Security & privacy
How your data works.
You are about to hand a stranger a medical bill. You deserve a straight answer about where it goes, so here is the whole thing on one page, in plain language.
The short version: we do not store your bill. Not in a database, not in a file, not after your session. The only thing that lasts is a cookie proving you paid, and an email address if you chose to give us one.
When you type in codes and amounts
The lookup happens on our server against a copy of the CMS national Medicare file that ships with the site. Nothing leaves our servers, nothing is written to a database, and nothing is written to disk. When the response reaches your browser, our copy is gone.
When you upload a photo or a PDF of a bill
The file is sent to our OCR provider (OpenRouter, which routes it to a vision model) purely to read the text off the page. We do not save the file, and we do not save the text it returns. It exists for the length of that one request. If you would rather no third party see the document at all, type the line items in by hand instead. The analyzer works the same either way.
What is stored on your device
If you buy something, a signed cookie called cd_access is set for 60 days. It contains only which product you bought, when access expires, and your Stripe payment reference, so you can come back to your documents without an account. It contains no medical information. That cookie is the thing the pricing page means by "yours for 60 days on this browser".
What we keep in a database
Your email address, and only if you give it to us by creating an account, joining the waitlist, or contacting support. No bills, no codes, no amounts, no uploads, no EOBs.
Payments
Checkout runs on Stripe. Your card number never touches our servers. We receive a payment reference and an amount.
What we never do
We never sell your medical or personal information. We never share it for marketing. We never contact your hospital or your insurer, and we never act on your behalf. You send everything yourself.
One thing we will not pretend about
Because we keep nothing, we cannot retrieve your analysis for you later. Close the tab and the numbers are gone. Print or save your results before you leave. We think that tradeoff is the right one for medical documents, and we would rather tell you about it up front than have you find out the hard way.
Questions about any of this, or a deletion request: cleverdispute@gmail.com. The full legal document is the privacy policy.