Privacy Policy

What We Collect

When you use YourBillIsLying, we collect the following information:

• Account information: Your email address, provided when you create an account via Clerk authentication.
• Bill images and documents: PDF or image files of medical bills you upload for analysis.
• ZIP code: Your ZIP code, used to apply locality-accurate Medicare rate comparisons.
• Usage data: Basic analytics about how you interact with the service (pages visited, features used), collected via PostHog.
• Payment information: Processed securely by Stripe. We never see or store your full card number.

How We Use Your Data

• To analyze your medical bill and generate line-item comparisons against Medicare benchmark rates.
• To generate negotiation letter templates (Fighter plan members).
• To improve the accuracy of our analysis over time.
• To send transactional emails (account confirmation, billing receipts).
• We do not sell your data. Your medical billing information is never sold to third parties, advertisers, or data brokers.

How We Store Your Data

• Bill images and documents are stored in Supabase with encryption at rest.
• 30-day auto-delete: Original bill images are automatically deleted 30 days after upload. Analysis results (line items, totals) may be retained longer to support your dashboard history.
• All data is transmitted over encrypted HTTPS connections.

Third-Party Services

To provide this service, we share data with the following trusted third parties:

• Anthropic Claude API: We send bill images and text to Anthropic's Claude AI for analysis. Anthropic processes this data under their API terms of service. We recommend reviewing Anthropic's Privacy Policy.
• Supabase: Database and file storage, hosted on AWS infrastructure.
• Clerk: Authentication and user account management.
• Stripe: Payment processing.
• PostHog: Product analytics (anonymized usage data).
• Vercel: Hosting and infrastructure.

HIPAA Notice

YourBillIsLying is HIPAA-conscious but not a HIPAA-covered entity. We are not a healthcare provider, health plan, or healthcare clearinghouse, and we are not subject to HIPAA regulations. However, we take the privacy of your medical billing data seriously and apply reasonable security measures consistent with HIPAA best practices — including encryption at rest and in transit, minimal data retention, and strict access controls.

If you have concerns about sharing your medical billing information, you may redact personally identifiable details (name, address, date of birth) from your bill before uploading. Our analysis focuses on CPT codes, billed amounts, and procedure descriptions — not your personal identity.

Your Rights

• You may request deletion of your account and all associated data at any time.
• You may request a copy of the data we hold about you.
• You may opt out of analytics tracking by using browser privacy settings or a content blocker.

Contact

Questions about this privacy policy? Email us at help@yourbillislying.com