ES
Back to home

Privacy Policy

Last updated: September 19, 2026

Your privacy matters. This policy explains what data Storico handles, why, and the choices you have. It covers both the open source engine and the Storico Cloud service.

01 Open source engine collects nothing

Storico is open source software that runs on your own machines. The open source engine contains no telemetry, no analytics, and no phone-home. When you run Storico locally with a local LLM (such as Ollama), your data never leaves your machine and we receive no data about your usage.

02 Data we collect

When you sign in via Google or GitHub OAuth, we receive your email address and display name. We do not store passwords — authentication is handled entirely by your OAuth provider.

The user stories you submit are sent to the configured LLM for task extraction. If you use a local model via Ollama, your data never leaves your machine. If you use a cloud provider (OpenAI, Anthropic, Gemini), your data is processed by them according to their respective policies. We do not use your content to train models.

If you contact us via email or GitHub issues, we keep the messages and details you provide so we can respond and manage the relationship.

03 Service providers

We use a small number of providers to make Storico work. They process data only on our instructions and under contract.

Provider Purpose Data involved
Google OAuth authentication Email address, display name
GitHub OAuth authentication Email address, display name
OpenAI (optional) Cloud LLM processing User stories you submit
Anthropic (optional) Cloud LLM processing User stories you submit

Cloud LLM providers are only involved if you choose to configure them. When using a local model via Ollama, no data is sent to third parties.

04 How we use your data

05 Legal bases

Where the GDPR or similar laws apply, we rely on these bases: performance of a contract to provide the service you asked for; legitimate interests to secure the service and prevent abuse; and legal obligation where the law requires us to retain or disclose data.

06 Security

We protect data with measures appropriate to its sensitivity. Login sessions are handled via secure OAuth flows. We do not store passwords. No system is perfectly secure, but we work to keep the bar high and respond quickly to issues.

07 Data retention

You retain full ownership of your data. Projects and stories can be deleted at any time from within the application, and deleting them also removes the tasks generated from them; a single task cannot be deleted on its own. Account data is kept for as long as you have an account. Usage data is kept only as long as needed to operate the service and meet legal requirements. We do not sell or share your personal information with third parties.

08 International transfers

If you choose to use a cloud LLM provider (OpenAI, Anthropic, Gemini), your data may be processed in countries other than your own. Those transfers are governed by the respective provider's data processing agreements. When running Storico locally, no data transfer occurs.

09 Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. If you are in the EEA or UK, the GDPR applies. If you are a California resident, the CCPA/CPRA applies, including the right to know, delete, and opt out of sale (which we do not do). To exercise these rights, email us at alvaldes.dev@gmail.com. We will respond within the period the law requires. You also have the right to complain to your local data protection authority.

10 Cookies

This website uses no tracking or advertising cookies. The dashboard uses strictly necessary session cookies to keep you signed in. These cookies are not used for advertising or cross-site tracking.

11 Children

Storico is a tool for software development teams and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, contact us and we will delete it.

12 Changes to this policy

We may update this policy as Storico evolves. We will revise the 'Last updated' date above and, for material changes, give reasonable notice through the application or by email.

13 Contact

For any privacy question or request, email us at alvaldes.dev@gmail.com or open an issue on our GitHub repository.

Start transforming your user stories into tasks today

Free and open source. No complicated sign-up, no credit card.