OneStop is built and maintained by us, the Interface team ("we," "us," or "our"). This Privacy Notice describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at https://www.onestop.sh or any other website of ours that links to this Privacy Notice, or when you engage with us in other related ways, such as marketing or events.
We are responsible for making decisions about how your personal information is processed. Reading this notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have questions or concerns, contact us at [email protected].
SUMMARY
We collect the information you provide to us and limited technical information collected automatically. We do not process sensitive personal information, and we do not use personal information for targeted advertising. If you sign in with Google, we receive limited profile information from Google.
We use this information to operate the Services — accounts, authentication, purchases, listings, support, security, fraud prevention, and analytics — and to comply with law. We share it with service providers that work on our behalf and in the other situations described in section 4. Depending on where you live, you may have rights over your personal information; the easiest way to exercise them is through https://www.onestop.sh/dashboard or by contacting us at [email protected].
TABLE OF CONTENTS
- Information we collect
- How we use your information
- Legal bases for processing
- When and with whom we share information
- Cookies and tracking technologies
- AI-powered features
- Social logins
- International transfers
- Data retention
- Data security
- Minors
- Your privacy rights
- United States state privacy rights
- Updates to this notice
- Reviewing, updating, or deleting your data
- Contact us
1. INFORMATION WE COLLECT
We collect personal information that you voluntarily provide when you register on the Services, express interest in obtaining information about us or our products and Services, participate in activities on the Services, create or manage listings, upload content, submit ratings or reviews, make purchases, or otherwise contact us. This information may include:
- names
- phone numbers
- email addresses
- usernames
- passwords
- contact or authentication data
- profile information
- listing content and other user-submitted content
- ratings, reviews, and related submission data
- transaction-related information needed to complete purchases
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes. We do not process sensitive personal information.
If you make purchases, payment is processed by Stripe. All payment data, including information related to your payment method, is collected, handled, and stored by Stripe rather than by us. You can review Stripe's privacy practices at https://stripe.com/privacy. If you register or sign in using Google Sign-In, we receive certain profile information from Google, as described in section 7.
We also automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity, but may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, approximate country or region derived from IP address, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services and for internal analytics and reporting.
Like many businesses, we also collect information through cookies and similar technologies; see section 5.
The information we collect automatically includes:
- Log and usage data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use the Services and which we record in log files. Depending on how you interact with us, this may include your IP address, device information, browser type and settings, activity in the Services, and device event information such as system activity, error reports, and hardware settings.
- Device data. Information about the computer, phone, tablet, or other device you use to access the Services, including IP address or proxy information, browser type, hardware model, operating system, and system configuration information.
- Approximate location data. We may infer your approximate location from your IP address to understand user geographies, improve service performance, support security, and measure referral sources and conversions. We do not collect GPS location data from your device through our website.
2. HOW WE USE YOUR INFORMATION
We process your information to provide, improve, and administer the Services, communicate with you, support authentication and security, process payments, prevent fraud, and comply with law. Depending on how you interact with the Services, this includes processing information:
- to facilitate account creation and authentication and otherwise manage user accounts
- to deliver and facilitate delivery of services to the user
- to respond to user inquiries and offer support
- to send and respond to SMS messages you request through our text messaging program
- to send administrative information, such as updates to our terms, policies, or service-related notices
- to fulfill and manage orders, payments, returns, refunds, disputes, and related transactions made through the Services
- to enable listings, uploads, ratings, reviews, and other user-generated content features
- to request feedback
- to send marketing and promotional communications in accordance with your preferences
- to protect the Services, including fraud monitoring and prevention
- to identify usage trends and improve the Services
- to save or protect an individual's vital interests where necessary
3. LEGAL BASES FOR PROCESSING
We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law, such as with your consent, to comply with laws, to provide you with services, to fulfill contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
If you are located in the EU or UK, we may rely on consent, performance of a contract, legitimate interests, legal obligations, or vital interests, depending on the circumstances. If you are located in Canada, we may rely on express or implied consent where permitted by law, as well as other lawful bases available under applicable law.
4. WHEN AND WITH WHOM WE SHARE INFORMATION
We may share your personal information in the following situations:
- Service providers. We may share information with vendors and service providers who perform services for us or on our behalf, such as payment processing, hosting, analytics, authentication, security, customer support, or communications.
- Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- User-directed sharing. Content, listings, ratings, reviews, and profile information that you choose to publish or make available through the Services may be visible to other users, depending on the functionality of the Services.
Mobile phone numbers, SMS opt-in consent, and related messaging data are used solely to provide the OneStop text messaging service. We do not sell or share SMS opt-in consent or mobile information with third parties or affiliates for their own marketing or promotional purposes.
5. COOKIES AND TRACKING TECHNOLOGIES
We may use cookies and similar tracking technologies, such as web beacons and pixels, to gather information when you interact with the Services. These technologies help us maintain the security of the Services and your account, prevent crashes, fix bugs, save your preferences, understand user geographies based on approximate IP-derived location, understand referral links and conversions, and support product analytics.
We use PostHog for product analytics. PostHog may use cookies or similar technologies to help us understand how users interact with the Services, including product usage patterns and session replay functionality. We do not currently use cookies or similar technologies for targeted advertising, retargeting, or cross-site behavioral advertising.
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. Because there is currently no industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.
6. AI-POWERED FEATURES
The Services include products, features, and tools powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"). The terms in this Privacy Notice govern your use of the AI Products within the Services.
All personal information processed using our AI Products is handled in line with this Privacy Notice and our agreements with applicable third parties and service providers. We take steps intended to safeguard personal information throughout the process.
7. SOCIAL LOGINS
The Services offer the ability to register and log in using Google account details. Where you choose to do this, we receive certain profile information about you from Google. The information we receive may vary depending on your Google account settings and the information you choose to make available, but it may include your name, email address, profile image, and other basic profile information.
We use the information we receive only for the purposes described in this Privacy Notice or otherwise made clear to you on the relevant Services. We do not control, and are not responsible for, other uses of your personal information by Google. We recommend reviewing Google's privacy notice to understand how Google collects, uses, and shares your personal information, and how you can set your privacy preferences on its services.
8. INTERNATIONAL TRANSFERS
Our data storage and processing infrastructure is located in the United States. If you access the Services from outside the United States, be aware that your information may be transferred to, stored by, and processed by us and the third parties with whom we share your personal information in the United States and possibly other jurisdictions.
If you are a resident of the European Economic Area (EEA), United Kingdom (UK), or Switzerland, please note that data protection laws in the United States may differ from those in your jurisdiction. We will take appropriate measures designed to protect your personal information in accordance with this Privacy Notice and applicable law.
9. DATA RETENTION
We retain your personal information while you maintain an account with us and for as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law, such as for tax, accounting, legal, fraud-prevention, or compliance purposes.
When you delete your account, we delete or anonymize your personal information, except for records we are required or permitted to retain, such as transaction records for tax and accounting purposes or information needed to prevent fraud, resolve disputes, or comply with law. Where immediate deletion is not possible, we securely store the remaining information and isolate it from further processing until deletion is possible.
10. DATA SECURITY
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.
11. MINORS
We do not knowingly collect, solicit data from, or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction, nor do we knowingly sell such personal information. If we learn that personal information from a child has been collected without appropriate authorization, we will take reasonable measures to delete it. If you believe we may have collected information from a child, contact us at [email protected].
12. YOUR PRIVACY RIGHTS
Depending on applicable law, you may have rights to request access to, correction of, deletion of, restriction of processing of, portability of, or objection to the processing of your personal information. You may also have the right to withdraw consent where processing is based on consent.
If we rely on your consent to process your personal information, you may withdraw that consent at any time by contacting us using the details below.
You can unsubscribe from marketing and promotional communications at any time by clicking the unsubscribe link in emails we send, or by contacting us using the details below. We may still send you service-related and other non-marketing communications.
To review or change the information in your account, log in to your account settings and update your user account. To terminate your account, contact us to request account deletion or deactivation.
Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to remove or reject cookies through your browser settings.
If you have questions or comments about your privacy rights, email us at [email protected].
13. UNITED STATES STATE PRIVACY RIGHTS
Depending on your US state of residence, you may have rights regarding access to, correction of, deletion of, and copies of your personal information, as well as rights related to certain processing activities under applicable law.
We do not currently use personal information for targeted advertising, retargeting, or cross-site behavioral advertising.
The categories of personal information we may collect and process include:
- identifiers, such as name, email address, account name, IP address, and contact details
- customer-record information, such as transaction-related information
- commercial information, such as purchase and transaction history
- approximate geolocation data derived from IP address
- Internet or similar network activity information, such as usage and interaction data
- user-generated content, listings, ratings, reviews, and related submissions
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Notice, including while you maintain an account with us and as otherwise required for legal, security, accounting, or fraud-prevention reasons.
To exercise privacy rights available under applicable US state law, visit https://www.onestop.sh/dashboard or email [email protected]. We may need to verify your identity before completing your request. You may also designate an authorized agent where permitted by law.
If we deny your request where appeal rights are available under applicable law, you may appeal by emailing [email protected].
California residents may also request information under California Civil Code Section 1798.83 ("Shine the Light") by submitting a written request using the contact details below.
14. UPDATES TO THIS NOTICE
We may update this Privacy Notice from time to time to stay compliant with relevant laws. The updated version will be indicated by an updated date at the top of this Privacy Notice. We encourage you to review this Privacy Notice frequently to stay informed about how we are protecting your information.
15. REVIEWING, UPDATING, OR DELETING YOUR DATA
Based on the applicable laws of your country or US state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information where consent is the lawful basis for processing.
To request to review, update, or delete your personal information, visit https://www.onestop.sh/dashboard or email [email protected].
16. CONTACT US
OneStop is built and maintained by the Interface team. Our legal company entity is Preempt Technologies, Inc.. If you have questions or comments about this notice, please email us at [email protected].