Privacy Policy

TeacherVision Studio is operated by Sandbox Networks, Inc. (“Sandbox”, “we”, “us”), the company behind TeacherVision, part of the Sandbox International Holdings Ltd. group. You can reach us at support@teachervision.com or by post at WeWork 24th Fl, 1 Lincoln St, Boston, MA 02111, USA.

Two groups of people are described in this policy:

• Educators who sign in and use Studio to build resources.
• Students who open a live quiz link. Students have no account and give us almost nothing — section 6 is about them.

From your TeacherVision account

There is no separate sign-up for Studio. When you sign in, TeacherVision passes us four things: your email address, your first and last name, your TeacherVision user ID, and whether your subscription is free or paid. That is the entire handoff. We do not receive your TeacherVision password, and no payment method, card number or billing address ever reaches Studio — billing happens on TeacherVision under its Subscription Terms (opens in a new tab).

What you upload and create

• Files you upload: PDFs up to 10 MB, and audio or video recordings up to 50 MB.
• Links you paste: YouTube URLs, up to 45 minutes long — or 30 minutes if the video has no captions of its own, because we then have to have a transcript made from its audio.
• What you type: the topic, subject, grade level, reading level and any instructions you give, plus the titles you save things under.
• What we generate from it: transcripts, study notes, summaries, worksheets, quizzes, flashcards, lesson plans, answer keys, and the PDF and Word files you download.
• A search index: your content is split into passages and turned into numeric “embeddings”, so that when you ask a question about your own material we can find the passage that answers it.
• Chats: the messages you send the assistant about a note, and its replies.
• Feedback: the thumbs up or down you give a resource, and the reason tags you pick with it.

Text is pulled out of PDFs on our own servers — a PDF you upload is not sent to a third party just to be read. Audio and video are a different matter, because they have to be transcribed: see section 5.

Live quiz sessions

When you run a live quiz, we store the name each student types, the options they choose, and timestamps. See section 6 for the detail and the deletion schedule.

Technical information

• Session cookies that keep you signed in (section 4).
• A short description of the browser and device you signed in with, stored against that session so it can be identified and signed out. It includes the IP address the session was created from.
• Your IP address, also used to rate-limit requests and block abuse. Outside the session record above, it is not stored against your account.
• Ordinary web-server request logs kept by our hosting provider, which include IP addresses and are retained for a short period.
• If part of the site fails in your browser, an error report: the page (without anything after a “?” in its address), the error, your browser and device type and, if you are signed in, your account. We keep these for 30 days to fix the problem.
• Google Analytics measurement data on our public pages (section 4).

Studio does not ask you for a phone number, a home address, a date of birth or a photo.

• To produce the resource you asked for.
• To keep your library, so you can find, re-open, re-download and rebuild your work later.
• To answer your questions about your own material.
• To apply the limits that come with your plan (free or paid, and how many generations you have used).
• To run live quiz sessions and show you the class results.
• To keep the service working and safe: rate limiting, diagnosing errors, preventing abuse.
• To improve Studio. We read the feedback you leave and look at usage in aggregate — how often a resource type is used, how often generation fails.
• To meet legal obligations and enforce our terms.

If you are in the EEA or UK, our legal bases are: performing our contract with you (running the service); our legitimate interests (security, abuse prevention, improving the product); your consent (where required, for analytics cookies); and compliance with legal obligations.

We do not use your information, or a student’s, to make any decision about you or them by automated means alone, and Studio does not profile students (Article 22 GDPR). A generated resource is always a draft for a teacher to review — it is never used to decide anything about a student without a person in the loop.

Cookies

We set no advertising cookies. Studio carries no advertising at all, and we do not use your content or your activity here to target ads anywhere. (The main TeacherVision website does carry advertising — its own policy covers that.)

Stored in your browser, not sent to us

Some settings live in your browser’s local storage and never reach our servers: your light or dark theme, whether an answer key is shown or hidden, which view a document was last opened in, the library page to return to, a short-lived copy of a generation form so a failed attempt can be retried, and — for a student — the random token that identifies their own quiz attempt. Clearing your browser data clears all of it.

Google Analytics, and your choice about it

We use Google Analytics 4 to count visits and see which pages are useful. It sets the cookies above and sends Google your approximate location (derived from your IP address), device and browser type, and the pages you view.

If you are in the UK or the EEA, Google Analytics does not load until you accept it. Not “loads but does not track” — the script is not requested and no analytics cookie is created. We ask once, in a bar at the bottom of the page, where declining takes exactly as many clicks as accepting. Ignoring the bar leaves analytics off.

You can change your mind at any time with the Cookie settings link in the footer of every page — wherever you are in the world, including if you were never shown the bar. Turning analytics off stops it from your next page view onward; a script already loaded in the current tab cannot be recalled. You can also opt out with Google’s browser add-on (opens in a new tab) or by blocking cookies for this site.

Your choice is remembered in your browser’s local storage, not in a cookie, and never leaves your device. Clearing your browser data will make us ask again.

Do Not Track

Like the main TeacherVision site, Studio does not currently respond to browser “Do Not Track” signals.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We use the following providers to run the service. Each one gets only what it needs, and is contractually limited to using it for us.

Where each one operates

OpenRouter, DeepInfra, Google Analytics and Railway are in the United States, and Railway is where the application, the database and the request logs sit. Two are not in the United States. Supadata, the last-resort step in the YouTube pipeline described below, is Dumpling Software UG, a German company based in Berlin, so that step stays inside the EU. The files you upload and the documents we generate are stored in Backblaze B2’s EU region, not in the US. Section 12 covers what that means for international transfers.

We also disclose information when:

• the law requires it — a subpoena, court order or other legal process;
• it is needed to protect the service, our rights, or someone’s safety; or
• Sandbox goes through a business transition such as a merger, acquisition or sale of assets, in which case your information is normally part of the assets transferred.

A note about the AI processing

Generating a resource means sending your content to an AI provider and getting the result back. We send it for that purpose and no other. We do not train any AI model on your content, and we do not build datasets from it. Providers keep their own operational logs under their own terms, and we choose providers on that basis.

How we turn speech into text

It is OpenAI’s Whisper model doing the work in every case. What differs is who runs it and what they receive, so it is worth separating.

• A recording you upload goes to DeepInfra, in the United States. Your file is the thing being transcribed.
• A YouTube link you paste takes up to three steps, and most links stop at the first. First we fetch the video’s own captions ourselves, on our own servers: nothing is sent to anyone and no AI model runs. If the video has no captions, we download its audio and have it transcribed by Whisper at DeepInfra — the same route an uploaded recording takes, except that what is transcribed is someone else’s published video rather than anything of yours. Only if both of those fail does the link go to Supadata, in Germany, which receives the video address and nothing else — never a file of yours — and either retrieves the captions or makes a transcript from the audio itself. We do not AI-transcribe a video longer than 30 minutes by either route, and we do not accept a YouTube link longer than 45 minutes at all.

AI output can be wrong. Everything Studio generates is a draft for you to check before you put it in front of a class.

Studio is a tool for educators, not a student product. Two things in it can nonetheless involve students, so this section is specific about both.

Live quiz sessions

Students do not create accounts, are never asked for an email address or a password, and are never tracked across sessions. A student opens the join link, types a name — whatever you have told them to use — and answers the questions. We store the name they typed, the options they chose, timestamps, and a random token kept in their browser so that one student cannot read another’s answers.

Sessions are built to disappear:

• A session stops accepting answers 4 hours after it is created, or as soon as you close it.
• Everything in the session — names, answers, all of it — is deleted within 24 hours.
• Results are not kept as a record, and no student profile exists anywhere in the system.

Teachers: you decide what students type in the name box. We recommend a first name and last initial, or a seat number — whatever is enough for you to read the results. Do not ask students to enter an email address, a student ID number, or anything else you would not write on the board.

This is also why live quiz data disappears so quickly. COPPA requires that information collected from a child be kept no longer than reasonably necessary for the purpose it was collected for; we do not keep it beyond the session at all.

Recordings you upload

A recording of a lesson may capture students’ voices and names, and both end up in the transcript. That recording is stored with the note, and is sent to our transcription provider to be turned into text. Only upload classroom recordings where your school permits it and you have any consent you need. Deleting the note deletes the recording.

Children

Studio is not directed to children, and we do not knowingly collect personal information from children under 13 for our own purposes. Where an educator or school uses Studio with students, the school decides what information is entered; we act on its instructions. We do not use anything a student enters for our own purposes, we do not advertise to students, and we do not build profiles of them.

Where a school or teacher chooses to use Studio with a class, the school is acting as the parent’s agent for COPPA purposes and consents on the parents’ behalf for that limited, school-authorised educational use — consistent with FTC guidance recognising schools as able to do this for tools used only for an educational purpose. We do not use anything collected this way for any commercial purpose of our own: not advertising, not profiling, not building a dataset, nothing beyond running the session the school asked for.

If you believe you or a child have given us personal information beyond what is described here, email support@teachervision.com and we will delete it. A parent, or the school acting on their behalf, can ask us to review what data about a child, if any, has been entered, have it deleted and refuse to let us collect any more of it by emailing us at the same address.

Schools and FERPA

Student names entered in a live quiz session may be education records under FERPA, depending on how your school uses them. We treat them accordingly: used only to run that session, never disclosed to anyone else, never used to build a profile, and purged within 24 hours. Schools that need a signed student data privacy agreement before using Studio with a class should contact us at support@teachervision.com.

• Everything travels over HTTPS.
• Session cookies are HTTP-only and Secure, and expire after 24 hours.
• Uploaded files sit in access-controlled storage, reachable only by the application’s own scoped credentials.
• A student’s quiz attempt is addressed by a random, unguessable token, so sharing a join link does not expose one student’s answers to another.
• Access to production systems is limited to the people who need it. A small number of authorised staff can view account and content records through internal tooling, for support and abuse investigation.

No system is perfectly secure, and we cannot guarantee that yours will never be compromised. If we discover a breach affecting your personal information, we will notify you and the relevant authorities as the law requires.

Inside Studio, at any time, you can:

• delete any note, resource, chat or uploaded file — which removes the stored file too;
• close a live quiz session early;
• turn analytics on or off from Cookie settings in the footer; and
• delete your whole Studio account from Account & data in your profile menu.

Deleting your account

Deleting your Studio account removes your entire library — every note and generated resource, the files you uploaded, your folders, chats, flashcards, quizzes, feedback and any live sessions — permanently and immediately. It cannot be undone, and we do not keep a hidden copy for a grace period. You are shown exactly what is about to go, and asked to type the word DELETE, before anything happens.

It deletes your Studio account only. Your TeacherVision account and your subscription are not touched — you remain a member and continue to be billed as normal. Cancel a subscription through TeacherVision, using its Subscription Terms (opens in a new tab). Signing in to Studio again afterwards simply gives you a new, empty library.

The reverse is also true: closing your TeacherVision account does not by itself erase your Studio library. Delete it here, or ask us to.

Everything else

For a copy of your data, a correction, or any request you would rather we handled — email support@teachervision.com with the subject line Data request – Studio and the email address on your account. We may ask you to confirm your identity first, and we will respond within 30 days.

We will not deny you service or treat you differently for exercising any of these rights.

TeacherVision is a United States company, but two frameworks based outside of the United States can still govern how we handle information here, and we would rather explain why than leave you to guess.

COPPA. The Children’s Online Privacy Protection Act applies because a student can be involved in Studio even though Studio is not directed at them and they never hold an account: when a teacher runs a live quiz, a student’s typed name and answers pass through our systems briefly. Section 6 explains how we handle that, and why a school can consent on a parent’s behalf for that limited, educational use.

GDPR. The EU General Data Protection Regulation, and in the UK the UK GDPR, applies based on where a service is used, not where the company providing it is based (Article 3(2) GDPR). Studio is reachable by, and intended to also be used by, teachers and schools in the European Union and the UK, so their personal information is protected by the GDPR regardless of Sandbox being a US company. Section 12 sets out what that means in practice.

Where the two overlap. A student in the EU taking part in a live quiz can be protected by both at once — COPPA because they are a child, GDPR because they are in the EU. We do not treat that as two rulebooks to pick between; we apply whichever is more protective.

Under the CCPA as amended by the CPRA, these are the categories of personal information Studio may collect:

• Identifiers — name, email address, account identifiers, IP address.
• Internet or network activity — pages viewed and actions taken in the product.
• Audio and electronic information — recordings you upload, and their transcripts.
• Content you provide and we generate — files, prompts, resources, chats and feedback.
• Commercial information — whether your subscription is free or paid.

We collect these from you and from your TeacherVision account for the purposes in section 3, and disclose them to the service providers in section 5. We do not sell or share personal information as those terms are defined by California law, and we do not draw inferences from your Studio use to build a profile about you.

You have the right to know what we collect, to access it, to correct it, to delete it, to limit the use of sensitive personal information, and not to be retaliated against for asking. Exercise any of them by emailing support@teachervision.com. An authorised agent may make a request on your behalf with written proof.

You have the right to request a copy of the personal information we hold about you, to have it corrected or erased, to restrict or object to how we process it, and to have it transferred to another provider. Where we rely on your consent, you can withdraw it at any time. If you are not satisfied with how we handle your request, you can complain to your local data protection authority. We will respond within one month of a request under this section; where a request is complex or we have received a number of them, we may extend that by a further two months, and we will tell you if we do (Article 12(3) GDPR).

Studio is operated from the United States. Your information, including files you upload, may be processed in the United States and in other countries by the providers listed in section 5 — most of them in the United States, with two exceptions noted there: the files you upload are stored in the EU, and Supadata, our last-resort provider for a YouTube link, is a German company processing within the EU. Where information is transferred out of the UK or EEA, we rely on Standard Contractual Clauses or another transfer mechanism recognised under applicable law.

Studio links out to TeacherVision and to other sites, and the resources you generate may cite sources elsewhere. Once you leave, the privacy policy of the site you are on applies, not this one. We do not control what those sites collect.

We update this page when Studio changes. The date at the top is the last time it changed. If a change materially affects how we handle your information, we will say so in the product rather than relying on you to re-read this page. Using Studio after a change means you accept the updated policy.

Questions about this policy, or about what we hold on you:

• Email: support@teachervision.com
• Post: TeacherVision Studio, c/o Sandbox Networks, Inc., WeWork 24th Fl, 1 Lincoln St, Boston, MA 02111, USA
• Phone: 1-800-498-3264
• Data protection officer: Rodrigo Muniz Diniz

See also the TeacherVision Privacy Policy (opens in a new tab), the Terms of Use (opens in a new tab) and the Subscription Terms (opens in a new tab), which govern your account and your subscription.

Back to TeacherVision Studio