Skip to content
PisoTool
Draft for review: this policy must be reviewed by a Philippine lawyer / Data Protection Officer before production use.

Privacy Policy

Last updated: November 8, 2026

PisoTool ("PisoTool", "we", "us") respects your privacy and processes personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).

1. The short version

  • Your files stay on your device. Photos, PDFs, images, resume details and invitation text are processed inside your web browser. They are not uploaded to our servers.
  • There is no sign-up. We store only an anonymous visitor record tied to your browser cookie, your payments and your download receipts. No email, no password.
  • Advertising cookies (Meta Pixel) are used only if you allow them, and never include your files or document contents.

2. Personal data we collect

Visitor record

An anonymous record created the first time you pay or download, linked to your browser by a session cookie: its creation date, a keyed hash of your IP address at that time, and the end time of your pass. We do not ask for your name, email or phone number.

Transaction data

Payments (amount, status, timestamps, payment reference numbers, and the sender name shown in the bank or e-wallet transfer notification) and the record of each pass granted (when it started and ended). You pay from your own e-wallet or bank app; we never see your e-wallet credentials, card numbers or bank login.

Export receipts

For each download we record the tool used, time, file format, number of files, whether a pass covered it, and a one-way "fingerprint" (SHA-256 hash) of the export settings. The fingerprint lets us offer free re-downloads of the same design; it cannot be used to reconstruct your file.

Usage and technical data

Anonymous, first-party usage events (e.g. "page viewed", "tool opened", "preview completed") tied to a random visitor ID cookie, the referring website and campaign tags (UTM). We store a keyed hash of your IP address for security (rate limiting, fraud prevention) rather than the raw address in our database, and your browser's user-agent string with your session.

Files you process

Not collected. Processing happens on your device. Exported files may be kept in your own browser's storage (IndexedDB) for the re-download period so you can download them again; you can clear them by clearing your browser's site data.

3. Why we process your data (purposes and lawful basis)

  • To create and secure your account and process your payments and downloads — necessary for the performance of our contract with you.
  • To prevent fraud, abuse and duplicate charges, and keep the service secure — our legitimate interests and legal obligations.
  • To keep accounting records of transactions — compliance with legal and tax obligations.
  • To measure and improve the service with anonymous statistics — legitimate interests.
  • To measure advertising (Meta Pixel) — only with your consent, which you can withdraw at any time via "Cookie settings".
  • To send transactional emails such as password resets. We do not send marketing emails without consent.

4. Cookies

  • Essential: session cookie (keeps you logged in, protects forms against CSRF), cookie-choice cookie, referral cookie (30 days, only if you open a referral link).
  • Analytics (first-party): a random visitor ID used only for our own anonymous statistics.
  • Advertising (optional): Meta Pixel cookies, loaded only after you select "Accept all". Events sent: page views, tool opened, checkout started, purchase amount, export completed. Never file names, file contents or personal document data.

5. Sharing

We share personal data only with: our payment processing partner (to complete your payment); hosting and email service providers acting on our instructions under data processing agreements; Meta Platforms (only advertising events, only with consent); and authorities when required by law. We do not sell personal data.

6. Retention

  • Account data: while your account is active, and deleted or anonymised within a reasonable period after you ask us to close it, except records we must keep by law.
  • Payment and ledger records: as long as required for accounting, tax and dispute purposes (generally up to 10 years under Philippine rules).
  • Anonymous usage events: up to about 13 months.
  • Security logs and sessions: short periods (sessions expire after 14 days of inactivity).

7. Security

We use HTTPS, hashed passwords, secure cookies, CSRF protection, rate limiting, access controls and audit logs for administrative actions. No system is perfectly secure; if a personal data breach occurs that requires notification, we will notify the NPC and affected users as required by law.

8. Your rights

Under the Data Privacy Act you have the right to be informed, to access, to object, to erasure or blocking, to rectification, to data portability, to damages, and to file a complaint with the National Privacy Commission (privacy.gov.ph). To exercise your rights, email support@pisotool.com from your registered email address.

9. Children

PisoTool is not directed at children under 13. Users under 18 should use PisoTool and make purchases with the consent and supervision of a parent or guardian.

10. Changes and contact

We will post updates on this page and change the "Last updated" date. Questions or concerns: support@pisotool.com (Attention: Data Protection Officer).