Privacy Policy
Teachfloor Studio · Last updated: November 6, 2026
This Privacy Policy explains how Powerbox, Inc. (“Powerbox”, “we”, “us”) collects, uses and shares personal data when you use Teachfloor Studio (the “Service”). It is part of our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms.
1. Our role
For the data of our customers and visitors (account, billing, support, usage), Powerbox is the controller.
For the data of learners who use packages published with the Service, and for any personal data contained in Customer Content, our customer is the controller and Powerbox processes the data on the customer's behalf and according to its instructions. If you are a learner, please contact the organization that gave you the course: it is responsible for that data and for answering your requests. We will help it as required by law.
2. Data we collect
- Account data: name, email address, company, and the details you add to your profile.
- Billing data: plan, purchases, invoices and billing details. Payment card details are collected and stored by Stripe, not by us.
- Customer Content: files, documents, media, prompts and text you upload, and the content generated for you.
- Learner data from published packages, such as answers, conversation transcripts, scores, completion, and, where the customer enables it, the learner's name or email. Voice recordings in voice calls and spoken scenarios are processed in real time to transcribe and evaluate them and are not stored; the resulting transcripts are stored.
- Usage and technical data: log data such as IP address, browser, device, pages and features used, errors, and dates and times of access.
- Communications: messages, feedback and support requests you send us, including through the support chat.
3. How we use data
We use personal data to:
- provide, operate, maintain and secure the Service, including processing content with AI;
- create and manage accounts, process payments and send service emails such as sign-in links and notifications;
- provide support and respond to requests;
- monitor, analyze and improve the Service, and prevent fraud, abuse and violations of our Terms;
- send you news and marketing about our products, which you can stop at any time (Section 6);
- comply with legal obligations and enforce our rights.
If you are in the European Economic Area, the United Kingdom or Switzerland, see Section 11 for the legal bases we rely on and your rights under the GDPR.
We do not sell personal data, and we do not use Customer Content to train our own AI models.
4. Who we share data with
We share personal data only as needed to run the Service, with:
| Category | Providers | Purpose |
|---|---|---|
| AI providers | OpenAI; OpenRouter and the model providers it routes to (such as Google and DeepSeek); Google Cloud; Alibaba Cloud; ElevenLabs | Generating, translating, transcribing, voicing and evaluating content |
| Video and avatars | HeyGen; fal.ai | Generating avatar videos and lip-sync |
| Hosting and storage | DigitalOcean | Servers, database and file storage |
| Payments | Stripe | Payments, subscriptions and invoices |
| SendGrid, Mailjet | Service and marketing emails | |
| Sign-in | Teachfloor | “Sign in with Teachfloor”, if you use it |
| Support chat | Crisp | Live chat and support conversations |
| Analytics | Plausible | Aggregated, cookie-free website statistics |
These providers may change over time. We may also share data with our affiliates, with professional advisers, with a buyer or successor in a merger, acquisition or sale of assets, and with authorities when required by law or to protect our rights, users or the public.
Packages you publish run inside the learning platform you choose. That platform, and any third-party content you embed (such as YouTube videos), handle data under their own policies.
5. International transfers
Powerbox is based in the United States, and our providers may process data in the United States, the European Union and other countries. Where required, we use appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses (and the UK and Swiss equivalents) or another transfer mechanism recognized by law. You can ask us for more information about these safeguards.
6. Emails
We send service emails that are needed to use the Service, such as sign-in links and job notifications. We may also add your email to our mailing lists to send you news and offers about our products, as described in our Terms of Service. You can unsubscribe from marketing emails at any time using the link in each email or by writing to us, and you can still use the Service.
7. Cookies
We use cookies that are necessary for the Service, such as the cookie that keeps you signed in. Our support chat (Crisp) uses cookies and similar storage to keep your conversation and session. Our website analytics (Plausible) do not use cookies and do not track you across sites. We do not use advertising cookies. You can block or delete cookies in your browser settings, but some features may not work.
8. Retention
We keep personal data for as long as your account is active and as needed to provide the Service. After your subscription ends or your account is closed, we may delete Customer Content after 30 days, as described in the Terms. We may keep some data longer where needed for legal, tax, accounting or security reasons, or to resolve disputes. Learner data is kept until the customer deletes it or the related content or account is deleted.
9. Security
We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, write to support@teachfloor.com. We may need to verify your identity before we answer. You may also have the right to complain to your local data protection authority.
11. GDPR: people in the EEA, UK and Switzerland
This section applies when the EU General Data Protection Regulation (GDPR), the UK GDPR or the Swiss Federal Act on Data Protection applies to our processing. In that case Powerbox, Inc. is the controller of the data described in Section 1, and the customer is the controller of learner data and Customer Content.
Legal bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Creating your account and providing the Service, including AI processing of your content | Performance of a contract (Art. 6(1)(b)) |
| Payments, invoices, tax and accounting records | Legal obligation (Art. 6(1)(c)) and contract (Art. 6(1)(b)) |
| Service emails, support and the support chat | Performance of a contract (Art. 6(1)(b)) |
| Security, fraud and abuse prevention, debugging, improving the Service and aggregated statistics | Legitimate interests (Art. 6(1)(f)) |
| Marketing emails about our similar products to customers, with an opt-out in every email | Legitimate interests (Art. 6(1)(f)) and the rules on emails to existing customers |
| Establishing, exercising or defending legal claims | Legitimate interests (Art. 6(1)(f)) |
| Anything else we ask you to agree to separately | Consent (Art. 6(1)(a)), which you can withdraw at any time |
Where we rely on legitimate interests, we have balanced them against your rights. You can ask us for details of this balance. Providing your name and email is necessary to create an account; without them we cannot provide the Service.
Your rights
Subject to the conditions and exceptions in the law, you have the right to:
- access your personal data and receive a copy (Art. 15);
- rectify inaccurate or incomplete data (Art. 16);
- erase your data (Art. 17);
- restrict processing (Art. 18);
- data portability: receive the data you gave us in a structured, machine-readable format (Art. 20);
- object to processing based on legitimate interests (Art. 21), and object at any time to direct marketing, in which case we will stop;
- withdraw consent at any time, without affecting processing carried out before;
- lodge a complaint with a supervisory authority, in particular in the country where you live or work (for example the Garante per la protezione dei dati personali in Italy, or the ICO in the UK).
To exercise your rights, write to support@teachfloor.com. We answer within one month, which may be extended by two further months for complex requests, as allowed by the GDPR. We may need to verify your identity. Requests are free, unless they are manifestly unfounded or excessive. If you are a learner, we will forward your request to the customer that controls your data.
Automated processing
The Service uses AI to generate content and, in packages published by our customers, to produce automated scores and feedback for learners. Powerbox does not use these results to make decisions that produce legal or similarly significant effects on you. Customers decide how they use learner results and are responsible for any human review required by law.
12. Children
The Service is not directed to children, and accounts are only for people aged 18 or over. Customers may not use the Service to process the personal data of children under 16 without our written approval.
13. Changes to this policy
We may change this Privacy Policy at any time. Changes take effect when we post them on this page, and the “Last updated” date above shows the latest version. By continuing to use the Service, you accept the updated policy.
14. Contact
Powerbox, Inc.
2810 N Church St, PMB 829659, Wilmington, DE 19802, United States
support@teachfloor.com