Privacy Policy

Effective date: April 30, 2026 · Last updated: September 2, 2026

This Privacy Policy explains what information VerifyDoc collects, how we use it, and the choices you have. VerifyDoc (the "Service") is operated by Simcha Fuchs ("we," "us," "our"), an individual operating a sole proprietorship doing business as VerifyDoc.

VerifyDoc is an AI-powered medical-bill review tool. You upload a medical bill — as an image, a PDF, or pasted text — and the Service uses an AI model to review the charges line by line, explain what the codes mean in plain English, flag charges that may be billing errors (such as duplicates, upcoding, unbundling, phantom charges, and math errors), and generate draft dispute letters for any flagged items. The Service does not provide medical, legal, or financial advice and does not guarantee any savings or refund.

1. Information we collect

Information you provide

When you use the Service, you voluntarily provide:

• Your email address (required for delivery and account access)
• The medical bill you submit — as an uploaded image or PDF, or as text you paste in — and the result of our review (the line-by-line analysis, flagged charges, and any draft dispute letters generated for you)

You choose what you submit. A medical bill may contain personal and health-related information; you decide whether to redact or remove details before uploading. Your email is required to deliver and grant access to your purchase.

Account information

If you create an account, we use magic-link sign-in via email; account history stored in Supabase. We store your email address, account creation date, and a record of your purchases and generated content.

Payment information

When you purchase, payment details (card number, billing address) are collected and processed directly by Stripe. We never see or store your full card number. We receive only: your name, email, country, and the amount paid.

Data your browser stores on your device

The Service uses your browser's own storage (localStorage and sessionStorage) for functional purposes and for the product analytics described in section 2 — never for advertising or cross-site tracking. This data stays on your device; it is not a copy we hold. It covers four things: your sign-in tokens if you have an account; a bill you have submitted but not yet paid for, held so an interrupted checkout can be finished (see “Data retention” below); the reference numbers of a purchase and of a review in progress, held for up to 24 hours so that a reload or a dropped connection cannot lose what you paid for; and the report currently on screen. You can erase all of it at any time by clearing site data for verifydoc.net in your browser settings, and signing out clears your tokens.

Server logs

Our hosting provider (Netlify) automatically logs basic request information (IP address, user agent, timestamp, requested URL) for security and abuse prevention. These logs are retained by Netlify per their privacy policy.

2. Information we do not collect

The Service does not use any of the following:

• Google Analytics, Fathom, Plausible, or any other third-party web analytics beyond PostHog as described below
• Tracking cookies or cross-site tracking pixels
• Social media tracking (Facebook Pixel, LinkedIn Insight, etc.)
• Session replay or heatmap tools (Hotjar, FullStory, Clarity, etc.) — including PostHog’s own session replay and heatmap features, which are switched off in our configuration
• Advertising networks or retargeting

Stripe may set its own cookies on its hosted checkout pages; that processing is governed by Stripe's Privacy Policy linked above.

Product analytics. We use PostHog, a product-analytics service, to understand how the Service is used and to detect faults. It is loaded on our pages and records page views, named events describing which step you reached, uncaught JavaScript errors, your IP address, your browser user agent, and a randomly generated device identifier stored in your browser.

Session recordings — we do not use these. PostHog can replay a visit as a video of the page. It is switched off in our configuration, because a replay records what the page displays, not only what you type: your audit renders your bill back onto the screen — line items, charge amounts and the findings written about them — as ordinary text. We hold no recordings. Heatmaps are off for the same reason.

We use the same PostHog account across our other services, which are separated by a site label; we do not combine your activity across them to build a profile. To opt out, enable “Do Not Track” or “Global Privacy Control” in your browser: our configuration honours both signals, and PostHog will capture nothing at all. You can also email info@verifydoc.net and we will delete your events.

What we do count. So that we can tell whether the Service is working, our own servers keep six running totals per day: how many bill reviews were started, how many finished, how many people continued to the checkout page, how many of those were automated traffic rather than people, how many payments completed, and how many paid reviews were delivered. These are totals and nothing else — each is a single number attached to a date. No cookie, pixel, device fingerprint, account ID, session ID, or IP address is involved, and nothing is stored in your browser for this purpose. To keep the fourth of those, the checkout hand-off reads one thing from the request — the User-Agent your browser sends with every request anyway, and which our host already logs — purely to decide which of two totals to add one to. It is not recorded, not stored, and nothing is derived from it; a request whose User-Agent is absent is counted as a person, not a machine. Because no identifier is ever recorded, these totals cannot be traced back to you, cannot be broken down by person, and cannot distinguish one visitor from another; they cannot even tell whether two reviews on the same day came from one person or two. No third-party service receives them and they are never used for advertising or profiling.

3. How we use your information

• To review your medical bill and produce your report. The bill you submit is passed to Anthropic's Claude API, which analyzes the charges and returns the flagged items and draft dispute letters.
• To deliver your report. We render the analysis to you in the browser and may email you a confirmation receipt.
• To process payment. We pass payment instructions to Stripe; Stripe handles the transaction.
• To prevent abuse. We may review server logs to detect fraud, spam, or technical issues.
• To respond to your support requests. If you email us, we use that information to help you.

4. Third-party processors

The Service relies on the processors below. Your data is shared with them only as necessary to provide the Service:

• Anthropic (privacy policy) — receives the medical bill you submit via the Claude API in order to analyze it and return the report. Per Anthropic's commercial terms, inputs submitted via the API are not used to train their models.
• Stripe (privacy policy) — processes payments. Stripe is a PCI-DSS Level 1 certified payment processor.
• Netlify (privacy policy) — hosts the website and stores temporary session data.
• PostHog (privacy policy) — product analytics, as described under “Product analytics”. Receives page views, named events, uncaught JavaScript errors, your IP address, browser user agent, and a randomly generated device identifier. It does not receive your bill or your report: session replay and heatmaps are disabled in our configuration. Hosted in the United States.
• Supabase (privacy policy) — stores your account profile and any bill-review reports you choose to save to your history.

We do not sell your data, share it with advertisers, or use it for marketing purposes outside of the Service (which may include affiliate links; see “Affiliate links and partner offers”).

5. Data retention

• Bills awaiting checkout: a bill you submit before paying is held in your own browser's storage on your device — not in a database we control — so that an interrupted checkout can be finished and your audit still produced. It is erased as soon as your paid audit runs, and in no case is it kept longer than 72 hours. You can erase it sooner yourself: use the discard control shown whenever the site offers to resume an unfinished audit, or clear site data for verifydoc.net in your browser settings. It is not added to any saved history unless you are signed in and choose to save the report. We do not email you about an unfinished or abandoned audit.
• Subscribers: your account profile is retained for the duration of your subscription. It is deleted within 30 days of subscription cancellation.
• Saved reports: if you are signed in, you may save a report to your account. Saved reports remain available in your history for a period that depends on your plan (currently about 7 days for one-time/free use and up to 12 months for monthly and family subscribers). You may delete individual reports or close your account at any time from your dashboard.
• Payment records: retained by Stripe per their retention policy, which we cannot override.
• Analytics events: retained by PostHog for up to 12 months, then deleted. You can ask us to delete yours sooner at any time.
• Server logs: retained by Netlify per their retention policy (typically 30 to 90 days).

6. Your rights

All users

You can request at any time, by emailing info@verifydoc.net:

• A copy of the data we hold about you (access)
• Correction of any inaccurate data
• Deletion of your data (subject to any records we are legally required to keep)
• Opt-out from any marketing emails

We respond to all requests within 30 days.

California residents (CCPA / CPRA)

If you are a California resident, you have the rights listed above plus the right to know what categories of personal information we collect, sell, or share. We do not sell or share personal information for cross-context behavioral advertising. California residents can contact us at the email above to exercise these rights.

European Union / UK residents (GDPR / UK GDPR)

If you are in the EU or UK, you have the rights listed above plus:

• The right to data portability (receive your data in machine-readable form)
• The right to object to processing based on legitimate interest
• The right to lodge a complaint with your local data protection authority

Our legal basis for processing is (a) performance of a contract (delivering your purchase), and (b) legitimate interest (fraud prevention, which you may opt out of by not using the Service).

7. Security

Data in transit is protected by HTTPS/TLS. Data at rest is encrypted by Netlify and Stripe using industry-standard encryption. Despite reasonable precautions, no internet transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Children

The Service is intended for adults. It is not directed to people under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will delete it.

9. International data transfers

Our processors are located in the United States and European Union. If you use the Service from outside these regions, your data will be transferred to and processed in those jurisdictions. By using the Service, you consent to this transfer.

10. Affiliate links and partner offers

VerifyDoc may earn money through affiliate partnerships. Some links in our emails or on the Service — for example, a service relevant to managing or disputing your medical bills — may be affiliate links, which means we may earn a commission if you sign up or buy through them. This is always at no extra cost to you and never changes the price you pay the partner. We only include offers we believe are genuinely useful to people reviewing their medical bills; an affiliate relationship does not change our recommendations, and an affiliate link is not an endorsement or medical, legal, or financial advice.

When you follow an affiliate link you leave the Service, and any information you provide on the partner’s site is governed by that partner’s privacy policy, not ours. We do not sell or hand your personal information to these partners. An affiliate network may report back to us that a referral resulted in a sign-up or purchase using an anonymous tracking identifier (not your name or email), so we can measure which recommendations are useful.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the Service after an update constitutes acceptance.

12. Contact

For any privacy question, concern, or request:

Email: info@verifydoc.net
Response time: typically within one business day (Monday–Friday).