Privacy Policy

Effective date: April 30, 2026 · Last updated: June 2, 2026

This Privacy Policy explains what information VerifyDoc collects, how we use it, and the choices you have. VerifyDoc (the "Service") is operated by Simcha Fuchs ("we," "us," "our"), an individual operating a sole proprietorship doing business as VerifyDoc.

VerifyDoc is an AI-powered medical-bill review tool. You upload a medical bill — as an image, a PDF, or pasted text — and the Service uses an AI model to review the charges line by line, explain what the codes mean in plain English, flag charges that may be billing errors (such as duplicates, upcoding, unbundling, phantom charges, and math errors), and generate draft dispute letters for any flagged items. The Service does not provide medical, legal, or financial advice and does not guarantee any savings or refund.

Quick summary: We collect what you submit to use the Service, plus your email address. We do not use tracking cookies or analytics services. We share data only with the processors required to run the Service. You can request deletion at any time by emailing support@verifydoc.net.

1. Information we collect

Information you provide

When you use the Service, you voluntarily provide:

Your email address (required for delivery and account access)
The medical bill you submit — as an uploaded image or PDF, or as text you paste in — and the result of our review (the line-by-line analysis, flagged charges, and any draft dispute letters generated for you)

You choose what you submit. A medical bill may contain personal and health-related information; you decide whether to redact or remove details before uploading. Your email is required to deliver and grant access to your purchase.

Account information

If you create an account, we use magic-link sign-in via email; account history stored in Supabase. We store your email address, account creation date, and a record of your purchases and generated content.

Payment information

When you purchase, payment details (card number, billing address) are collected and processed directly by Stripe. We never see or store your full card number. We receive only: your name, email, country, and the amount paid.

Server logs

Our hosting provider (Netlify) automatically logs basic request information (IP address, user agent, timestamp, requested URL) for security and abuse prevention. These logs are retained by Netlify per their privacy policy.

2. Information we do not collect

The Service does not use any of the following:

Google Analytics, Fathom, Plausible, or any other web analytics
Tracking cookies or cross-site tracking pixels
Social media tracking (Facebook Pixel, LinkedIn Insight, etc.)
Session replay or heatmap tools (Hotjar, FullStory, Clarity, etc.)
Advertising networks or retargeting

Stripe may set its own cookies on its hosted checkout pages; that processing is governed by Stripe's Privacy Policy linked above.

3. How we use your information

To review your medical bill and produce your report. The bill you submit is passed to Anthropic's Claude API, which analyzes the charges and returns the flagged items and draft dispute letters.
To deliver your report. We render the analysis to you in the browser and may email you a confirmation receipt.
To process payment. We pass payment instructions to Stripe; Stripe handles the transaction.
To prevent abuse. We may review server logs to detect fraud, spam, or technical issues.
To respond to your support requests. If you email us, we use that information to help you.

4. Third-party processors

The Service relies on the processors below. Your data is shared with them only as necessary to provide the Service:

Anthropic (privacy policy) — receives the medical bill you submit via the Claude API in order to analyze it and return the report. Per Anthropic's commercial terms, inputs submitted via the API are not used to train their models.
Stripe (privacy policy) — processes payments. Stripe is a PCI-DSS Level 1 certified payment processor.
Netlify (privacy policy) — hosts the website and stores temporary session data.
Supabase (privacy policy) — stores your account profile and any bill-review reports you choose to save to your history.

We do not sell your data, share it with advertisers, or use it for marketing purposes outside of the Service (which may include affiliate links; see “Affiliate links and partner offers”).

5. Data retention

Bills awaiting checkout: a bill you submit before paying is held only long enough to complete checkout and produce your report; it is not added to any saved history unless you are signed in and choose to save the report.
Subscribers: your account profile is retained for the duration of your subscription. It is deleted within 30 days of subscription cancellation.
Saved reports: if you are signed in, you may save a report to your account. Saved reports remain available in your history for a period that depends on your plan (currently about 7 days for one-time/free use and up to 12 months for monthly and family subscribers). You may delete individual reports or close your account at any time from your dashboard.
Payment records: retained by Stripe per their retention policy, which we cannot override.
Server logs: retained by Netlify per their retention policy (typically 30 to 90 days).

6. Your rights

All users

You can request at any time, by emailing support@verifydoc.net:

A copy of the data we hold about you (access)
Correction of any inaccurate data
Deletion of your data (subject to any records we are legally required to keep)
Opt-out from any marketing emails

We respond to all requests within 30 days.

California residents (CCPA / CPRA)

If you are a California resident, you have the rights listed above plus the right to know what categories of personal information we collect, sell, or share. We do not sell or share personal information for cross-context behavioral advertising. California residents can contact us at the email above to exercise these rights.

European Union / UK residents (GDPR / UK GDPR)

If you are in the EU or UK, you have the rights listed above plus:

The right to data portability (receive your data in machine-readable form)
The right to object to processing based on legitimate interest
The right to lodge a complaint with your local data protection authority

Our legal basis for processing is (a) performance of a contract (delivering your purchase), and (b) legitimate interest (fraud prevention, which you may opt out of by not using the Service).

7. Security

Data in transit is protected by HTTPS/TLS. Data at rest is encrypted by Netlify and Stripe using industry-standard encryption. Despite reasonable precautions, no internet transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Children

The Service is intended for adults. It is not directed to people under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will delete it.

9. International data transfers

Our processors are located in the United States and European Union. If you use the Service from outside these regions, your data will be transferred to and processed in those jurisdictions. By using the Service, you consent to this transfer.

10. Affiliate links and partner offers

VerifyDoc may earn money through affiliate partnerships. Some links in our emails or on the Service — for example, a service relevant to managing or disputing your medical bills — may be affiliate links, which means we may earn a commission if you sign up or buy through them. This is always at no extra cost to you and never changes the price you pay the partner. We only include offers we believe are genuinely useful to people reviewing their medical bills; an affiliate relationship does not change our recommendations, and an affiliate link is not an endorsement or medical, legal, or financial advice.

When you follow an affiliate link you leave the Service, and any information you provide on the partner’s site is governed by that partner’s privacy policy, not ours. We do not sell or hand your personal information to these partners. An affiliate network may report back to us that a referral resulted in a sign-up or purchase using an anonymous tracking identifier (not your name or email), so we can measure which recommendations are useful.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the Service after an update constitutes acceptance.

12. Contact

For any privacy question, concern, or request:

Email: support@verifydoc.net
Response time: typically within 2 business days.