Last updated April 09, 2026
Your uploaded medical documents are never stored. They are processed ephemerally in-memory and permanently deleted immediately after AI analysis (typically within seconds). We cannot recover them — because we never keep them.
This Privacy Notice for GetBillBack.com ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at https://GetBillBack.com.
Questions or concerns? Contact us at support@getbillback.com.
We collect personal information that you voluntarily provide when you use our Services. The personal information we collect may include:
With your consent, we process the following categories of sensitive information:
We may collect data necessary to process your payment (e.g., payment instrument number and security code). All payment data is handled and stored by Stripe. We never store your card details on our servers.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google does not use your data to train its AI models when accessed via API on a Pay-as-you-go plan.
We process your personal information for the following reasons:
We may share your data with the following categories of third-party service providers who perform work on our behalf:
We may also share information in connection with a business merger, sale, or acquisition.
We use only essential cookies necessary for the service to function:
We do not use marketing cookies, advertising trackers, or analytics pixels. For full details, see our Cookie Policy.
Yes. Our core service is powered by the Google Gemini API. When you upload a medical bill, it is transmitted (encrypted, over HTTPS) to the Gemini API for analysis. The resulting JSON audit report is returned to your browser. Neither we nor Google retain or store your medical document after processing.
You must not use our AI tools in any way that violates the terms or policies of any AI Service Provider.
Email addresses are retained only as long as necessary to deliver your audit results and communicate with you about the service.
Transaction records are processed and retained by Stripe in accordance with applicable financial laws.
We have implemented appropriate technical and organizational security measures to protect your personal information:
However, no electronic transmission over the Internet can be guaranteed 100% secure. You should only access our Services within a secure environment.
We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18, or the parent or guardian of a minor consenting to their use. If you believe we have inadvertently collected data from a minor, please contact us at support@getbillback.com.
Depending on your location, you may have the right to:
To exercise these rights, contact us at support@getbillback.com. Note: because we do not store medical documents, there is nothing for us to retrieve or delete regarding your health data — it no longer exists on our systems.
Most web browsers include a Do-Not-Track ("DNT") feature. Because we do not use behavioral tracking or advertising technologies, our service does not track you across the web regardless of your DNT setting. We do not currently respond programmatically to DNT signals, as no uniform standard has been finalized, but our practices already reflect the spirit of that preference.
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have specific rights under applicable state privacy laws (CCPA/CPRA, CPA, CTDPA, etc.).
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Email address | ✅ |
| B. Personal info (CA Records statute) | Contact information | ✅ |
| C. Protected classification characteristics | Gender, age, demographics | ✅ |
| D. Commercial information | Transaction / payment history (via Stripe) | ✅ |
| E. Biometric information | Fingerprints, voiceprints | ❌ |
| F. Internet/network activity | Browsing history, ad interactions | ❌ |
| G. Geolocation data | Device location | ✅ |
| H. Audio, electronic, sensory info | Uploaded medical images/PDFs | ✅ |
| I. Professional/employment info | Job titles, work history | ❌ |
| J. Education information | Student records | ❌ |
| K. Inferences from personal info | Preference profiles | ❌ |
| L. Sensitive personal information | Health data (ephemeral only) | ✅ |
To exercise these rights, visit https://GetBillBack.com or email support@getbillback.com.
Yes. We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page. We encourage you to review this Notice periodically.
If you have questions or comments about this notice, please contact us:
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, correct inaccuracies, or delete your personal information. To submit such a request, please email us at support@getbillback.com or visit https://GetBillBack.com.
Please note: because medical documents are deleted immediately and irrecoverably after processing, we are unable to retrieve or restore your health data — by design.