Privacy Policy

Last Updated: 22 December 2025

Stori (“we,” “our,” or “us”) is committed to protecting your privacy and handling personal information responsibly. This Privacy Policy explains how we collect, use, store, share, and protect information when you use our platform at https://www.onestori.com (the “Site”) and related services (the “Services”).

By accessing or using Stori, you agree to the practices described in this Privacy Policy.

Information We Collect

We collect the following categories of information:

Account Information

When you create an account, we collect your name, email address, authentication credentials, and related account details.

Google Account Information (OAuth)

If you choose to sign in using Google, we may access your basic Google profile information, such as your name, email address, and profile photo. We do not access your Gmail content, contacts, calendar data, files, or any other Google services unless explicitly disclosed.

Candidate Data

This includes information you choose to provide, such as:

  • Digital resumes
  • Interview recordings and transcripts
  • Psychometric assessments
  • Any additional profile or narrative content

Recruiter / Employer Data

If you use Stori as a recruiter or hiring manager, we may collect your name, company name, role, and contact details.

Usage Data

We collect technical and usage information, including IP address, browser type, device information, pages visited, and interaction data.

Payment Information

If you purchase a subscription or credits, payment information is processed by third-party payment providers. Stori does not store full credit card numbers.

How We Use Information

We use collected information to:

  • Provide, operate, and maintain the Services
  • Authenticate users and manage accounts
  • Enable candidates to create, control, and share their digital resumes and interviews
  • Allow recruiters and employers to review candidate information only when shared by the candidate
  • Facilitate communications and outreach
  • Process payments and manage subscriptions
  • Improve, personalize, and secure the platform
  • Comply with legal and regulatory obligations

Google User Data Usage (Required Disclosure)

Information obtained from Google APIs is used solely to:

  • Authenticate users
  • Create and manage user accounts
  • Enable secure access to Stori features

Stori does not use Google user data for advertising purposes and does not sell Google user data.

Stori's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How We Share Information

We do not sell personal data.

We may share information in the following limited circumstances:

With Recruiters / Employers

Candidates control when and with whom their information is shared. Recruiters and employers can only access candidate data when a candidate explicitly shares it.

With Service Providers

We use trusted third-party providers for services such as:

  • Secure hosting and data storage
  • Authentication
  • Analytics
  • Payment processing
  • Email delivery and customer support

These providers may process data only to perform services on our behalf and are subject to confidentiality and security obligations.

Legal Requirements

We may disclose information if required by law, legal process, or to protect the rights, safety, or property of Stori or others.

Business Transfers

If Stori is involved in a merger, acquisition, or asset sale, user information may be transferred as part of that transaction.

Candidate Data Ownership

A core principle of Stori is candidate ownership and control:

  • Candidates own their resumes, interviews, and assessments
  • Candidates choose when and how their data is shared
  • Recruiters only see candidate information that has been explicitly shared

Data Storage & Security

We use industry-standard technical, administrative, and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. While we take reasonable safeguards, no system is completely secure.

Data Retention & Deletion

  • Account data is retained while your account is active
  • Users may delete their account and associated data at any time
  • Upon deletion, data is removed from active systems, though limited backups may persist for a short period for operational or legal reasons

Users may request deletion by contacting hi@onestori.com or through account settings where available.

Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion
  • Object to or restrict processing
  • Request a portable copy of your data

Requests can be made by contacting hi@onestori.com.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain authentication sessions
  • Analyze usage
  • Improve performance and user experience

You may manage cookies through your browser settings.

Children's Privacy

Stori is not intended for children under the age of 16. We do not knowingly collect personal information from children.

International Users

If you access Stori from outside the United States, your information may be transferred to and stored in the United States, where data protection laws may differ.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: hi@onestori.com