Shout! is a Google Chat app made by NimbusXR. This policy explains which information the app and website use and how it is handled.
What Shout! stores
- Spaces. For each space Shout! is added to: its id, title, description, member count, link, and the organization it belongs to. That is how
!namefinds the right space. Removing Shout! from a space deletes the record. - Organization. Your Google Workspace customer id, plan, subscription status and, if someone bought a plan, that person's email address.
- Billing. Payments are processed by Stripe. Shout! stores Stripe's customer and subscription ids, never card numbers.
- Logs. Operational logs for a short period: which space was shouted at and whether delivery worked. Not message text.
What Shout! reads but does not keep
To find !names, Shout! reads messages in spaces it has been added to. It looks for the pattern, posts the notification, and discards the message. Message contents are not stored, indexed, or used for anything else.
Sign-in on this website
Signing in here uses your Google account to confirm your email address and, for administrators, which organization you administer. The website keeps that in a signed cookie for up to 12 hours. It does not read your mail, files, calendar or directory beyond your own organization's record.
Website analytics
We use Plausible Analytics on the public pages of shout.nimbusxr.us to understand visits, referral sources, campaigns, and clicks to external sites such as Google Workspace Marketplace. Plausible provides aggregate reports, including browser, device type, and approximate location, without analytics cookies. It processes IP addresses to produce these reports but does not store them. See Plausible’s data policy.
Analytics does not run on account, billing, sign-in, staff, or private support pages, or on our staging site. We do not send Google account details, organization identifiers, Chat messages, or support requests to Plausible.
Google user data
Shout! accesses Google user data through Google APIs in these ways, and in no others:
- Sign-in (OpenID: email and profile). Your email address, name and picture, to sign you in to this website. Used for nothing else; kept in the session cookie only.
- Organization record (Admin SDK,
admin.directory.customer.readonly). When you sign in, the website reads your organization's customer record with your own token. Only administrators can; that is how Shout! knows you are one and which organization you administer. It keeps the customer id, nothing else from the record, and reads no other directory data. - Google Chat (
chat.bot, and after an administrator install,chat.app.spaces.readonlyandchat.app.messages.readonly). Space names and membership counts, so!namefinds the right space; and messages, read only to find!namesand then discarded, as described above. - Group membership (
cloud-identity.groups.readonly). Asked only of NimbusXR's own support staff, to prove membership of the support group before they can see the support desk. Never asked of customers.
Google user data is stored only as listed under "What Shout! stores", is never used for advertising, never sold, never shared except with the processors named under "Sharing", and never used to develop, improve or train artificial intelligence or machine learning models, whether generalized or otherwise. It is deleted as described under "Deletion". Shout!'s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Sharing
Shout! uses Google to run on Google Cloud and to use Google Chat, Stripe to process billing, and Plausible for the public website analytics described above. We do not sell Google user data or share it with advertisers.
Deletion
Removing Shout! from a space deletes its record. After an organization uninstalls Shout!, its records are deleted within 30 days. You can also request deletion at the address below.