Privacy Policy

Last updated: October 23, 2026

ShoutOut ("we", "us", "our") operates the ShoutOut mobile app and connects businesses with social media creators for paid campaigns. This policy explains what information we collect, how we use it, and the choices you have. It applies to both Creator and Business accounts.

Information you provide directly

Account details: name, email address, phone number, and password (stored only as a salted, irreversible hash - we never store or can see your plain-text password).

Profile information: for Creators - display name, username/handle, bio, gender, date of birth, profile photo, location, audience location, follower count, indicative pricing, niches, and rate card/portfolio items. For Businesses - company name, username/handle, logo, description, gender, follower count, industry, location, annual revenue range, and Google Business/Maps details.

Content you create: messages you send in chat (including images you share), campaign listings, campaign applications and proposals, reviews and ratings you leave, and reports you file against other users.

Information from social account connections

If you tap "Connect" to link an Instagram or Facebook account, we use Meta’s Graph API to read your connected Facebook Page name and follower/fan count, and your linked Instagram Business Account’s handle and follower count. We store a long-lived access token so we can periodically refresh these numbers - this token is never shown back to you or any other user, and you can disconnect at any time. For other platforms (YouTube, X, Google Business), you provide a public profile URL, and we may fetch publicly available metrics (subscriber count, ratings) via that platform’s own public API.

If you sign in or register with Google or Apple, we receive the name, email, and account identifier that platform shares with us under your control at the time.

Payment and financial information

If you use the ShoutOut Wallet (recharge, pay for services, or - for Creators - request a real payout), your payment is processed directly by Razorpay (and RazorpayX for payouts). We do not see or store your card or UPI payment details when you top up your wallet - Razorpay handles those under its own security and privacy practices. If you are a Creator and set up payouts, we store the bank account number and IFSC, or UPI ID, that you give us, so we can send your earnings through RazorpayX. Our admins only ever see the last few digits. We also store the resulting transaction records, wallet balance, and invoices in your account so you can see your own history.

Information collected automatically

Device and diagnostic information: if a crash or error occurs, our error-tracking tool (Sentry) may receive a stack trace, device/OS details, and the app version, to help us fix the problem. This does not include your password or payment details.

Usage data: standard request logs (endpoint called, timestamp, response status) for security and reliability purposes.

How we use your information

To create and secure your account, operate the marketplace (matching businesses and creators, processing campaign applications, enabling chat), process payments and payouts, send you account-related email or SMS (verification codes, password resets), respond to support requests and reports, and maintain the security and integrity of the platform (e.g. detecting abuse, blocked/reported users).

Who we share information with

Other users, as intended by the app’s purpose: your public profile (name/handle, photo, bio, follower counts, ratings) is visible to the other role (Businesses see Creator profiles and vice versa) as part of discovery and campaign matching. Messages you send are visible to the conversation’s other participant.

Service providers who process data on our behalf: Razorpay/RazorpayX (payments and payouts), Meta/Google/Apple (sign-in and social account connection, governed also by their own privacy policies), Google (Gmail SMTP for email, YouTube Data API and Places API for public metrics), X (public profile metrics), Twilio (SMS delivery), Amazon Web Services (file storage and hosting), and Sentry (crash/error reporting).

We do not sell your personal information.

Your choices and rights

You can review and edit most of your profile information at any time from Edit Profile. You can disconnect a linked Instagram/Facebook account at any time. You can turn off push notifications from Profile > Notification. To request access to, correction of, or deletion of your personal data, or to close your account, contact us using the details below - we will respond within a reasonable time and in line with applicable law.

Data retention

We retain your account and content for as long as your account is active, or as needed to provide the service (e.g. transaction records for financial/tax purposes). If you request account deletion, we will remove or anonymize personal information we are not legally required to keep.

Children’s privacy

ShoutOut is not directed at children and is not intended for use by anyone under the age required by law to hold an account in their country. We do not knowingly collect personal information from children.

Security

We use industry-standard measures to protect your information, including password hashing, encrypted connections (HTTPS/TLS), and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above when we do, and material changes will be highlighted in the app.

Contact us

If you have questions about this policy or your information, contact us at meeranmehdisyed@gmail.com.