Privacy Policy

ShoutAm.ng is a product of Rawkom Co. Limited ("Rawkom", "we", "us", "our"), a technology company incorporated in Nigeria. Our registered address is in Abeokuta, Ogun State, Nigeria. ShoutAm.ng is Nigeria's advertising platform - enabling individuals, businesses, schools, churches and organisations to post listings that are automatically distributed across the internet.

For privacy enquiries, contact: privacy@shoutam.ng

We collect the following categories of information:

• Account information: name, email address, phone number, WhatsApp number
• Profile information: location (state, city, LGA), profile photo
• Listing content: ad titles, descriptions, prices, images, videos, location
• Identity verification: NIN (National Identity Number) where voluntarily provided for verification badge
• Payment information: processed securely by Paystack - we do not store card details
• Usage data: pages visited, listing views, clicks, search terms
• Device data: IP address, browser type, device type
• Communications: messages sent through the platform

We use your information to:

• Create and manage your ShoutAm account
• Display and distribute your listings across the internet
• Generate AI-powered ad content for your listings
• Process payments via Paystack
• Send notifications (email, WhatsApp, SMS) about your listings and leads
• Improve our platform and user experience
• Prevent fraud and enforce our Terms of Service
• Comply with Nigerian law

Under the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023, we process your data on the following legal bases:

• Contract performance: processing necessary to provide the ShoutAm service you signed up for
• Legitimate interests: improving our platform, preventing fraud, analytics
• Consent: marketing communications (you may withdraw consent at any time)
• Legal obligation: compliance with Nigerian laws and regulations

We do not sell your personal data. We share data only with:

• Paystack - payment processing
• Termii - WhatsApp/SMS notifications (phone number only)
• Resend - transactional email
• Rawkom sister platforms (Schuuls, TrustedHelp, Bengulo, Kribspot) - only when you explicitly choose cross-platform syndication
• Law enforcement - only when required by Nigerian law

Some of our service providers (e.g. Supabase, Resend, Cloudflare) may process or store data outside Nigeria. Under Section 41 of the NDPA 2023, we only transfer personal data internationally where:

• The receiving jurisdiction provides an adequate level of data protection, or
• The provider is bound by binding corporate rules or standard contractual clauses, or
• You have given explicit informed consent.

A list of sub-processors and their hosting jurisdictions is available on request from privacy@shoutam.ng.

Your data is stored on managed cloud infrastructure with encryption in transit (TLS 1.2+) and at rest (AES-256). We apply:

• Row-level security and least-privilege access controls
• Audit logs of all administrative actions
• Multi-factor authentication for staff accounts
• Regular security reviews and dependency scans
• Incident response plan with notification to NITDA within 72 hours of a qualifying breach, in line with the NDPA

We retain personal data only for as long as necessary for the purposes set out in this policy and to comply with Nigerian law:

• Account data - while your account is active, plus 90 days after deletion (for fraud and dispute resolution)
• Listings - for the lifetime of the listing, plus 30 days in soft-delete
• Payment records - minimum 6 years as required by Nigerian tax law (FIRS / CITA)
• Contact-form submissions - 24 months from receipt
• Server logs & analytics - 12 months
• KYC / verification documents - 5 years from account closure (AML / KYC compliance)
• Marketing consent records - until withdrawn, plus 3 years (proof of consent)

After retention periods expire, data is either irreversibly deleted or anonymised so it can no longer be linked to you. You may request earlier deletion at any time by writing to privacy@shoutam.ng - we will comply unless we are required by law to retain it.

As a Nigerian data subject under the NDPR 2019 and NDPA 2023, you have the right to:

• Access - request a copy of your personal data we hold
• Rectification - correct inaccurate or incomplete data
• Erasure ("right to be forgotten") - request deletion of your data, subject to legal retention obligations
• Restriction - limit how we process your data while a dispute is resolved
• Data portability - receive your data in a structured, machine-readable format (JSON / CSV)
• Object - to processing based on legitimate interests, including profiling and direct marketing
• Withdraw consent - at any time, without affecting the lawfulness of prior processing
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) - formerly NITDA - at ndpc.gov.ng

We respond to verified requests within 30 days. To exercise any right, email privacy@shoutam.ng from the address associated with your account, or use the in-app data export and account-deletion tools in your dashboard.

We use cookies and similar technologies (local storage, pixels) for the following purposes. You are asked to consent to non-essential categories on your first visit and can change your preferences at any time.

• Strictly necessary (always on) - authentication, session security, CSRF protection, load balancing. Cannot be disabled.
• Functional (consent-based) - remembering your saved searches, location, language, and UI preferences.
• Analytics (consent-based) - aggregated usage measurement (page views, listing performance). We do not sell analytics data.
• Advertising / distribution (consent-based) - measuring the performance of syndicated listings on third-party platforms (Meta, Google) where you have opted in.

You can withdraw or change consent at any time via the Cookie settings link in the site footer, or by clearing cookies in your browser. Withdrawing consent for non-essential cookies will not affect access to core ShoutAm features. We honour Global Privacy Control (GPC) signals where supported.

Cookie list and retention periods are available on request from privacy@shoutam.ng.

ShoutAm.ng is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact privacy@shoutam.ng and we will delete the account within 7 days.

Rawkom Co. Limited
Attn: Data Protection Officer
Abeokuta, Ogun State, Nigeria
Email: privacy@shoutam.ng

Our DPO is registered with the Nigeria Data Protection Commission (NDPC). If you do not receive a satisfactory response within 30 days, you may lodge a complaint at ndpc.gov.ng.

We may update this policy. The current version and effective date are shown at the top of this page, and the full revision history is available at /privacy/history. Material changes will be communicated via email or in-app notification at least 14 days before they take effect. Continued use of ShoutAm.ng after the effective date constitutes acceptance.