Privacy Policy
Last updated:
Operator: Splash Lab Hong Kong Limited
1. Who we are
Splash Lab Hong Kong Limited (“we”, “us”, “our”) operates Kenna, including the Meta application named Kenna Ads, and the website trykenna.com. Contact us at contact@splashlab.ai about this policy or your personal data.
2. Information we handle
When you visit this website, infrastructure providers may process technical information such as IP address, browser and device information, requested pages, request times, and security events. If you email us, we receive your email address, name if provided, message, attachments, and other information you choose to share.
This public website does not currently offer registration, payment, Meta authorisation, or campaign execution. Where we conduct authorised Meta development tests, the data processed depends on the permissions granted and API calls actually made. It may include account or business identifiers, authorised advertising assets, campaign configuration and performance information, and access tokens needed for those calls. We do not request your Meta password. Granting a permission does not mean we retrieve every type of data that permission could make available.
3. How we use information
We use website technical data to deliver and secure the website and diagnose failures. We use correspondence to answer enquiries and privacy requests. Where authorised testing takes place, we use Meta data to develop and verify the specific advertising connection, reporting, or management functions being tested. We use data only for the stated purpose and permissions, and for necessary legal compliance or protection of rights. We do not sell personal data or use enquiry emails to subscribe you to unrelated marketing.
4. Providers and disclosures
Our website hosting and delivery setup uses Amazon Web Services (Amazon S3 and CloudFront); Cloudflare provides domain name resolution. Correspondence is handled through our business email service. The providers involved may process relevant technical or correspondence data to provide and secure their services. Access within our company is limited to people who need it for the relevant purpose. We may disclose necessary information to professional advisers or authorities when required by law or to protect legal rights.
This website does not send advertising-account data to an AI service. Before enabling product functionality that introduces new data recipients or purposes, we will update the relevant privacy information and obtain any necessary authorisation.
5. International processing and security
Our infrastructure and email providers may process data outside Hong Kong. We take practicable steps appropriate to the information to protect data processed on our behalf, including access controls and relevant provider arrangements. Website delivery uses HTTPS. No transmission or storage system can be guaranteed completely secure. Please do not send passwords, access tokens, or unnecessary sensitive data by email.
6. Retention
We retain personal data only for as long as needed for the purpose for which it was collected, relevant follow-up, and applicable legal or record-keeping requirements. Correspondence is reviewed for continuing relevance. Authorised test data and credentials are retained only as needed for the specific test or connection and are deleted or revoked when no longer needed, subject to necessary legal retention. Infrastructure records follow the applicable provider and configured retention arrangements. If some information must be retained after a deletion request, we explain the reason and restrict further use to that purpose.
7. Cookies and tracking
This static website does not include application analytics, Meta Pixel, advertising trackers, third-party fonts, or account cookies. Infrastructure providers may process technical information necessary to deliver and protect their services. We will update this policy before introducing optional tracking and provide any choices required.
8. Access, correction and deletion
You can contact contact@splashlab.ai to ask about data we hold, request access or correction, request deletion, or raise a privacy concern. We may request proportionate information to verify your identity and locate records. We respond in accordance with applicable law and explain any lawful reason preventing full fulfilment.
For deletion steps, see our Data Deletion Instructions. Revoking Meta access prevents further authorised access but does not itself delete records already held by us; please also send a deletion request.
9. Children and external services
Kenna is intended for business audiences. This website is not directed at children. Contact us if you believe a child has provided personal data unnecessarily. External websites, including Meta services, operate under their own privacy policies.
10. Changes and contact
We update this policy when our practices change and show the revised date. Before opening new product capabilities to users, we will review the data handling and provide any additional notices required. Privacy contact: contact@splashlab.ai, Splash Lab Hong Kong Limited.