BillRight Privacy Policy
Effective date: November 10, 2026
Who we are and what this covers
BillRight checks medical bills and writes letters you send yourself. This policy explains what we collect when you use getbillright.com, why, who helps us, how long we keep it, and your choices.
- "BillRight," "we" and "us" mean the company that operates BillRight, named in our Terms and Conditions.
- It covers our website, the bill checker at getbillright.com/app, bill packs, and the emails we send.
- Health information you give us is also covered by our Consumer Health Data Privacy Policy. If the two differ for health data, that policy controls.
- We don't require an account or a password.
What we collect
We collect only what you give us to check your bill, plus the records needed to take payment and send what you asked for.
| What | Examples | Where it comes from |
|---|---|---|
| Your documents | Medical bill, insurance Explanation of Benefits (EOB), or lines you type | You |
| Details we read from them | Patient name and mailing address, account and claim numbers, provider, dates of service and hospital stay, billing codes and service descriptions as printed, charges, insurance payments and adjustments | Our automated reading of your documents |
| Your answers | State, insured or self-pay, plan type, and, if you choose, household size and income range | You |
| Your findings and letters | Charges worth questioning, and the letter text we write for you | Created by BillRight from the above |
| Email address (optional) | If you opt in to tips | You |
| Payment details | Email you paid with, payment ID, amount, product | Stripe (we never see or store your card number) |
| Bill pack records | A scrambled form of your pass code, Stripe's customer ID, your credits and expiry dates | You and Stripe |
| Basic technical data | Request time, page or route, status code, and errors | Your browser, logged by our systems |
We never store your insurance member ID. Our logs never hold your bill details or health information. On our marketing pages we use Cloudflare Web Analytics, which counts visits without cookies; the bill checker pages (/app) have no analytics, ads or tracking pixels.
How we use it
We use your information to run the service you came for. If you tap Yes on the optional share card after your free preview, we also keep a copy of every file in that case, as described below.
- Read your documents, check them against our billing rules, and show you charges worth questioning.
- Check whether you may qualify for charity care, if you gave household size and income.
- Write your letters after you pay, and let you open them through a private link.
- Take payment through Stripe, send receipts, and manage bill pack credits.
- Send the emails you asked for, and your follow-up reminders.
- Keep the service secure, prevent abuse, fix errors and meet legal duties.
- Count results (for example, how many checks found something) without anything from your bill, so we can improve the rules.
- If you tap Yes on the optional share card after your free preview, keep a copy of every file in that case (the bill and any EOB uploaded with it), to improve how BillRight checks bills. This is optional and is not a condition of using BillRight or buying letters.
Document processing. Google (Gemini API) and Anthropic (Claude API) process the documents you upload, as our service providers. Your findings come from our own billing rules, not from an AI's judgment.
If you tap Yes on the optional share card after your free preview, we also keep a copy of every file in that case (the bill and any EOB uploaded with it), to improve how BillRight checks bills. We store that copy with our file-storage provider. We do not send that stored copy to Google, Anthropic, or other AI providers.
What we don't do. We never sell your information or share it for advertising. We don't use your information to build profiles or make decisions about you beyond your bill check.
If you pay, Stripe gives us the email you paid with so we can send receipts, your letters link and your follow-up reminders. If you tick the box for occasional BillRight tips, we send those until you unsubscribe. Every reminder, review and tips email has an unsubscribe link.
How long we keep it
Your files are deleted within 24 hours, and you can delete your case sooner with "Delete now" on every result page and in every email. If you tap Yes on the optional share card after your free preview, we keep a copy of every file in that case (the bill and any EOB uploaded with it) for up to 12 months, to improve how BillRight checks bills. This is optional. The default is still deletion within 24 hours. No thanks or closing the card changes nothing.
| Information | How long |
|---|---|
| Your documents, the details read from them, your answers and findings | Deleted from our systems within 24 hours of upload |
| Copies you opt in to share after the free preview: every file in that case (the bill and any EOB uploaded with it) | Up to 12 months, or until you use Delete now or email support@getbillright.com and we delete those files |
| Letter text | 7 days, so you can open your link, then deleted |
| Database backups | Our database provider keeps daily backups for 7 days, so deleted data can remain in a backup for up to 7 more days |
| Copies held by our AI providers | Google keeps what it read for up to 55 days and Anthropic for up to 30 days, only to detect misuse of their services, then they delete it |
| Copies of emails we send | Our email provider keeps them for up to 30 days |
| Email you paid with | Until your receipts, letters link and any reminders you bought are sent, and never more than 70 days |
| Separately stored email address | Until you unsubscribe or ask us to delete it |
| Bill pack records | Until 30 days after your last credits expire |
| Payment records | As long as tax and accounting law requires; Stripe keeps its own records under its policy |
| Counts kept after deletion | Payment records, timestamps, which checks found something and how many, a confidence level, and your general plan type. Nothing from your bill itself |
"Delete now" doesn't remove a separately stored email address. To remove it, unsubscribe or email support@getbillright.com.
Optional share copies (share-consent-v1). This consent is separate from using BillRight or buying letters, and it is not a condition of the service. We record the consent and the date. Email support@getbillright.com any time and we will delete those files.
Security
We protect your information with encryption in transit, encrypted letter text at rest, private links that expire, and access limited to the people and systems that need it. Our logs are built to exclude your bill details. No system is perfectly secure. If a breach affects your information, we will notify you and the authorities as the law requires, including the FTC's Health Breach Notification Rule.
HIPAA
BillRight is not a HIPAA covered entity or business associate, because you come to us directly, not through your doctor, hospital or insurer. HIPAA doesn't apply to the information you give us. State consumer health data laws and the FTC Act do, and this policy and our Consumer Health Data Privacy Policy follow them.
Children
BillRight is for adults 18 and older. You may upload a bill for your child or another family member if you are responsible for that bill. We don't knowingly collect information from children under 13 directly. If you think a child has used BillRight, email us and we'll delete it.
Your choices and rights
Wherever you live, you can ask us to confirm what we hold about you, give you a copy, correct it, or delete it, and you can withdraw consent at any time.
- Delete now: wipes your case right away. It's on every result page and in every email.
- Unsubscribe: every reminder, review and tips email has a one-click link.
- Delete my data: use the Delete my data page or email support@getbillright.com.
- Withdraw consent: use Delete now or email us. We stop processing and delete what we hold.
- Shared-copy consent: if you tapped Yes on the optional share card, email support@getbillright.com and we will delete those files.
- State rights: residents of Washington, Nevada, Connecticut, California and other states with privacy laws have the rights those laws give. Health-data rights, deadlines and appeals are in our Consumer Health Data Privacy Policy.
- No discrimination: we won't charge you more or treat you differently for using these rights.
We answer requests within 45 days, and tell you if we need up to 45 more. Because we don't have accounts and keep so little, we may ask for your case link, pass code or the email you used to confirm the request is yours. If we turn down a request, you can appeal by replying to our answer within 30 days.
Changes to this policy
We'll post any change here with a new effective date. If a change lets us use health information in a new way, we'll ask for your consent first.
Contact
Email support@getbillright.com. You can also use the Delete my data page.