Privacy notice

Effective November 2, 2026

Teachvisor is operated by runMast LLC. This notice explains the current pilot at teachvisor.com. Contact help@teachvisor.com for privacy, access, correction, or deletion requests.

What is stored, and where

Teacher sign-in

Google and Firebase handle teacher authentication. The sign-in flow processes your Google account identity and authentication tokens to establish your teacher session. Teachvisor uses an account-derived identifier to associate your classroom records with you. We do not receive your Google password.

Private classroom records: encrypted sync

Roster names and access codes, class information, private calendar details, teaching notes, lesson plans, closeouts, student goals and the progress data you record for them, shared support and the people you share it with, the record of Needs Attention items you cleared (including a short summary of forwarded email you marked as handled, never the message itself), and meeting packets are encrypted in the browser before syncing to our service. Some of these records can contain personal information; encrypted storage is still cloud storage. Your recovery file and locally held decryption keys are not uploaded as part of the synced roster.

Assignments and results: remote storage

Our service stores teaching materials, assignment identifiers, pseudonymous student identifiers, starting levels, answers used for automatic checks, attempts, scores, and progress history. These records remain linkable to students through the classroom roster. They are educational records, not anonymous data simply because names are absent.

Photos and written responses

Submitted work photos and written responses that require teacher review are encrypted in the browser before remote storage. Authorized teachers decrypt them for review. A photo may contain names or other personal details even though it is encrypted.

Restricted document overview: device-only vault

The local document importer reads supported PDF or text files on your device. It retains extracted text, filenames, source references, and teacher-confirmed facts in a separate encrypted browser-local vault. It does not upload that vault through Teachvisor or retain the original file bytes there. These records are excluded from classroom sync, recovery files, and AI requests. A student goal you write or edit yourself is a private classroom record, not part of this vault: it syncs encrypted with your classroom, can appear in meeting packets you save, and is never sent to AI. If you copy a confirmed fact into a goal, that copy becomes such a record. Shared support, the instructions you write for the teachers, providers and assistants who carry out a student’s plan, is also such a record: each person sees only the items you choose for them, on a sheet you print or, for an assistant you list for that student with their Team email, encrypted to their approved browser, only for students their Team access covers. It is never sent to AI. When you choose Back up classroom, saved local documents on this browser are included in the password-encrypted file you download. The local documents and backup password are not uploaded to Teachvisor. Restoring that file restores the documents into the local vault of the browser you use. Local documents on other browsers are not collected automatically.

Email to Teachvisor

When Email to Teachvisor is turned on, you can forward email to a private Teachvisor address. Cloudflare Email Routing receives messages for teachvisor.com and passes them to our service. Our service reads each message in memory only long enough to check the address and size and to extract the sender, subject, text and reply identifiers; it then encrypts the message with your classroom’s key before storing it. We do not store the readable message, and we cannot read the stored copy. Attachments are not kept; only their file names are. Messages are deleted when you file or dismiss them. Messages older than 30 days are deleted the next time mail arrives for you or your inbox is checked; there is no separate timed purge yet, so turn the address off in Settings if you stop using it. Sorting, filing and what sorting learns from your choices (contacts, per-sender habits and a counts-only accuracy record) happen in your unlocked browser and are saved inside the encrypted classroom. Forward only email you are allowed to share with this service; your school may restrict forwarding to outside addresses.

Teaching teams and invitation email

Teachers can invite assistants by email and choose which students, groups, subjects and tasks they may access. The invited assistant signs in with the invited account, and the teacher approves the assistant’s browser before shared teaching material becomes available. Assistant access can be limited or removed. Assistant delivery notes and review history stay separate from the teacher’s final student assessment. The device-only document vault and private classroom recovery key are not shared through a team invitation.

When invitation email is configured, Resend processes the recipient address, inviting teacher’s email address and private invitation link to deliver it. The invitation does not include student work or private classroom notes. Delivery metadata is kept separately from classroom backups, and restoring a backup does not resend invitations or reactivate assistant access. Shared-account email-event reporting is disabled. Student-feedback email requires a separate approved-recipient configuration; staff invitation email does not enable it.

How we use information

We use information to authenticate users, deliver assignments, record attempts, prevent repeated questions, support teacher review and planning, sync approved encrypted records, and protect the service. We do not sell student information or use it for advertising. Teachvisor does not include advertising trackers or third-party marketing analytics.

AI and external assistants

Automatic generation sends generic curricular requests to Cloudflare Workers AI, which runs an open model (Meta Llama): subject, teaching goal, grade or readiness levels, question count, and activity/answer settings. When you choose to, it also sends teaching content you select: for curriculum adaptation, the selected problems, their answers and rubrics and the learning goal; for a teaching excerpt, up to 1,000 characters of that excerpt. The application is designed to exclude roster names, student-to-level mappings, score histories, private notes, calendars, photos, responses, and restricted documents from model requests. Validation safeguards cannot reliably identify every kind of personal information in free text. Do not type or paste private information into teaching requests.

What is sent to AI is not encrypted for your classroom. Unlike your encrypted classroom records, the text of an AI request is readable by our service and by Cloudflare while the request is processed. Cloudflare states that it does not use Workers AI content to train models and does not retain inputs or outputs after processing (Cloudflare Workers AI data usage, updated October 16, 2026). Generated questions you accept are stored by our service for delivery and review, as described above. Send only teaching content you have the right to use; some publishers’ terms forbid using their material with AI at all.

If you copy a prompt into an external AI assistant, that provider handles what you submit under its own terms and privacy practices. That step is optional. Review the prompt first and share only generic teaching content. Teachvisor does not send student records to an external assistant on your behalf.

Service providers and optional calendar access

Cloudflare hosts the application, database, and automatic generation service. Google/Firebase provides teacher sign-in. If you choose to connect Google Calendar, Teachvisor requests separate read-only access to the calendars you select; calendar access tokens are kept in browser memory for that session, and saved private calendar details are encrypted before classroom sync. Public calendar feeds are fetched to support planning. Calendar content is not included in generation requests.

Providers process the technical information needed to deliver their services, which may include IP addresses, request information, and security records. Teachvisor’s application request logging is disabled in the current deployment; that does not eliminate infrastructure processing or provider security records. See Cloudflare’s Privacy Policy and Google’s Privacy Policy.

Cookies and browser storage

Teachvisor uses session cookies for teacher and student access. Local browser storage remembers display settings and your workspace choice. If you opt to remember an unlocked classroom on a private computer, its key is stored in that browser. The restricted document vault uses separate browser storage and keys. These are functional features, not advertising cookies. Shared-device users should leave “remember” off and lock or sign out when finished.

Access, sharing, and security limits

Classroom administration and review require the associated teacher account. Student codes grant access to that student’s work. Printed pages, QR codes, downloaded recovery files, encrypted classroom backups, and exported packets should be handled as private school materials. Browser encryption does not protect against an unlocked device, someone with your recovery file, malicious software, or all browser/operating-system backups. A web app cannot guarantee that information never leaves a physical school laptop.

We may disclose information when legally required or as necessary to address fraud, security threats, or unlawful activity. Any such disclosure is limited to information available to us; we cannot recover locally held keys or local-only documents from the server.

Retention, deletion, and recovery

The pilot does not yet implement a complete automatic retention schedule, school-year archive, or self-service account deletion. The classroom reset in School and account → Privacy and reset requires two confirmations and permanently removes the signed-in teacher’s active remote classroom and work records, invalidates student codes, and closes teacher sessions. It also attempts to remove local imported documents and the remembered key from the browser where reset is performed; a cleanup failure is reported. Downloaded files and local documents or keys on other devices are not removed by reset and must be cleared separately. Reset does not delete your Google account or Google calendar. Infrastructure backups may persist under provider retention practices. Remote classroom and work records can otherwise remain stored until specifically removed; stopping use or clearing your browser does not delete them. Email help@teachvisor.com to request access, correction, or deletion. We will verify your authority before handling classroom records and explain the scope of deletion and any applicable legal or backup limits. Do not send student records or recovery keys in your initial email.

Device-only documents must be removed on the device; deleting a local document through the overview removes its local record. Clearing site storage or losing the browser profile may permanently lose all local documents and remembered keys. Remote encrypted records may become unreadable if their recovery information is lost. A complete encrypted backup and its password can restore the saved records it contains to the same teacher account. A recovery file alone does not restore local documents. Restoring replaces saved classroom records and local documents on the restoring browser after review and confirmation; local documents on other browsers are unaffected. A school-approved retention and backup arrangement is needed before real records are used.

Students and families

Students do not need Google or ChatGPT accounts to open teacher-assigned work. Where required, appropriate school authorization or parental consent must be established before collecting a child’s information. Teachvisor currently does not provide a self-service parental-consent or verified school-authorization workflow. Parents and eligible students should contact their school about educational records and may also contact us at help@teachvisor.com. We will work with the school and authorized requester rather than disclose records based on an unverified email.

Changes and contact

We will update the date on this notice when our practices change and provide additional notice or obtain consent where required. For questions about runMast LLC or Teachvisor privacy, contact help@teachvisor.com.

Return to Teachvisor