Privacy policy

Medical bills are sensitive. This page explains exactly what we do with yours, in plain terms.

What we collect

The bill you upload, and the line items, codes, amounts, provider name, service date and facility ZIP code read from it. If you generate a letter, the name and account number you type in. If you use the financial assistance flow, the household size and annual household income you provide, which go into that letter. If you contact us, your email and message. Technical data such as your IP address, which we use only to limit abuse and which we store as an irreversible hash.

We do not ask for your date of birth, medical record number, diagnosis, insurance member ID, or Social Security number, and we do not read them from your bill.

How we use it

To analyse your bill, to produce the letter you ask for, to answer your support requests, and to improve accuracy in aggregate. We do not use your data for advertising, and we do not sell it.

Automated analysis

Your bill is processed by an AI model to read its line items. This happens through an API under a commercial agreement that prohibits using your content to train models.

Who processes your data

We use a small number of vendors to run the service: Anthropic (document analysis), Supabase (database and file storage), Vercel (hosting), Stripe (payments), Cloudflare (bot protection), Google Analytics (site usage statistics — page views and general navigation patterns only, never your bill content or any information from it). Each processes data only to provide their service to us. We do not share your bill with providers, insurers, employers, data brokers, or advertisers.

Security

Files and data are encrypted in transit and at rest. Access is restricted at the database level so that your records are only ever returned to your own session. We are not a HIPAA covered entity or business associate, because we do not provide treatment, payment, or healthcare operations services to one. We hold ourselves to HIPAA-grade handling standards regardless.

Retention and deletion

You can ask us to delete your uploaded bill and everything read from it at any time by emailing support@cutmedibill.com. We delete it within 30 days of your request, except where we must keep a payment record for tax and accounting purposes.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your data, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined under California law. To exercise any right, email us.

Children

The service is not intended for anyone under 18. If a bill relates to a minor, it should be submitted by their parent or guardian.

Changes and contact

Material changes will be posted here with a revised date.
support@cutmedibill.com
CareBear Inc., 187 East Warm Springs Road, Suite B, Las Vegas, NV - 89119, US