Who runs the service.
ShoutBoard, operated by Sully E., provides staff recognition boards for restaurants and bars. Each venue controls its roster, settings and how the board is used. ShoutBoard handles staff information to provide, support, secure and fix the service for that venue.
The board is for recognition only. Participation is optional. Venues agree not to use it for performance evaluation or discipline.
What the staff service stores.
- Display name, normally first name and last initial; role; and active roster status.
- Shoutouts sent and received, including who, category, note and time.
- Whether a manager co-signed or hid a shoutout.
- A personal four-digit code set by a manager.
Venue records also include the venue’s name, branding, timezone, manager PIN, service status, trial information, team goal and perks text.
The staff service does not collect email addresses, phone numbers, home addresses, birthdays, government IDs, pay, schedules, photos or precise location. Do not put those details in a shoutout.
Website visits and contacting us.
This marketing website has no analytics scripts, advertising pixels, chat widgets or tracking cookies. The contact form sends your name, email address, venue and any optional details to FormSubmit, which forwards enquiries to our Gmail inbox. FormSubmit retains submissions for 30 days. We do not store enquiries in the staff recognition database.
If you contact us by form or email, you provide your email address and whatever information you include so we can respond and help with your request. The staff-data limits above describe the recognition app, not correspondence you choose to send. We use enquiries to respond and help with setup, not to add you to a marketing mailing list. You can email us to request deletion of your enquiry.
Vercel delivers the website and processes requests to operate its hosting service. “No tracking” here describes ShoutBoard’s advertising and analytics practices, not a promise that hosting infrastructure processes no technical request information. FormSubmit also receives technical request information when you submit. See its privacy policy.
What stays on the device.
The staff app uses browser storage to remember the chosen name and code for each venue, recent teammates, onboarding state and preferences such as sound. Clear browser data to remove device storage. “Not you?” clears the saved staff identity.
The operator console uses a host-only session cookie for administrator sign-in. The public marketing site and venue pages do not set tracking cookies.
Who can see it.
- Anyone with the venue link can read display names, roles, visible shoutouts and points. Public display records are also accessible through the public data interface.
- Venue managers can see hidden shoutouts and manage the roster and codes. Staff codes cannot be read back through the manager roster.
- ShoutBoard’s administrator can access the database to operate, support, secure and fix the service.
Staff information is not sold, rented, shared for marketing or used for advertising.
Separation and access controls.
Every record belongs to a venue. App requests and manager changes are scoped to that venue. Database constraints prevent shoutouts linking people across venues. Venue credentials authorize changes only within the relevant venue.
Visible boards remain public. Venue separation is not a promise that another person cannot open a public board link. See the security overview.
Hosting providers.
Supabase hosts the database in Canada. Vercel hosts the website. These providers process information to deliver the service under their own terms. ShoutBoard uses venue data only to provide the service.
Retention and deletion.
Information is kept while a venue uses ShoutBoard. Deactivating a staff member removes them from selection lists, but past shoutouts keep their display name. Pausing a venue hides its board and blocks changes while retaining its records.
When service ends, venue data is deleted within 30 days, after an export if the venue requests one. Staff can request permanent deletion of their name and all shoutouts they sent or received. ShoutBoard completes that request within seven days and confirms it to the person and venue.
Your choices and contact.
Ask a manager to hide a shoutout, explain what information is held, or pass on a deletion request. You may also contact the ShoutBoard administrator at peaklinemediagroup@gmail.com.
Keep notes work-related. Do not include health information, private life details or guests’ personal information. Hidden shoutouts disappear from public screens and do not count toward points.
Security incidents and notice changes.
ShoutBoard commits to tell an affected venue in writing within 72 hours of learning of unauthorized access to its data. If this notice changes materially, its date will change and venue managers will be asked to tell staff at lineup.