the documents your organisation uploads to Genni and the data extracted from them ("Client Data").

1. Instructions

We process Client Data only to provide Genni to you: storing documents, reading and extracting figures, checking them, and making the results available to you. We do not use Client Data for any other purpose, except the data bank contribution you may separately enable.

2. Confidentiality and security

Only people who need access to operate or support Genni can reach Client Data, under confidentiality obligations. Client Data is encrypted in transit, kept in private storage, and isolated between organisations. We will notify you without undue delay, and within 72 hours where possible, after becoming aware of a breach affecting your Client Data.

3. Sub-processors

You authorise the sub-processors listed below. We will give notice in the portal before adding or replacing one, and you may object; if we cannot address a reasonable objection you may end the service.

4. Retention and deletion

Documents and extracted data are kept until you delete them. Deleting a document in the portal or through the API removes the file and everything extracted from it. When your organisation closes, we delete its Client Data within 30 days, apart from any data bank contributions made under your consent.

5. Assistance and audits

We will help you respond to requests from individuals and regulators about Client Data, and give you the information reasonably needed to show compliance with the NDPA.

Service providers (sub-processors)

ProviderWhat it doesWhere
SupabaseDatabase, file storage and sign-inEuropean Union (Ireland)
RailwayRuns the Genni engine and APIUnited States / European Union
OpenAIAI reading of statement pages (under its API terms, which exclude training on API data)United States
NetlifyHosts the Genni portal websiteGlobal content delivery network
ResendSends account and notification emailsEuropean Union (Ireland)
KorapayProcesses payments (when billing launches)Nigeria

Terms · Privacy · Data Processing Agreement · Data bank