Privacy
Privacy summary
Plain-language intent. Effective terms are governed by the executed agreement.
Draft · pending legal review
This is a plain-language summary of intent, not the binding agreement. The executed Data Processing Agreement and Terms are provided during procurement and onboarding. For the current documents, contact [email protected].
01Who controls the data
The institution is the data controller. OneRubric processes evaluation data on the institution's behalf under a Data Processing Agreement.
02What we collect
Institutional account identifiers for sign-in and role, the rubric responses students submit, and operational logs needed to run and secure the service.
03Student anonymity
Responses are not attributable to a student by faculty or leadership. Minimum-cohort thresholds prevent inference. Anonymity is a processing constraint, not a setting.
04How it's used
Solely to operate evaluation for your institution — scoring, insight, action plans, and accreditation evidence. Never sold, never used to train third-party models.
05Sub-processors
A current list of sub-processors (cloud hosting, payment processing, AI provider) is maintained and provided with the DPA during onboarding.
06Retention & deletion
Retention is configured per institution. On termination, data is exported on request and deleted within the agreed window.
07Your rights
Data-subject and institutional requests are handled through the institution's quality directorate and OneRubric's contact below.
Contact: [email protected]