Applies to all Shout About Us platforms and services, including shoutaboutus.com, Review Navigator (online-review-manager.com), and Response Scribe (responsescribe.com). Visitors to online-review-manager.com and responsescribe.com are directed to this policy, which governs all data practices of Shout About Us, Inc.
Shout About Us, Inc. ("Shout About Us," "SAU," "we," "us," or "our") is a Delaware corporation headquartered in Del Mar, California, United States. We provide cloud-based review management infrastructure and software services to businesses, SaaS platforms, and enterprise partners.
This Privacy Policy describes how we collect, use, store, share, and protect personal information across all of our platforms and services. It applies to:
Shout About Us, Inc. operates the following platforms, all of which are governed by this Privacy Policy:
These platforms operate on dedicated AWS cloud infrastructure with enterprise-grade security controls described in Section 5 of this policy.
These platforms serve our existing SMB and agency customer base and are hosted on separate infrastructure maintained with commercially reasonable security measures appropriate to SMB-grade services. We are actively migrating legacy platform customers to our enterprise infrastructure over the next 12 to 24 months.
Legacy platform users: Visitors to online-review-manager.com and responsescribe.com are directed to this policy at shoutaboutus.com/privacy-policy. The data practices described in this policy apply to all platforms. Where security capabilities differ between platform generations, this is noted explicitly in Section 5.
When providing Review Data and Review Management infrastructure services to enterprise partners, we process the following categories of personal information on behalf of those partners:
Note on data collection methodology: SAU employs proprietary technology to collect review data from Supported Platforms and to publish responses on Supported Platforms on behalf of our partners. The availability of these capabilities is subject to the ongoing accessibility of each platform and is not guaranteed. SAU is not liable for interruptions caused by third-party platform restrictions, access changes, or policy modifications.
When providing Review Navigator and Response Scribe services to SMB customers, we process:
When you visit shoutaboutus.com, we may collect:
When organizations enter into a commercial relationship with us, we collect:
We collect employment-related information from current and prospective employees and independent contractors, including contact information, employment history, and information necessary to administer the employment or contractor relationship. We use this information solely for the purposes of that relationship and retain it only as long as legally required.
We do not knowingly collect:
We use personal information only for the purposes for which it was collected. We never sell personal information to third parties, and we never use personal information for automated decision-making that produces legal or significant effects on individuals without human review.
We share personal information only in the following circumstances:
We engage trusted third-party service providers to assist in delivering our services. All sub-processors are bound by Data Processing Agreements and are required to protect personal information to the same standard as Shout About Us. Our current sub-processors include:
We maintain a current sub-processor list and will notify our enterprise partners at least 30 days before engaging any new sub-processor that processes their customers' personal data.
For enterprise platform services, we share personal information with the partner organization on whose behalf we are processing that data, in accordance with our contractual terms. Enterprise partners are responsible for their own privacy practices with respect to their end customers.
We may disclose personal information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, protect the safety of any person, or investigate fraud. Where legally permitted, we will notify affected parties before making such disclosure.
In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal information may be transferred as part of that transaction. We will notify affected individuals and partners prior to any such transfer and will ensure that the receiving entity is bound by privacy protections at least equivalent to those in this policy.
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, contractual, or reporting requirements. When personal information is no longer needed, it is securely deleted or anonymized.
Upon expiry of the applicable retention period, personal information on our enterprise platforms is securely deleted using cryptographic erasure for encrypted data stores, with destruction events logged for audit purposes.
We implement and maintain appropriate technical and organizational security measures to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction. Our security posture differs across our platform generations as described below.
Our enterprise infrastructure platforms operate on dedicated AWS cloud infrastructure with the following controls:
Our legacy SMB platforms — Review Navigator (online-review-manager.com) and Response Scribe (responsescribe.com) — are hosted on separate infrastructure and maintained with commercially reasonable security measures appropriate to SMB-grade services, including encryption in transit, access controls, and regular maintenance. These platforms do not currently operate under the enterprise security stack described in Section 5.1.
We are actively migrating legacy platform customers to our enterprise infrastructure over the next 12 to 24 months. Customers will be notified in advance of any migration affecting their accounts.
Despite our security measures, no method of transmission over the internet or electronic storage is 100% secure. In the event of a security incident affecting personal information, we will notify affected parties and relevant regulatory authorities in accordance with applicable law and our contractual obligations.
Shout About Us acts in different capacities depending on the nature of the data relationship:
Data Processor (Enterprise Platform Services). When providing Review Data and Review Management infrastructure services to enterprise partners, SAU acts as a data processor operating on behalf of the partner (the data controller). In this capacity, we process personal information solely in accordance with our partners' documented instructions and our contractual terms, including the Data Processing Addendum incorporated into our enterprise agreements.
Data Controller (Legacy SMB Platforms and Website). When providing Review Navigator and Response Scribe services directly to SMB customers, and when operating our website, SAU acts as the data controller. In this capacity, we are responsible for determining the purposes and means of processing personal information, and the practices described in this Privacy Policy apply directly.
Where SAU's enterprise partners have their own end customers whose personal information flows through our infrastructure, those partners are responsible for their own privacy disclosures and for ensuring they have a lawful basis for sharing personal information with SAU.
Shout About Us is headquartered in the United States. Personal information processed through our platforms is primarily stored and processed in AWS data centers located in the United States.
Australian Residents. For personal information transferred from Australia to the United States, we have implemented contractual protections equivalent to the Australian Privacy Principles under the Privacy Act 1988 (Cth), consistent with the requirements for cross-border disclosure under APP 8.
EEA and UK Residents. For personal information transferred from the European Economic Area or the United Kingdom to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable.
Other Jurisdictions. We strive to comply with all applicable data protection and privacy laws in jurisdictions where we operate or have customers. If you have questions about data transfers applicable to your jurisdiction, please contact us using the details in Section 10.
Depending on your location and applicable law, you may have the following rights regarding your personal information. To exercise any of these rights, please contact us using the details in Section 10. We will respond to verified requests within the timeframes required by applicable law, generally 30 to 45 days.
Note for enterprise partner customers: If you are a customer of one of our enterprise partners (for example, a business whose review data is managed through our infrastructure), your privacy rights with respect to that data should be exercised directly with that partner, who acts as the data controller for your personal information. We will cooperate with our partners in fulfilling such requests.
Our website at shoutaboutus.com uses cookies and similar tracking technologies to improve your browsing experience and analyze website traffic.
You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. We do not use cookies for cross-site advertising or behavioral tracking.
Our legacy platforms (online-review-manager.com and responsescribe.com) also use session and functional cookies necessary for platform operation. No tracking cookies are used on those platforms for advertising purposes.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated policy at shoutaboutus.com/privacy-policy with a revised "Last Updated" date.
For material changes that significantly affect how we handle personal information, we will provide more prominent notice, which may include email notification to our business partners and SMB customers.
Legacy platform users: This policy also governs personal information processed through online-review-manager.com and responsescribe.com. Updates to this policy apply to all platforms operated by Shout About Us, Inc.
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or wish to make a complaint, please contact us:
Australian privacy complaints not resolved to your satisfaction may be directed to the Office of the Australian Information Commissioner (OAIC):
GDPR-related complaints may be directed to your local supervisory authority in the EU or UK.
California privacy complaints may be directed to the California Privacy Protection Agency (CPPA) at cppa.ca.gov.
For quick reference, the following table summarizes all Shout About Us, Inc. platforms and how they relate to this Privacy Policy:
Migration notice: Shout About Us is actively migrating Review Navigator and Response Scribe customers to the enterprise infrastructure over the next 12 to 24 months. Customers will be notified in advance of any migration affecting their accounts.
The review management
API