What we do with your bill
This is not our Privacy Policy. It describes what the product does today, in plain terms, so you can read it before sending anything. The full policy is with our counsel and will replace this page.
We keep the document you send
A bill or EOB you upload is stored so a billing specialist can check every flagged charge against the document itself. Findings with no source behind them are findings nobody can act on, so the file is kept rather than read and discarded.
It is held against the conversation, not against you, until you have an account
Before an account exists there is no patient record to attach anything to. The file is addressed by the conversation in your browser, which is also what makes it removable in one step.
If you never create an account, it is purged after 48 hours
A conversation with no account behind it is deleted in full — the document, what we read out of it, and anything you typed — 48 hours after you last used it. Not the file alone: the whole conversation goes, so nothing is kept about somebody who did not come back. The clock runs from your last activity, not from when you started, so coming back keeps it.
You can delete it, and the file itself goes
Deleting removes the stored document, not just our pointer to it. If we cannot work out which of several documents a deletion referred to, we still remove the file and tell you our own record needs a manual correction rather than reporting a clean success.
What deletion does not reach, once you have an account
Our activity log is append-only, so on an account the record that a document existed and what we concluded from it remains after the document is gone. Nothing you or a specialist can see includes the deleted file, and no later step reasons from it.
We read the document with an automated system first
The text of a bill is extracted and checked against published coding rules before any person looks at it. Anything found is a candidate for a specialist to verify — never a conclusion, and never a statement that you were overcharged.
Nothing goes to a provider or insurer until you sign for it
Requesting your records, or acting on your behalf with a provider, each requires a separate authorization that you sign after seeing the document itself.
Before you create an account, you can delete a document from the conversation it was sent in. After that it belongs to your case, and you can ask us to remove it — your rights over your health data, and the limits on them, are set out in our Consumer Health Data Policy. To make a request, or to ask anything else about what we hold, reach us at privacy@defensivehealth.ai.