Privacy Policy

Last updated: 10/14/2024

Introduction

Welcome to Rubriko. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

1. Important Information and Who We Are

Purpose of this privacy policy

This privacy policy aims to give you information on how Rubriko collects and processes your personal data through your use of this website, including any data you may provide through this site when you sign up for our service, purchase a product, or take part in a survey. It also outlines how we handle any educational data subject to FERPA regulations, particularly student data that may be processed in a temporary and ephemeral manner for educational purposes.

Controller

Rubriko is the controller and responsible for your personal data (collectively referred to as "we", "us" or "our" in this privacy policy).

2. The Data We Collect About You

We may collect, use, store, and transfer different kinds of personal and educational data, especially if you are using our services in an academic setting. We have grouped the types of data we collect as follows:

  • Identity Data
  • Contact Data
  • Technical Data
  • Usage Data
  • Educational Data (subject to FERPA compliance)
  • Marketing and Communications Data

3. Handling of Educational Data (FERPA Compliance)

We understand the importance of protecting student records as outlined by the Family Educational Rights and Privacy Act (FERPA). If you are an instructor, faculty member, or university representative, it is your responsibility to ensure you have the necessary permissions to share any student data with us or our third-party service providers. All student data shared for purposes such as grading or feedback processing is handled in an ephemeral manner and is not stored on our systems beyond the duration required for processing.

Any student data (e.g., assignments, submissions) temporarily processed through third-party AI services (such as OpenAI's GPT-4) is transmitted securely and deleted after the processing is completed. No long-term storage or retention of student data occurs within our platform or by third-party services. This ensures that our system complies with FERPA guidelines regarding the handling of personally identifiable information (PII).

By using Rubriko's tools, you agree that you have the appropriate authorization to process student data for educational purposes. If at any time you believe there has been a breach of FERPA compliance, please contact us immediately.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you.
  • Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal obligation.

5. Data Security

We have put in place appropriate security measures to prevent your personal and educational data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. We also ensure that our third-party service providers, such as OpenAI, adhere to the same security and privacy standards for ephemeral data handling.

6. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. Regarding educational data, no student information is retained after processing, ensuring compliance with FERPA's requirements.

7. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

  • Request access to your personal data
  • Request correction of your personal data
  • Request erasure of your personal data
  • Object to processing of your personal data
  • Request restriction of processing your personal data
  • Request transfer of your personal data
  • Right to withdraw consent

8. Changes to the Privacy Policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page.

9. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at:

Rubriko
Email: support@rubriko.com