Privacy Policy
Last updated: October 2, 2026
Who we are
Piccello runs photo bingo games for events. For the personal information described here, Piccello is the personal information controller under the Data Privacy Act of 2012 (Republic Act No. 10173). Our Data Protection Officer can be reached at support@piccello.com.
PiccelloCebu City, Cebu 6000
Philippines
support@piccello.com
What we collect
Organizers. Your email address. If you sign in with Google, the name, email address and profile picture Google shares with us. The details of your event. For paid events, the payment record: amount, status, payment method type, PayMongo reference and payer email. PayMongo handles your card or e-wallet details. We never see or store your card number.
Guests. Guests do not sign up. We create an anonymous account and keep the display name you choose, plus the photos, captions, board marks and Moments you add to the event.
Everyone. Device, log and IP address data, which we use to keep the service secure and working.
Analytics and session recording
PostHog. On the live site, we use PostHog to understand how people use Piccello, including guests playing at an event. Session recording runs only on our marketing pages and the organizer console: inputs are masked and photos and video are hidden, but other text on the screen can be recorded.
Sentry. We use Sentry to catch errors. It records a replay of 1% of sessions and 10% of sessions with an error, with text, inputs and media masked.
Why we use it
Under Republic Act No. 10173, we rely on these lawful bases:
- Running your event (contract): creating the event, letting guests play, showing photos and sending event emails.
- Security and debugging (legitimate interest): preventing abuse, fixing errors and improving the service.
- Check-in emails after a free preview (legitimate interest): asking how your event went. You can unsubscribe from any of them.
- Tax records (legal obligation): keeping payment records.
Photo screening
When an event has photo screening on, each photo is sent to OpenAI's moderation API, which returns a safe or unsafe signal. Organizers can turn screening off for their event.
Who sees what
- Organizers see guests' display names, photos and board marks, and can download every event photo while photos are online.
- The big screen and the photo feed show photos to the room.
- Anyone with a shared board link can see that board.
Service providers
These providers process personal information for us:
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Database, sign-in and photo storage | Account, event and payment records; photos | Singapore |
| Vercel | Website and app hosting | Requests, IP addresses and logs | United States |
| Resend | Sending email | Email address and message content | United States |
| Sentry | Error monitoring | Error reports, device data and masked session replays | United States |
| PostHog | Product analytics | Usage events and masked session recordings | United States |
| OpenAI | Photo screening, when an event has it on | Photos sent for screening | United States |
| Sign in with Google | Name, email and profile picture | Provider's global infrastructure | |
| PayMongo | Payments | Card and e-wallet details, payer email | Philippines |
Some of your data is processed outside the Philippines. We do this under agreements with these providers that protect it.
How long we keep it
- Photos stay online for 30 days (paid events) or 7 days (free previews) after the event ends, then are deleted. An organizer may ask us to extend this by up to 90 days.
- Accounts are kept until you ask us to delete them.
- Payment records are kept for as long as Philippine tax law requires.
Guests under 18
Guests under 18 may play with a parent or guardian's permission. The organizer is responsible for that at their event. We collect only the name a guest types and the photos they take. A parent or guardian can ask us to remove a child's data at support@piccello.com.
Cookies and local storage
- A sign-in session cookie from Supabase, which keeps you signed in.
- An event recovery cookie, which gets you back into your event.
- Local storage for small preferences, such as the raffle sound and prompts you have dismissed.
- PostHog storage on the live site, as described above.
Your rights
Under the Data Privacy Act, you have the right to:
- be informed about how your data is used
- access your data
- object to processing
- have your data erased or blocked
- correct your data
- data portability
- damages
- file a complaint
To use any of these rights, email support@piccello.com. If we don't resolve your concern, you can complain to the National Privacy Commission at privacy.gov.ph.
How to remove a photo
Guests can hide their own photos from the feed and delete their own Moments in the app. For a photo of you taken by someone else, email support@piccello.com with the event code. We reply the same day.
Changes to this notice
If we make a material change, we show it on this page with a new date.