Privacy Policy

1. Information We Process

Account information includes your name, email, password hash, verification and recovery records, preferences, onboarding answers, and account and payment status. Sign-in uses email and password.

Tool information includes search terms, submitted store or product URLs, product details, prompts, generated results, saved keywords, and stored audit history. Some results are processed to respond to a request without being saved as account history. Please do not submit student information, sensitive personal data, or confidential records.

Billing and referral information includes Stripe customer and payment references, amounts and access periods, referral codes and attribution, commissions and adjustments, and the PayPal email you provide. Support and testimonial records include your message, account reference, relevant page, rating, display name, and moderation status.

Activity and operational information includes the tool used, time, outcome, request reference, usage counts, duration, provider token usage and estimated cost where available, and diagnostic error information. We also record first-party homepage and pricing-page views, respecting Do Not Track. These count views, not unique visitors, and use no tracking cookie or shared visitor identifier. Event identifiers prevent duplicate recording. Short-lived rate controls use hashed IP addresses. Hosting and security systems may also process IP addresses, browser information, and request logs.

2. Purposes and Legal Bases

We use account, tool, and payment information to deliver the service you request, maintain saved work, manage access and billing, and provide support. We use limited activity, security, and cost information to diagnose failures, prevent abuse, plan capacity, and understand service use.

Where data-protection law requires a legal basis, we rely on performance of our agreement for the requested service, legitimate interests for proportionate security and service improvement, legal obligations for required financial or legal records, and consent where required for optional marketing. You can object to processing based on legitimate interests and withdraw consent without affecting earlier lawful processing.

Account verification, recovery, billing, and important service notices are operational communications. Optional newsletters and keyword briefings can be stopped using the unsubscribe link or by contacting us. An unsubscribe does not stop necessary account or billing notices.

3. Service Providers and Data Sharing

• Vercel: application hosting and delivery, including requests, responses, and operational information handled by the hosted application.
• MongoDB Atlas: storage of account records, saved work, activity, support, billing references, and referral records.
• Stripe: checkout, recurring billing, payment methods, invoices, refunds, and payment verification. Stripe receives payment and billing details; TeachersBoost stores payment references and status, not full card numbers or card security codes.
• Resend: delivery of account, billing, and optional email messages, including the recipient address, message content, and necessary verification or recovery links.
• DeepSeek: AI processing of prompts, relevant product or store information, and supplied resource details to generate suggestions. Do not include information you do not want processed by an AI provider.
• Teachers Pay Teachers and its Algolia search service: requests for public listing and search pages, and search suggestions, using relevant public page URLs and search terms. These requests do not require your TpT password.
• Jina AI Reader: when used as a fallback, receives the requested public TpT page URL, including search terms contained in that URL, to retrieve the page. We do not send account credentials or private AI prompts to Reader.
• PayPal: your payout email and payment information when a referral payout is processed manually.

Providers may process information in countries other than yours under their own operational and legal requirements. Applicable transfer protections must be used where required by law. Contact us for information about the arrangements relevant to your data. We may also disclose limited information to meet a legal obligation, protect rights, or handle a business transfer with appropriate safeguards and notice of material changes.

We do not sell personal information or share it for cross-context advertising. We do not operate advertising trackers. Provider processing needed for payments, hosting, or requested tools is distinct from advertising.

4. Cookies and Browser Storage

Authentication uses cookies for sign-in sessions, security checks, and sign-in return destinations. Browser storage may retain interface preferences or workflow state. Referral links carry a code that is associated with the account after completed checkout. We use first-party service activity records rather than advertising tracking cookies for product measurement.

Stripe-hosted checkout and other third-party pages may use their own cookies or similar technologies for security and their services. Blocking essential cookies can prevent sign-in or payment from working. We do not claim that all third parties are cookie-free.

5. Retention and Public Information

Individual tool activity and first-party pageview events are retained for 180 days. Application operational error records are retained for 30 days. These periods concern those records, not all account data or each provider's separate infrastructure logs. Aggregate counters that do not identify individual people may be kept long term.

Account details and saved work are kept while needed to maintain your account. Cancelling paid access does not itself delete them. Support records are kept while needed to resolve requests and related disputes. Billing and referral records may need to be retained for accounting, payment disputes, fraud prevention, or legal obligations. We assess deletion requests against these purposes; backups and provider-held records may follow separate deletion cycles.

Public activity statistics are aggregates, not individual account histories or tool inputs. Test and synthetic activity are excluded from customer activity claims. Testimonials are separate: only approved testimonials are displayed publicly, with their submitted wording, display name, and rating. Contact us to request removal or correction. Submitting feedback does not automatically publish a testimonial.

6. Security and Your Choices

Passwords are hashed with bcrypt, not reversibly encrypted. We use access controls and other safeguards appropriate to the service, but no online service can guarantee absolute security. Never send a password, full payment-card number, or account recovery link in a support message.

You can manage account details in Settings. Contact us to request access, a copy or export, correction, deletion, or restriction of your personal data, or to object to processing. We may need to verify account ownership. Ask for an export before deleting your account. We will explain any records we must retain and respond within applicable legal time limits.

Rights depend on the law applicable to you. Where available, you can complain to your data-protection authority. We do not use tool suggestions to make legal or similarly significant decisions about you. The service is intended for sellers, not for collecting children's or students' personal information.

7. Updates and Contact

We will date policy updates and communicate material changes through the service or account email, obtaining consent where required. Contact teachersboost@gmail.com for privacy questions or requests.