piccello.
How it worksLive demoThemesFeaturesPricing
Book your event
Legal

Privacy Policy

Last updated: October 2, 2026

  1. Who we are
  2. What we collect
  3. Analytics and session recording
  4. Why we use it
  5. Photo screening
  6. Who sees what
  7. Service providers
  8. How long we keep it
  9. Guests under 18
  10. Cookies and local storage
  11. Your rights
  12. How to remove a photo
  13. Changes to this notice

Who we are

Piccello runs photo bingo games for events. For the personal information described here, Piccello is the personal information controller under the Data Privacy Act of 2012 (Republic Act No. 10173). Our Data Protection Officer can be reached at support@piccello.com.

Piccello
Cebu City, Cebu 6000
Philippines
support@piccello.com

What we collect

Organizers. Your email address. If you sign in with Google, the name, email address and profile picture Google shares with us. The details of your event. For paid events, the payment record: amount, status, payment method type, PayMongo reference and payer email. PayMongo handles your card or e-wallet details. We never see or store your card number.

Guests. Guests do not sign up. We create an anonymous account and keep the display name you choose, plus the photos, captions, board marks and Moments you add to the event.

Everyone. Device, log and IP address data, which we use to keep the service secure and working.

Analytics and session recording

PostHog. On the live site, we use PostHog to understand how people use Piccello, including guests playing at an event. Session recording runs only on our marketing pages and the organizer console: inputs are masked and photos and video are hidden, but other text on the screen can be recorded.

Sentry. We use Sentry to catch errors. It records a replay of 1% of sessions and 10% of sessions with an error, with text, inputs and media masked.

Why we use it

Under Republic Act No. 10173, we rely on these lawful bases:

  • Running your event (contract): creating the event, letting guests play, showing photos and sending event emails.
  • Security and debugging (legitimate interest): preventing abuse, fixing errors and improving the service.
  • Check-in emails after a free preview (legitimate interest): asking how your event went. You can unsubscribe from any of them.
  • Tax records (legal obligation): keeping payment records.

Photo screening

When an event has photo screening on, each photo is sent to OpenAI's moderation API, which returns a safe or unsafe signal. Organizers can turn screening off for their event.

Who sees what

  • Organizers see guests' display names, photos and board marks, and can download every event photo while photos are online.
  • The big screen and the photo feed show photos to the room.
  • Anyone with a shared board link can see that board.

Service providers

These providers process personal information for us:

ProviderPurposeDataLocation
SupabaseDatabase, sign-in and photo storageAccount, event and payment records; photosSingapore
VercelWebsite and app hostingRequests, IP addresses and logsUnited States
ResendSending emailEmail address and message contentUnited States
SentryError monitoringError reports, device data and masked session replaysUnited States
PostHogProduct analyticsUsage events and masked session recordingsUnited States
OpenAIPhoto screening, when an event has it onPhotos sent for screeningUnited States
GoogleSign in with GoogleName, email and profile pictureProvider's global infrastructure
PayMongoPaymentsCard and e-wallet details, payer emailPhilippines

Some of your data is processed outside the Philippines. We do this under agreements with these providers that protect it.

How long we keep it

  • Photos stay online for 30 days (paid events) or 7 days (free previews) after the event ends, then are deleted. An organizer may ask us to extend this by up to 90 days.
  • Accounts are kept until you ask us to delete them.
  • Payment records are kept for as long as Philippine tax law requires.

Guests under 18

Guests under 18 may play with a parent or guardian's permission. The organizer is responsible for that at their event. We collect only the name a guest types and the photos they take. A parent or guardian can ask us to remove a child's data at support@piccello.com.

Cookies and local storage

  • A sign-in session cookie from Supabase, which keeps you signed in.
  • An event recovery cookie, which gets you back into your event.
  • Local storage for small preferences, such as the raffle sound and prompts you have dismissed.
  • PostHog storage on the live site, as described above.

Your rights

Under the Data Privacy Act, you have the right to:

  • be informed about how your data is used
  • access your data
  • object to processing
  • have your data erased or blocked
  • correct your data
  • data portability
  • damages
  • file a complaint

To use any of these rights, email support@piccello.com. If we don't resolve your concern, you can complain to the National Privacy Commission at privacy.gov.ph.

How to remove a photo

Guests can hide their own photos from the feed and delete their own Moments in the app. For a photo of you taken by someone else, email support@piccello.com with the event code. We reply the same day.

Changes to this notice

If we make a material change, we show it on this page with a new date.

piccello.

The photo bingo game for parties, shot entirely by your guests.

Product
How it worksThemesFeaturesPricing
Company
Contact
Legal
PrivacyTermsRefunds
© 2026 Piccello. All rights reserved.piccello.com