Privacy Policy
Last updated: June 20, 2026
This policy explains what OpenRubric collects and why. OpenRubric is open-source and self-hostable: if you run your own instance, you are the data controller and your data lives in your Supabase project. This policy describes the hosted Service we operate.
What we collect
- •Account data — your name, email, and role (organizer or judge), used to sign you in and keep roles separate.
- •Event data — hackathons, submissions, rubrics, scores, and comments you create or import, used to operate judging.
- •Imported public data — when you import from Devpost or scan a public GitHub repo, we process that public information to build submissions and review timelines.
- •Feedback you send — messages submitted through our feedback or contact forms, including any name/email you choose to provide.
How we use it
We use your data only to operate the Service — authenticating you, running judging, generating AI summaries and GitHub reviews, and responding to your feedback. We do not sell your data, and we do not use it for advertising.
Subprocessors
The hosted Service relies on Supabase (database, authentication, realtime), GitHub (repository review), and an AI model provider (project summaries). Email is delivered via an SMTP/Gmail provider. These process data on our behalf to deliver the features above.
Data retention & control
Event data is retained for as long as your account or event is active. You can export submissions, scores, and rankings at any time, and you can request deletion of your account and associated data by emailing us. Individual judge scores stay private until an organizer publishes results.
Self-hosting
If you self-host OpenRubric, this policy does not apply to your instance — you control your own keys, database, and integrations, and are responsible for your own privacy practices toward your users.
Contact
Privacy questions or deletion requests? Email openrubric@gmail.com.