Legal
Version 2026-09-draft-1 · Updated 27 September 2026
This policy explains how Scribble Green Limited, trading as Scribble Green Technology ("Scribble Green", "we", "us") handles personal information about the people who use Genni. It is written to meet the Nigeria Data Protection Act 2023 (NDPA). How we process the contents of documents your organisation uploads is covered by the Data Processing Agreement.
Account details: your name, work email, the organisation you belong to and your role in it.
Records of your decisions: when you accepted our terms or changed data bank sharing, with the document version, time, IP address and browser, kept as evidence of consent.
Usage information: sign-ins, actions in the portal, API requests, and technical logs such as IP addresses and error reports.
Billing information (when billing launches): what you bought and when. Card and bank details are handled by our payment provider, not stored by us.
To provide Genni to your organisation (performance of our contract with it), to keep it secure and fix problems (our legitimate interests), to keep records the law requires, and to send service emails about your account. We do not sell personal information or use it for advertising.
We use the service providers listed below. Some are outside Nigeria; where personal information is transferred abroad we rely on the safeguards the NDPA allows, including the providers' contractual data protection commitments.
Account information is kept while your account is active and for up to 12 months after it closes, then deleted. Consent records are kept for as long as the consent is relied on and for 6 years afterwards, as evidence. Technical logs are kept for up to 90 days.
Under the NDPA you may ask to access, correct or delete your personal information, object to or restrict its use, receive a copy in a portable format, and withdraw consent where we rely on it. Email hello@scribblegreen.com; we respond within the time the law requires. You may also complain to the Nigeria Data Protection Commission.
Data is encrypted in transit, stored with access restricted to the Genni service, and separated between organisations. API keys are stored only as secure hashes.
Questions or requests: hello@scribblegreen.com, or by post to Scribble Green Limited, Lagos, Nigeria.
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database, file storage and sign-in | European Union (Ireland) |
| Railway | Runs the Genni engine and API | United States / European Union |
| OpenAI | AI reading of statement pages (under its API terms, which exclude training on API data) | United States |
| Netlify | Hosts the Genni portal website | Global content delivery network |
| Resend | Sends account and notification emails | European Union (Ireland) |
| Korapay | Processes payments (when billing launches) | Nigeria |