Genni

Legal

Data Processing Agreement

Version 2026-09-28 · Updated 28 September 2026

Genni is provided by Scribble Green Limited (RC 7778268), a private company limited by shares, incorporated in Nigeria on 30 July 2024 under the Companies and Allied Matters Act 2020. If this document changes materially, you will be asked to accept the new version.

This agreement forms part of the Terms of Service between your organisation (the "Controller") and Scribble Green Limited (RC 7778268), a private company limited by shares, incorporated in Nigeria on 30 July 2024 under the Companies and Allied Matters Act 2020, which provides Genni under its Scribble Green Technology brand ("Scribble Green", "we", "us") (the "Processor"). It covers the documents your organisation uploads to Genni and the data extracted from them ("Client Data").

1. Instructions

We process Client Data only to provide Genni to you: storing documents, reading and extracting figures, checking them, and making the results available to you. We do not use Client Data for any other purpose, except the data bank contribution you may separately enable.

2. Confidentiality and security

Only people who need access to operate or support Genni, or to check the quality of its results, can reach Client Data, under confidentiality obligations; their access through Genni's admin console is limited to authorised staff. Client Data is encrypted in transit, kept in private storage, and isolated between organisations. We will notify you without undue delay, and within 72 hours where possible, after becoming aware of a breach affecting your Client Data.

3. Sub-processors

You authorise the sub-processors listed below. We will give notice in the portal before adding or replacing one, and you may object; if we cannot address a reasonable objection you may end the service.

4. Retention and deletion

Documents and extracted data are kept until you delete them. Deleting a document in the portal or through the API removes the file and everything extracted from it. When your organisation closes, we delete its Client Data within 30 days, apart from any data bank contributions made under your consent, which you can have removed at any time as the Data Bank terms describe.

5. Assistance and audits

We will help you respond to requests from individuals and regulators about Client Data, and give you the information reasonably needed to show compliance with the NDPA.

Service providers (sub-processors)

ProviderWhat it doesWhere
SupabaseDatabase, file storage and sign-inEuropean Union (Ireland)
RailwayRuns the Genni engine and APIUnited States / European Union
OpenAIAI reading of statement pages (under its API terms, which exclude training on API data)United States
NetlifyHosts the Genni portal websiteGlobal content delivery network
ResendSends account and notification emailsEuropean Union (Ireland)
KorapayProcesses card and bank paymentsNigeria

Terms · Privacy · Data Processing Agreement · Data bank