Privacy Policy

Overview

ShoutIt is a crypto-native platform where verified token holders publish and signal conviction through verified social shouts. This Privacy Policy describes what information we collect, why we collect it, how long we keep it, and the choices you have. It applies to the ShoutIt application and any page where this policy is linked.

Where a detail below is shown as a bracketed placeholder, that operator detail has not yet been finalized and will be completed before this policy is relied on for live users.

Information we collect

Email and account information. When you create a ShoutIt account we collect your email address and basic account information needed to authenticate you and communicate with you.

Connected wallet addresses. When you connect a wallet we record the public on-chain wallet address, the chain namespace (EVM or Solana), and the network. We never request, receive, or store private keys or seed phrases. Connecting a wallet does not give ShoutIt custody of your funds or permission to move, transfer, or approve assets on your behalf.

Public blockchain data used to verify holdings. To verify token holdings we query public blockchain data through a third-party provider (Alchemy). We read public on-chain balances for the assets and networks relevant to a verification. We store a normalized snapshot of the result (asset contract/mint address, balance, timestamp) so a Verified Shout can be audited. This is public on-chain data; we do not access any private wallet material to obtain it.

Connected X account information. When you connect X (formerly Twitter) we store the stable X account ID, which is the canonical social identity we rely on, separately from the mutable handle. We also store the current handle and display name for display purposes. We store OAuth tokens needed to act on your behalf only after you explicitly authorize the connection; these tokens are kept server-side and are never returned to any frontend client.

Shout activity and published posts. We record the shouts you create, the wallet and holding verification each shout references, and the content of posts you explicitly approve for publication. Once published natively to ShoutIt, a post is also governed by ShoutIt's own policies; if you separately choose to share a post to X, it is also governed by X's own policies and is visible on your X account.

Analytics and fraud/abuse prevention. We collect usage analytics (events, timestamps, device and request metadata) to understand product usage, measure performance, and detect, prevent, or respond to fraud, manipulation, abuse, and security incidents.

Service providers used to operate ShoutIt. We rely on third-party service providers to operate ShoutIt, including wallet connectivity (Reown/AppKit), on-chain data (Alchemy), social publishing (X), hosting and application infrastructure (Base44), and email. These providers process information only as needed to deliver the service and under their own terms.

How we use information

We use the information above to: authenticate accounts; verify wallet control and token holdings; connect and publish to X only with your explicit approval; operate, monitor, and secure the service; prevent fraud, spam, and manipulation; communicate with you about your account; and comply with legal obligations.

Key commitments

• ShoutIt never requests or stores private keys or seed phrases.
• Connecting a wallet does not give ShoutIt custody or permission to move funds.
• Connecting X does not automatically authorize posting.
• Every social post must be separately reviewed and explicitly approved by you before publication.

Data retention and deletion

We retain account and activity information for as long as your account is active and as needed to provide the service, comply with legal obligations, and resolve disputes. Wallet verification records and published-shout records may be retained to preserve auditability of Verified Shouts. You may request deletion of your account and associated personal information; we will delete or anonymize it where we are not legally required to retain it. On-chain data is public and immutable and cannot be deleted by ShoutIt.

Security

OAuth tokens are stored server-side and never exposed to the frontend. Sensitive credentials are kept in server-side secret storage and are not embedded in client code. Access to administrative and integration tools is restricted to authorized administrators. No method of transmission or storage is fully secure, however, and we cannot guarantee absolute security.

Your choices

You may connect or disconnect wallets and X accounts at any time. Disconnecting X removes the authorization used to post on your behalf. You are never required to publish a post; no post is published without your separate explicit approval for that post.

No custody and no automatic posting

ShoutIt is a non-custodial platform. We never take custody of your funds and never request permission to move, transfer, or approve assets. No social post is published automatically; every post requires your separate, explicit approval at the time of publication.

Contact requests

If you have a privacy question or wish to submit a data request, contact us at [Support email — to be provided]. We will respond in accordance with applicable law. The operator of ShoutIt is [Legal entity name — to be provided], [Mailing address — to be provided].

Updates

We may update this Privacy Policy as ShoutIt evolves. Material changes will be reflected in the "Last updated" date above. Continued use after changes constitutes acceptance of the updated policy.