1. About this policy
This policy explains what personal information SayaCam collects, why, who else handles it, how long we keep it and what you can ask us to do with it. It applies to hosts, to guests who join an album, and to anyone who contacts us or joins the waitlist.
We follow the Data Privacy Act of 2012 (Republic Act No. 10173) and the rules of the National Privacy Commission. In short:
- Albums are private. Only people with your QR code or 8-letter join code can open one.
- Files are kept in private storage and shown through links that expire after an hour.
- Guests are identified only by the name they type. We don't ask them for an email or phone number.
- When you delete an album, its photos, videos and guest list are deleted with it.
- You pay from your own GCash, Maya or bank app. SayaCam never sees your e-wallet or bank login.
2. What we collect
- Hosts: your email address, your password (kept only in scrambled, hashed form by our sign-in provider), when you verified your email, and which version of our terms you agreed to and when.
- If you sign in with Google: your name, email address and profile picture link from your Google account, and its account ID. We don't receive your Google password, and we can't post anything or see your other Google data.
- Albums: the event name and date you type, the join code, the plan and how much storage is used.
- Guests: the name a guest types to join. We don't ask guests for an email address, phone number or account.
- Photos and videos: the files that are uploaded, with their type, size, upload time and any caption. Photos keep the details the phone saved in them, which can include where and when they were taken, unless the photo was too large and was resized before upload. You can turn off location tagging in your phone's camera settings.
- Reactions and comments: the reaction a guest chose, and the comments and replies they write, with the name they joined with.
- Payments: the plan bought, the amount, and the transfer details from MariBank's payment alert (amount, time, reference number and the sender's bank or e-wallet with the last digits of the account). We never receive e-wallet or bank logins or PINs.
- Contact form: your name, email address, topic and message.
- Waitlist: your name, your email address or mobile number, whether you are a couple, planner or supplier, the month of your event, and which link brought you to the page.
- Technical records: our servers write a short record of each request (the action, the result and how long it took) so we can fix problems. Names, email addresses, codes and web addresses are left out of these records.
3. Why we use it
- To provide the service you asked for: open your account, show an album to its host and guests, take payment and apply your plan.
- To keep the service safe: stop spam on the contact and waitlist forms, prevent abuse and find problems.
- To reply when you contact us, and to tell people on the waitlist when SayaCam opens.
- To meet our legal duties, such as keeping payment records.
- We don't sell personal information, we don't show advertising, and we don't use photos, videos or comments to train AI models.
6. How long we keep it
- Photos, videos, reactions and comments are deleted when the album's gallery period ends, or earlier if the host deletes them or the whole album. Each plan's gallery period is listed in our Terms and Conditions and on the pricing page.
- Guest names are deleted with the album.
- Host accounts are kept until you ask us to delete them.
- Payment records are kept for as long as tax and accounting law requires, even after an album is deleted.
- Contact messages are kept while we deal with them and for a reasonable time after. Waitlist details are kept until we have told you SayaCam is open, or until you ask us to remove them.
7. Keeping it safe
- An album can only be opened with its QR code or join code, and files are shown through links that stop working after an hour.
- Only our own server can read or change the database, and every table has access rules switched on.
- All traffic to and from SayaCam is encrypted (HTTPS).
- If a breach puts your information at real risk, we will tell you and the National Privacy Commission as the law requires.
8. Your rights
Under the Data Privacy Act you have the right to be told how your information is used, to see it and get a copy, to have it corrected, to object to its use, to have it deleted or blocked, and to be compensated if you are harmed by its misuse.
To use any of these rights, send us a message through the contact page. We may ask you to confirm who you are first. Guests can delete their own uploads and comments in the album, or ask the host to remove anything else.
If you aren't happy with our answer, you can complain to the National Privacy Commission (privacy.gov.ph).
9. Children
Host accounts are for adults (18 and over). SayaCam is not meant for children to use on their own. If a child appears in an album and a parent or guardian wants the photo removed, ask the host or contact us.
10. Changes to this policy
If we change how we handle personal information, we will update this page and the date at the top. If a change is important, we will email hosts before it takes effect.
Questions about your privacy
Send us a message through the contact page.