Privacy policy

Kenna is provided by Carlos Dorronsoro Málaga, as an individual. For any privacy matter: carlos.dorronsoro.malaga@gmail.com.

Each company that uses Kenna decides which people go on its contact list and what its team captures at an event. For that data, the company is the controller and Kenna acts as processor: it processes the data only to provide the service and on the company's instructions.

• Your account: name, email, the company you belong to (through its code), the language you choose and whether you want alerts. If you administer the company, an encrypted hash of your password; the password itself is not stored.
• Session: a cookie so you do not have to sign in every time, and first-party cookies to remember the event you are working on. We use no advertising cookies and no third-party analytics.
• Photos taken by the team: badges, business cards or faces, taken at the event. They are kept in private storage that only your company can access. If the photo is of a badge, what is read from it (name, organisation and role) is stored too.
• People of interest: what your company uploads to its list (name and, if included, organisation, role, country, tags and notes) and what the team notes when capturing.
• Alerts: the address your phone's system provides to deliver notifications, and a log of each delivery to know whether it arrived.

• Giving you access and knowing which company you belong to.
• Keeping what your team captures and preparing a card for each person.
• Alerting whoever has alerts switched on, right away.
• Finding and fixing problems, such as an alert that did not arrive.

Your account is processed to provide the service you use (performance of the contract with your company). Data about captured people is processed on the basis of the company's legitimate interest in its business activity at the event. We make no automated decisions that affect you and build no advertising profiles.

• Vercel hosts the application and the photos, in Frankfurt (EU).
• Neon hosts the database, in Frankfurt (EU).
• OpenAI reads badge photos and searches public information to complete a card (name, organisation and the team's note). Its European data residency service is used where available; otherwise processing may take place in the United States, under the European Commission's standard contractual clauses.
• PubMed (US National Library of Medicine) is queried, with the person's name, only if the company has scientific publication search switched on.
• Apple and Google deliver notifications to your phone.

Apart from these providers, data is only seen by your company's accounts, according to their permissions, and by Carlos when needed to maintain the service. We do not sell data or share it with third parties for commercial purposes.

For as long as your company uses Kenna, or until deletion is requested. When a capture is deleted, its photos are deleted too. If your company stops using the service, its data is deleted.

You can ask to access, correct or delete your data, object to or restrict its processing, or receive it in a portable format. Email carlos.dorronsoro.malaga@gmail.com with your account email or, if you were captured at an event, your name, the company and the event. We will reply within one month.

To delete your account, email the same address from the address you sign in with.

If you think your request was not handled properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority in your country.

Kenna is a professional tool and is not directed at children under 16. If a photo or a card is of a child, email us and we will remove it.

If anything important changes, we will update this page and the date above.