Privacy Policy

1. Information We Collect

Personal Information

We collect information you provide directly to us, such as:

• Account Information: Email address, password, and profile information when you create an account
• Payment Information: Billing address and payment method details (processed securely through Stripe)
• Healthcare Documents: Medical bills, insurance documents, and related healthcare information you upload
• Communication Data: Messages, questions, and feedback you send to our AI agents or support team
• Usage Data: How you interact with our platform, features used, and session information

Automatically Collected Information

• Device Information: IP address, browser type, operating system, and device identifiers
• Usage Analytics: Pages visited, time spent, features used, and performance metrics
• Cookies and Tracking: Essential cookies for functionality and optional analytics cookies

2. How We Use Your Information

We use your information to:

• Provide Services: Analyze your healthcare documents, generate dispute letters, and provide AI-powered assistance
• Process Payments: Handle subscription billing and payment processing
• Improve Our Platform: Enhance AI models, fix bugs, and develop new features
• Communicate: Send service updates, support responses, and important notifications
• Ensure Security: Protect against fraud, unauthorized access, and maintain platform integrity
• Comply with Legal Requirements: Meet regulatory obligations and respond to lawful requests

3. Information Sharing and Disclosure

We Do NOT Sell Your Data

We never sell, rent, or trade your personal information to third parties for marketing purposes.

Limited Sharing

We may share your information only in these limited circumstances:

• Service Providers: Trusted partners who help us operate our platform (e.g., Google Cloud, Stripe, Firebase)
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice)
• Consent: When you explicitly authorize us to share specific information

AI Processing

Your healthcare documents are processed by AI systems to provide analysis and dispute letters. This processing occurs within secure, encrypted environments and is not used to train general AI models.

4. Data Security and Protection

We implement comprehensive security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict authentication and authorization protocols
• Secure Infrastructure: Google Cloud Platform with enterprise-grade security
• Regular Audits: Ongoing security assessments and vulnerability testing
• Employee Training: Security awareness and HIPAA-compliant data handling

5. Your Rights and Choices

Access and Control

• View Your Data: Access your account information and uploaded documents
• Update Information: Modify your profile and account settings
• Download Data: Export your documents and analysis results
• Delete Account: Request account deletion and data removal

Communication Preferences

• Email Settings: Opt out of marketing emails while keeping essential service notifications
• Analytics: Disable optional tracking and analytics cookies

Healthcare Data Rights

As healthcare information, your data may be subject to additional protections under HIPAA and state privacy laws. You have the right to:

• Request copies of your healthcare information
• Request corrections to inaccurate information
• Request restrictions on how we use your information
• File complaints with relevant regulatory authorities

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Until you delete your account or request deletion
• Healthcare Documents: As long as your account is active, plus 7 years for legal compliance
• Payment Records: 7 years for tax and accounting purposes
• Analytics Data: Aggregated, anonymized data may be retained longer

7. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

8. International Users

If you are accessing our service from outside the United States, please note that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our service, you consent to this transfer.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to your registered email address
• Displaying a prominent notice on our platform

Your continued use of our service after changes become effective constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Data Protection Officer

For privacy-related concerns or to exercise your rights, you can also contact our Data Protection Officer at dpo@mycareclaim.com.

11. Compliance and Certifications

We are committed to maintaining the highest standards of data protection and privacy:

• HIPAA Compliance: We implement safeguards to protect healthcare information
• SOC 2 Type II: Annual security audits and compliance verification
• GDPR Compliance: European data protection standards where applicable
• CCPA Compliance: California Consumer Privacy Act compliance