Privacy Policy

Last updated: March 11, 2026

1. Who We Are and What This Policy Covers

Develop Together LLC d/b/a Rubrico ("Rubrico," "we," "our," "us") operates rubrico.io, an alignment coaching platform that helps learners assess how drafts align to rubric criteria and receive learning-oriented guidance. We do not create or provide work for submission. Rubrico is owned by Develop Together LLC, located at 30 N. Gould St. Ste R, Sheridan, WY 82801.

This Policy explains how we collect, use, disclose, and safeguard information about visitors, account holders, and institution partners ("you"). It applies to our websites, web apps, portals, emails, and related services (the "Service"). It does not cover third-party sites we do not control.

2. Information We Collect

2.1 Information You Provide

• Account basics: Email address (for OTP verification), OTP verification data, optional email address, role (student/educator/admin), school/organization (if relevant), plan tier. If your organization enables SSO, we receive SSO tokens from that provider.
• Profile & settings: Display name/pseudonym, communication preferences (email where applicable), accessibility options, time zone.
• Educational context: Course names, rubrics you upload, assignment prompts, due dates (optional), notes.
• Drafts & artifacts: Text you submit for alignment, feedback requests, and version history you choose to keep.
• Support & surveys: Questions, bug reports, ratings, survey responses, incident reports.
• Billing (paid): Billing name, address, tax details where applicable, tokenized payment information from processors, transaction records.

2.2 Information Collected Automatically

• Device & logs: IP address, approximate location (IP-derived), device/OS/browser, language, referrers, timestamps, performance metrics.
• Usage analytics: Clickstream, feature use, session duration, rubric-match stats (de-identified for improvement).
• Cookies/tech: Strictly necessary (auth/security), functional (preferences), optional analytics, and optional attribution/ads tags (see Section 8).

2.3 Information from Others

• SSO providers: Identifiers and tokens for sign-in (e.g., Google, Microsoft, school SSO).
• Payment processors: Limited billing metadata (success/failure, last four digits, card brand).
• Messaging providers: Delivery status and metadata needed to send OTP/security messages and, if you consent, promotional messages.
• Institutions: Roster IDs, roles, course associations for school-provisioned accounts.
• Referrals/affiliates: Referral codes or campaign parameters.

3. Why We Use Data (Purposes)

• Provide the Service: Authenticate users (including email OTP), maintain sessions, secure accounts, analyze drafts vs. rubrics, generate learning-oriented guidance, store versions you choose, operate hosting, authentication, messaging, analytics, and billing via our service providers.
• Improve and protect: Measure performance, fix bugs, prevent abuse/spam, test features, use de-identified insights (e.g., common rubric gaps) to improve quality and security.
• Communicate: Send transactional notices (receipts, OTPs, security alerts), product updates, surveys, and optional tips (you can opt out anytime for non-essential messages). With your express consent, we may send promotional emails.
• Comply and enforce: Meet legal obligations, investigate misuse, and enforce our Terms and Honor Code.

4. Our Privacy Principles

• Minimize: Collect only what is necessary.
• Protect: Use administrative, technical, and physical safeguards.
• De-identify: Prefer aggregate/de-identified data for improvement.
• Control: Offer meaningful controls and clear choices.
• No surprises: Be transparent about what we collect and why.

5. App Permissions

User Consent & Control Over Permissions

We only request permissions when necessary to provide essential features. You can manage or revoke permissions at any time through your device settings. We do not access or use these permissions for any purpose beyond those explicitly stated.

6. Email OTP Verification

We use email-based one-time passcode (OTP) verification for account authentication. When you sign up or log in to your account, we send an OTP to the email address you provided. This OTP is required to complete the authentication process.

How it works:

• Upon entering your email, we send an OTP to your email address.
• You need to enter the OTP to complete the sign-up or login process.
• OTP verification helps protect your account from unauthorized access.

7. User Data Deletion

Rubrico respects user privacy and provides the right to request deletion of personal data.

How to Request Data Deletion

Users may request deletion of their personal data by contacting us at [email protected] with the subject line "Data Deletion Request". To help us process the request, users should include the email address used with their account.

Our Deletion Process

Upon verification, we take steps to delete the requested personal data from our systems. Data deletion requests may take up to 30 days to be fully processed.

Important Notes

• Certain information may be retained where required by law, regulatory obligations, accounting, or security purposes.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Strictly necessary: Authentication, security, and essential functions.
• Functional: Remembering your preferences and settings.
• Analytics (optional): Understanding how users interact with our Service.
• Attribution/ads (optional): Measuring marketing campaign effectiveness.

You can manage cookie preferences through your browser settings. Opting out of certain cookies may affect Service functionality.

9. Changes to This Policy

We may update this Policy for new features, legal changes, or practice updates. We'll revise the "Last updated" date and may provide additional notice for material changes. Continuing to use the Service after posting means you accept the changes.

10. Contact Us (Privacy Matters)

Develop Together LLC d/b/a Rubrico
30 N. Gould St. Ste R
Sheridan, WY 82801
Email: [email protected]