Privacy Policy

This policy applies to information we collect through Teach Pair Share. It does not replace the privacy policies of third-party services that process information through their own systems, including Stripe for payments and tax onboarding, Supabase for authentication and data storage, Vercel for hosting, Resend for email delivery, PostHog for product analytics, Sentry for error monitoring, Typesense for marketplace search, Upstash for rate limiting and infrastructure support, and Google Gemini when a creator chooses to use AI-assisted listing suggestions, and OpenAI when our Codex customer support workflow is enabled.

We collect information in the following categories:

• Account and profile information. Name, email address, password or sign-in credentials handled through Supabase Auth, avatar, role, store name, creator bio, public profile details, educator verification status, and account settings.
• Creator application and store information. Teaching background, subject focus, resource descriptions, store branding, public social links, creator status, Stripe Connect status, and tax-readiness status returned by Stripe.
• Marketplace content. Product titles, descriptions, tags, subjects, grade levels, standards alignment, prices, previews, downloadable files, reviews, ratings, wishlist activity, follows, reports, support requests, platform ideas, survey responses, and other content submitted through the marketplace.
• Purchase and transaction information. Orders, checkout status, purchase library records, download history, site credit activity, support outcomes, gross sale amounts, platform commissions, Stripe processing amounts, Pair Credit records, refunds or reversals, and accounting events. Stripe processes card details, bank details, identity verification, taxpayer information, and related sensitive payment information. We do not store full card numbers, full bank account numbers, full SSNs, EINs, W-9 forms, or government identity documents.
• Communications. Support requests, inbound emails, attachments, messages, notifications, creator help requests, marketing preferences, unsubscribe records, email delivery events, opens, clicks, and suppression records.
• Waitlist, marketing, and preference information. Email address, grade levels, subjects, resource needs, opt-in status, consent source, campaigns, referral information, and event history used to understand launch demand and send requested updates.
• Device, usage, analytics, and attribution information. Pages viewed, products viewed, search activity, checkout events, referrer URLs, landing URLs, UTM parameters, approximate location derived from IP address, device and browser details, first-party visitor or session identifiers, referral codes, search-engine attribution, and hashed or pseudonymous IP and user-agent identifiers used for analytics, fraud prevention, rate limiting, and Pair Credit attribution.
• AI-assistant inputs. If a creator uses AI-assisted listing suggestions, the listing text and context provided to that tool are sent to Google Gemini to generate the requested suggestions. Creators should not submit confidential student, school, or third-party information to the AI assistant.
• Automated customer support. When enabled, website support uses OpenAI through our signed-in Codex account to choose approved guidance, ask clarifying questions, and summarize reported site problems for engineering. The assistant receives reviewed help and short excerpts from the recent support conversation, with obvious contact addresses, links and credentials removed. This reduces the data shared but does not make text anonymous; excerpts can contain personal details you include. Private account facts, internal notes, attachments and screenshots are excluded. Engineering receives a minimized issue summary and uses fictional data to investigate. Updates are posted in your website support conversation after a fix is verified on the site. Automated answers are identified. Restricted security, privacy, legal, and student-data reports receive specialist handling. Screenshots are private, validated, and stripped of metadata. You can request a person at any time. OpenAI processing is governed by the applicable account terms and data controls; see Codex authentication and account controls.

Some U.S. state privacy laws require category-based disclosure. In the last 12 months, we may have collected the following categories of personal information:

We do not use sensitive personal information to infer characteristics about users. We use it only as needed to provide the service, route payments, satisfy legal obligations, protect the marketplace, and respond to user requests.

• Operate accounts, authentication, dashboards, purchases, downloads, and support.
• Publish creator stores, listings, previews, ratings, reviews, and buyer-facing trust signals.
• Process payments, commissions, site credits, Pair Credit, reversals, accounting records, tax-readiness checks, and fraud prevention.
• Provide creator tools, listing quality feedback, similarity screening with human review, search, recommendations, analytics, and marketplace ranking.
• Send transactional emails, product updates, support notices, waitlist updates, preference-based marketing, and legally required notices.
• Measure site performance, improve product flows, debug errors, protect account security, prevent abuse, and enforce our policies.
• Comply with tax, accounting, consumer protection, intellectual property, law enforcement, and other legal obligations.

We share information only as needed for the purposes described in this policy:

• With marketplace participants. Public creator profile and listing information may be visible to visitors and buyers. Buyers and creators may see information needed to complete purchases, answer support requests, handle reviews, and operate the marketplace.
• With service providers. We use vendors for hosting, authentication, database storage, file storage, payments, tax tooling, email delivery, analytics, error monitoring, search, security, rate limiting, support workflows, and AI-assisted suggestions. These providers process information for us or under their own terms, depending on the service.
• With payment and tax providers. Stripe receives information needed to process payments, route creator earnings, verify connected accounts, maintain Stripe Express accounts, and support tax reporting.
• For legal, safety, and policy reasons. We may disclose information to enforce our policies, respond to valid legal requests, protect users and the marketplace, investigate fraud or abuse, process copyright notices, or comply with tax, accounting, and consumer protection requirements.
• During business changes. If we are involved in a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.

We do not sell personal information for money. We do not currently disclose personal information for cross-context behavioral advertising. If our practices change, we will update this policy and provide required choices.

We use cookies, local browser storage, and similar technologies for:

• Essential functionality. Sign-in sessions, security, checkout, preferences, and marketplace operation.
• Automatic Pair Credit attribution (optional). With your permission, first-party cookies remember creator referral links for up to 30 days and eligible search discoveries within a browser session, with a two-hour safety limit. This choice is separate from analytics. We do not use fingerprinting or browser-storage backups to recover attribution after you reject it.
• Analytics and product improvement (optional). With your permission, we use PostHog and internal event logs to understand page views, product views, searches, checkout flow, purchase events, and feature usage. Session recording is not enabled in the current implementation.
• Email and marketing measurement. If enabled, email delivery, open, click, unsubscribe, and preference events help us operate requested communications and honor marketing choices.

Use the Cookie choices button to accept, reject, or change optional purposes. They are off until you choose to enable them. A preference cookie remembers only your choices for 90 days. Withdrawing permission stops future optional collection and clears our corresponding tracking cookies; it does not undo lawful processing that already occurred.

You can enter a creator referral code at checkout with optional cookies off. We validate that choice and store it as part of the purchase, without setting an attribution cookie. Qualifying attribution already attached to a saved cart or prepared order is retained on the server to allocate Pair Credit, subject to eligibility and expiry rules. Cookie changes do not erase completed financial records. Necessary sign-in and checkout cookies remain separate; browser-level blocking may affect those functions.

Teach Pair Share is designed for educators and other adults. It is not directed to children under 13, and children under 13 may not create accounts or use the marketplace directly. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information, contact us and we will review and delete it where required.

Teachers, schools, and districts must not upload student personally identifiable information, education records, IEP details, health information, discipline records, identifiable student work, or other confidential student data to listings, previews, downloads, messages, reviews, reports, support requests, AI prompts, or public content. If an educator uses classroom examples, they must remove all direct and indirect student identifiers before submitting content.

If a school or district uses Teach Pair Share, that organization is responsible for determining whether its use complies with FERPA, COPPA, state student privacy laws, procurement rules, consent requirements, and local policies. We do not act as a school's designated student-record system unless a separate written agreement says so.

Withdrawing optional cookie consent deletes the related browsing records we can match to your current visitor or signed-in account, and requests deletion from PostHog when applicable. We remove browsing context from saved Pair Credit while keeping necessary cart, order, payment and accounting facts. Provider deletion may take time to complete. Cookie-choice receipts are kept separately for up to one year to demonstrate consent.

We keep information for as long as needed to provide the marketplace, maintain accounts, fulfill purchases, operate creator stores, resolve support requests, enforce policies, satisfy tax, accounting, copyright, security, and legal requirements, and maintain accurate financial records. Transaction, tax, accounting, support, copyright, abuse, and security records may be retained after account closure when required or reasonably needed for legitimate business or legal purposes.

Support cases, their correspondence, accepted screenshots, and related records are kept for at least seven years, with the period renewed by new case activity. Deletion is considered only after a case is resolved, the retention period has passed, related support work has finished, and no legal or safety hold applies. Records may be kept longer for legal, security, or marketplace integrity needs. The end of the retention period does not mean records are automatically deleted. Retention of the limited support support information sent to OpenAI is governed by the applicable account terms and data controls.

Marketing preference and unsubscribe records are retained so we can honor your choices. Other inbound email records may be retained for extended periods where needed for marketplace integrity, accounting, legal, and user-safety reasons.

• Account updates. You can update many account, profile, store, and preference details from your account settings or creator dashboard.
• Marketing choices. You can unsubscribe from marketing emails using the unsubscribe link or email preference page. Transactional and service emails may still be sent when needed to operate the marketplace.
• Access, correction, deletion, and portability. Depending on where you live, you may have rights to request access to personal information, correction, deletion, a portable copy, or information about how we use and disclose your data.
• Opt-out rights. Depending on where you live, you may have rights to opt out of sale, sharing, targeted advertising, profiling, or certain uses of sensitive information. We do not currently sell personal information for money or use cross-context behavioral advertising. If required by law, we will honor applicable browser opt-out signals.
• Appeals and non-discrimination. Where required by law, you may appeal a denied privacy request. We will not discriminate against you for exercising your privacy rights.

To make a privacy request, email support@mail.teachpairshare.com. We may need to verify your identity before responding. Authorized agents may submit requests where permitted by law, but we may require proof of authorization.

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including hosted authentication, role-based access controls, restricted administrative access, secure payment handling through Stripe, monitoring, and security review processes. No online service can guarantee absolute security.

Teach Pair Share is operated from the United States. If you access the service from outside the United States, your information may be processed in the United States and other countries where our service providers operate. Those countries may have different privacy laws than your location.

We may update this Privacy Policy as our marketplace, vendors, laws, or data practices change. When we make material changes, we will update the date above and provide additional notice when required or appropriate.

Questions or requests can be sent to support@mail.teachpairshare.com.