Privacy Policy
Last updated: July 9, 2026
This Privacy Policy explains what BillCheck collects, how we use it, and the choices you have. BillCheck is designed to keep the sensitive documents you upload private to your own account.
What we collect
- Account data: email address, display name, and authentication identifiers.
- Case content: bills, EOBs, notes, timeline entries, chat messages, and generated letters that you create or upload.
- Billing data: subscription status and Stripe customer identifier. We do not store full card numbers — payment details are handled directly by Stripe.
- Basic technical data: IP address, browser type, and error logs used to keep the service secure and reliable.
How we use it
- To provide analyses, letters, and chat responses for your cases.
- To operate your account and process subscription payments.
- To detect abuse and secure the service.
- To comply with legal obligations.
Automated processing
To analyze a bill or answer a chat question, the contents of that case (uploaded files and case metadata) are sent to our secure analysis provider for processing. We instruct our provider not to use your content to train its models. We do not sell your data.
Analysis is fully automated: a human at BillCheck does not review your documents unless you contact support and explicitly share your case. Generated outputs are stored in your account and deleted when you delete the case or close your account.
Where your data lives
Case files are stored in a private storage bucket and case records in a Postgres database, both protected by row-level security so that only your account can read them. Employees do not access your case content except when strictly necessary to operate the service or respond to a support request you initiate.
Sharing
We share information only with service providers that help us run BillCheck — for example, our hosting, database, storage, analysis, and payments providers. These providers process data on our behalf under contractual confidentiality obligations. We do not sell personal information.
Retention and deletion
You can delete any case at any time from the case page; deletion removes the case record, its analyses, letters, timeline events, chat messages, and the underlying uploaded files. You can close your account by contacting us; on closure we delete or anonymize your content within 30 days, except where we must retain limited records to comply with law or resolve disputes.
Your choices
You may access, correct, export, or delete your data by using the in-app controls or emailing us. Depending on where you live, you may also have additional rights under laws such as GDPR or CCPA; we honor verified requests.
Security
We use encryption in transit, encryption at rest for uploaded files, row-level access controls, and least-privilege service credentials. No system is perfectly secure; please use a strong, unique password.
Not medical or legal advice
BillCheck is an informational tool only and is not a covered entity under HIPAA. Analyses and letters are automated output that you should review before acting on. See our Terms for the full disclaimer.
Children
BillCheck is not intended for anyone under 18. We do not knowingly collect information from children.
Changes
We will post material changes to this policy on this page with an updated date. If changes are significant, we will notify you by email.
Contact
Privacy questions: privacy@billcheck.app.