Privacy Policy
Last updated 1 October 2026
This explains what happens to the documents you send us and the information we hold. It is written to be read, not to protect us.
We do not keep your documents
When you upload a bill, denial letter or statement, it is read, checked, and then deleted. We do not store the file, we do not keep a copy, and we cannot retrieve it later. If you need the document again you will need your own copy.
What we do keep
We keep the result of the review, not the document it came from. That means: the provider name, the billing codes, descriptions, dates and amounts we read off the bill, the problems we found, and the letter we wrote for you.
- If you did not pay: this is deleted automatically after 7 days.
- If you paid: this is kept for 90 days from your payment so you can come back for your letter, then deleted automatically.
Deletion is automatic. You do not need to ask.
Payment information
Payments are handled entirely by Stripe. We never see or store your card number. We receive the email address you give at checkout, and we use it only to send you your letter if you ask us to.
Who else touches your information
To run the review we use a small number of service providers:
- OpenAI — reads the text of your document to pull out the line items.
- Supabase — stores the review results described above.
- Cloudflare — serves this website.
- Stripe — processes payment.
- Google — delivers the email, if you ask us to email your letter.
We do not sell your information. We do not share it with advertisers, data brokers, insurers, providers, or anyone else, and we never will.
About HIPAA. HIPAA applies to health plans, healthcare providers and their business associates. The Bill Desk is none of those, so HIPAA does not apply to us and we do not claim to be HIPAA compliant. We are subject to the Federal Trade Commission's Health Breach Notification Rule, which means that if identifiable health information we hold were ever exposed, we are required to tell you and to notify the FTC.
Your choices
You can ask us to delete your review results at any time before they expire. Email help@thebilldesk.com and we will remove them. Depending on where you live you may also have the right to request a copy of what we hold; ask and we will send it.
Children
This service is for adults. We do not knowingly accept documents from anyone under 18. A parent or guardian may use the service in relation to a child's medical bill.
Changes
If this policy changes we will update the date at the top. Material changes will be noted on the home page.
Contact
The Bill Desk, Spring Valley, New York. Questions about privacy: help@thebilldesk.com.