Data we collect
Last updated: 11 November 2026
This page sets out, for each part of Rubric, what we collect to run and improve it, why, whether it’s on by default, how long we keep it and how to turn it off. It sits alongside our privacy policy, which covers your account, payments and email.
What we never collect
- Your page content, emails, names or IP addresses in usage records.
- Anything about your shoppers, customers or site visitors.
- What you type into your AI assistant.
All of it comes straight to Rubric and is kept in our own database (hosted for us by Supabase), never in a third-party analytics tool. We don’t sell it, share it with advertisers or use it to train AI models, and it adds no new cookies.
Web app
| What we collect | Which features you use (checks started and finished, reports opened, fixes viewed, copied or marked as done, exports, upgrades), how long screens take to load, and errors. For each fix you mark as done: the page, the check, and your next check's before and after. |
|---|---|
| Why | To see what's used and what breaks, to show you your progress, and to check Rubric's scoring against real results. |
| Default | On |
| Legal basis | Legitimate interests |
| How long we keep it | Usage: 13 months, then daily counts only (no link to you). Errors and load times: 90 days. Fix results: while your account exists. |
| How to turn it off or delete it | Email info@gogochimp.com and we'll stop recording usage for your account. Deleting your account removes all of it. |
MCP and AI assistants
| What we collect | Which Rubric tools your assistant calls (for example start a check, get a fix, verify a fix), and errors. For each fix verified through your assistant: the page, the check, and the next check's before and after. Never what you type into your assistant. |
|---|---|
| Why | The same as the web app. |
| Default | On |
| Legal basis | Legitimate interests |
| How long we keep it | Usage: 13 months, then daily counts only (no link to you). Errors: 90 days. Fix results: while your account exists. |
| How to turn it off or delete it | Email info@gogochimp.com. Revoking your API key stops all MCP access. Deleting your account removes all of it. |
Shopify app
| What we collect | Which screens and features you use, load times and errors, and every fix you apply in the app (one-click or in the editor): the page, the check, the text of the field you changed before and after (up to 500 characters), and the next check's result. Store data only: never anything about your shoppers or customers. |
|---|---|
| Why | The same as the web app. |
| Default | On (shown in the app's listing and privacy notice) |
| Legal basis | Legitimate interests |
| How long we keep it | Usage: 13 months, then daily counts only (no link to you). Errors and load times: 90 days. Fix results: while the app is installed. Everything is deleted when Shopify tells us the app was uninstalled, and always within 30 days. |
| How to turn it off or delete it | Email info@gogochimp.com, or uninstall the app. |
WordPress plugin
| What we collect | Only if an administrator turns it on: which plugin screens and fixes are used (for example "a fix was opened" or "a fix prompt was copied", with the check's name such as "author", never the page), check results as a score band (weak, fair or good, never the score or the page), and error codes when a call to Rubric fails (the HTTP status and the API endpoint's name). Each batch carries "wordpress", the plugin version and one random install ID made when you turn sharing on. Batches are sent at most once an hour. Never your site or page addresses, your content, user names, email addresses, your Rubric account or token, or anything about your visitors. The usage records never include the IP address the request comes from. |
|---|---|
| Why | To see which parts of the plugin are used and what breaks. |
| Default | Off until you opt in (never ticked for you) |
| Legal basis | Consent |
| How long we keep it | Usage: 13 months, then daily counts only (no link to you). Errors: 90 days. |
| How to turn it off or delete it | Untick "Help improve Rubric: share anonymous usage and fix results" in Settings → Rubric → Options. The plugin sends one last "sharing turned off" event, then deletes its queue and the install ID and sends nothing more. |
Chrome extension
| What we collect | Only if you turn it on: which extension features are used, check results as a score band (weak, fair or good), which fixes you open or copy (the check's name, never the page), error codes from Rubric's API and how long the popup takes to show, with one random install ID. Never page addresses, domains, your browsing history, your access token or your account. |
|---|---|
| Why | To see which parts of the extension are used and what breaks. |
| Default | Off until you opt in |
| Legal basis | Consent |
| How long we keep it | Usage: 13 months, then daily counts only (no link to you). Errors and load times: 90 days. |
| How to turn it off or delete it | Untick "Help improve Rubric: share anonymous usage and fix results" in the popup's settings. Sharing stops and the install ID is deleted. |
Search data (Google Search Console, Bing Webmaster Tools, PageSpeed)
| What we collect | Nothing. Rubric doesn't connect to Google Search Console, Bing Webmaster Tools or PageSpeed Insights and doesn't receive their data. |
|---|---|
| Why | If you want your search numbers next to your Rubric scores, your own AI assistant can read those services and Rubric's MCP and line them up itself, under your own accounts. |
| Default | Not collected |
| Legal basis | Not applicable |
| How long we keep it | Not applicable |
| How to turn it off or delete it | Nothing to turn off. |
Search Console, Bing and PageSpeed
Rubric doesn’t connect to Google Search Console, Bing Webmaster Tools or PageSpeed Insights, and we don’t ask for access to them. If you connect your own AI assistant to those services and to Rubric’s MCP, the assistant joins the data itself and it stays between you, your assistant and those services.
Rubric's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. More detail is in the privacy policy.
Deleting it
Deleting your account (Account → Profile) removes your usage records and fix results along with everything else. Usage shared from the WordPress plugin or Chrome extension carries only a random install ID, with no name, site or account, so we can’t link it back to you; it’s removed on the schedule above.
Questions or objections
Email info@gogochimp.com. You can object to any of this at any time and we’ll stop.