A public board, not a private chat.
Anyone with your venue’s link can read display names, roles, visible shoutouts and points. That includes someone who scans a poster. Keep notes about work and leave out personal information.
Search engines are asked not to index venue boards. That is not an access control or a guarantee that a link cannot be found.
Only what the recognition board needs.
The staff roster contains display names, roles, active status and personal codes. Shoutouts record who thanked whom, the category, note, time and moderation status.
The staff app does not ask for emails, phone numbers, schedules, pay or photos. ShoutBoard does not connect to your scheduling or payroll system. There are no advertising or analytics scripts on this website.
Changes require the right access.
- Staff enter a personal four-digit code to post as themselves at their venue.
- Managers use one shared PIN for their venue’s moderation, roster and settings.
- Public database access is read-only. Changes go through server checks.
- Staff codes are not returned by public or manager roster reads. Your own code is saved on your phone after you enter it.
These are simple access codes, not individual manager accounts or enterprise single sign-on. Use staff codes privately and keep the manager PIN within the management team.
Each venue has its own records and controls.
App requests are scoped to a venue. Manager actions are limited to that venue’s records, and database constraints reject shoutouts connecting staff from different venues.
That separation does not make visible board information confidential. Public display information can also be read through the public data interface. ShoutBoard’s administrator can access data to operate, support, secure and fix the service.
Recognition only.
The venue agreement commits venues not to use the board for performance reviews or discipline. Staff participation is optional. A shoutout count is not a measure of someone’s value or a complete record of their work.
A clear way to remove information.
Staff can ask a manager to hide a shoutout. They can ask their manager or ShoutBoard’s administrator to permanently delete their name and shoutouts sent or received. The service commitment is to complete deletion within seven days.
When a venue leaves, its data is deleted within 30 days, after an export if requested. Pausing service hides the board but keeps the data until service resumes or ends.
Hosting and incident handling.
Supabase hosts the database and Vercel hosts the website. If ShoutBoard learns of unauthorized access to venue data, it commits to notify the affected venue in writing within 72 hours.
Read the full website and staff privacy notice for storage, visibility and request details.