Privacy Policy
Last Updated: 22 December 2025
Stori (“we,” “our,” or “us”) is committed to protecting your privacy and handling personal information responsibly. This Privacy Policy explains how we collect, use, store, share, and protect information when you use our platform at https://www.onestori.com (the “Site”) and related services (the “Services”).
By accessing or using Stori, you agree to the practices described in this Privacy Policy.
Information We Collect
We collect the following categories of information:
Account Information
When you create an account, we collect your name, email address, authentication credentials, and related account details.
Google Account Information (OAuth)
If you choose to sign in using Google, we may access your basic Google profile information, such as your name, email address, and profile photo. We do not access your Gmail content, contacts, calendar data, files, or any other Google services unless explicitly disclosed.
Candidate Data
This includes information you choose to provide, such as:
- Digital resumes
- Interview recordings and transcripts
- Psychometric assessments
- Any additional profile or narrative content
Recruiter / Employer Data
If you use Stori as a recruiter or hiring manager, we may collect your name, company name, role, and contact details.
Usage Data
We collect technical and usage information, including IP address, browser type, device information, pages visited, and interaction data.
Payment Information
If you purchase a subscription or credits, payment information is processed by third-party payment providers. Stori does not store full credit card numbers.
How We Use Information
We use collected information to:
- Provide, operate, and maintain the Services
- Authenticate users and manage accounts
- Enable candidates to create, control, and share their digital resumes and interviews
- Allow recruiters and employers to review candidate information only when shared by the candidate
- Facilitate communications and outreach
- Process payments and manage subscriptions
- Improve, personalize, and secure the platform
- Comply with legal and regulatory obligations
Google User Data Usage (Required Disclosure)
Information obtained from Google APIs is used solely to:
- Authenticate users
- Create and manage user accounts
- Enable secure access to Stori features
Stori does not use Google user data for advertising purposes and does not sell Google user data.
Stori's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How We Share Information
We do not sell personal data.
We may share information in the following limited circumstances:
With Recruiters / Employers
Candidates control when and with whom their information is shared. Recruiters and employers can only access candidate data when a candidate explicitly shares it.
With Service Providers
We use trusted third-party providers for services such as:
- Secure hosting and data storage
- Authentication
- Analytics
- Payment processing
- Email delivery and customer support
These providers may process data only to perform services on our behalf and are subject to confidentiality and security obligations.
Legal Requirements
We may disclose information if required by law, legal process, or to protect the rights, safety, or property of Stori or others.
Business Transfers
If Stori is involved in a merger, acquisition, or asset sale, user information may be transferred as part of that transaction.
Candidate Data Ownership
A core principle of Stori is candidate ownership and control:
- Candidates own their resumes, interviews, and assessments
- Candidates choose when and how their data is shared
- Recruiters only see candidate information that has been explicitly shared
Data Storage & Security
We use industry-standard technical, administrative, and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. While we take reasonable safeguards, no system is completely secure.
Data Retention & Deletion
- Account data is retained while your account is active
- Users may delete their account and associated data at any time
- Upon deletion, data is removed from active systems, though limited backups may persist for a short period for operational or legal reasons
Users may request deletion by contacting hi@onestori.com or through account settings where available.
Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion
- Object to or restrict processing
- Request a portable copy of your data
Requests can be made by contacting hi@onestori.com.
Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Maintain authentication sessions
- Analyze usage
- Improve performance and user experience
You may manage cookies through your browser settings.
Children's Privacy
Stori is not intended for children under the age of 16. We do not knowingly collect personal information from children.
International Users
If you access Stori from outside the United States, your information may be transferred to and stored in the United States, where data protection laws may differ.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.
Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at: hi@onestori.com
