# Privacy Policy

**Scribed AI Limited** ("Scribed", "we", "us", "our")

*Last updated: April 2026*

---

## 1. Who We Are

Scribed is an AI-powered mortgage documentation platform built for New Zealand mortgage advisers. This Privacy Policy explains how we collect, use, store, and protect the information you and your clients provide when using Scribed.

## 2. Information We Collect

When you use Scribed, we may collect the following:

**Account Information** — your name, email address, business name, Financial Adviser Provider (FAP) details, and logo.

**Client Information** — any information you upload or enter about your clients in the course of using Scribed, including names, contact details, income and employment information, property details, loan structures, bank statements, and other financial data relevant to mortgage applications.

**Usage Information** — basic platform usage data such as login activity, document generation counts, and feature usage, used solely to maintain and improve the service.

## 3. How We Use Your Information

We use your information for one purpose: to provide you with the Scribed service. Specifically, this means generating mortgage documents (Statements of Advice, credit memos, Nature and Scope documents, expense analyses, bank handover forms, and related outputs) based on the data you provide.

That's it.

## 4. We Do Not Share Your Clients' Information

**We do not sell, rent, trade, or share your clients' information with anyone.** Not with third parties, not with advertisers, not with data brokers, not with other advisers, not with anyone at all.

Your clients' data is yours. It stays within your Scribed account and is used only to generate documents for you.

## 5. AI Processing

Scribed uses a configured third party AI provider to extract information and generate documents. When you use these functions, the relevant client data is sent to that provider for processing. The provider and its data handling terms must be disclosed in the current privacy notice and supplier register before production use.

## 6. Data Storage and Security

Your data is stored securely on servers located in a controlled environment. We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse, including encryption in transit, access controls, and regular backups.

No system is perfectly secure, and we cannot guarantee absolute security. However, we take the protection of your data seriously and continually work to improve our security practices.

## 7. Data Retention

Your data remains in your account for as long as your account is active. If you cancel your subscription, your data is retained for a reasonable period to allow you to resubscribe without losing your work. If you request deletion of your account and data, we will remove it from our active systems promptly, with complete deletion occurring within 30 days, except where retention is required by law.

## 8. Your Rights

You can request access to, correction of, or deletion of your personal information at any time by contacting us at support@scribed.co.nz. We will respond to your request within a reasonable timeframe.

## 9. Cookies

Scribed uses essential cookies only — specifically, session cookies to keep you logged in. We do not use tracking cookies, analytics cookies, or advertising cookies.

## 10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the platform. Your continued use of Scribed after any changes constitutes acceptance of the updated policy.

## 11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, contact us at:

**Scribed AI Limited**
Email: support@scribed.co.nz

---

*By using Scribed, you acknowledge that you have read and understood this Privacy Policy.*