Privacy Policy

Last updated: March 2026 · Version 2.0

Reassure (“we,” “us,” or “our”) operates the Reassure web application (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to the practices described below.

1. Information We Collect

1.1 Documents You Upload

When you use Reassure, you may upload medical bill PDFs, insurance policy PDFs, and Explanation of Benefits (EOB) documents. These files are processed solely to perform bill-versus-policy analysis and to generate findings and appeal letter drafts on your behalf.

1.2 Session and Device Information

We automatically collect limited technical data to operate the Service, including a session identifier stored in a browser cookie, your browser type and version, operating system, and general device characteristics. We do not collect your name, email address, or other personally identifying information unless you voluntarily provide it (for example, when contacting us).

1.3 Usage Data

We may log page views, feature interactions, and error reports to monitor and improve Service reliability. These logs do not contain the content of your uploaded documents.

2. How We Use Your Information

We use the information we collect exclusively to:

• Parse and analyze your uploaded documents to identify potential billing discrepancies and policy mismatches.
• Generate findings reports and draft appeal letters based on that analysis.
• Maintain and improve the reliability, security, and performance of the Service.
• Respond to support inquiries you initiate.

We do not use your documents or personal information for advertising, marketing profiling, or any purpose unrelated to providing the Service.

3. Third-Party Services

3.1 Document Analysis Provider

To perform document analysis, we send the text content extracted from your uploaded PDFs to OpenAI’s API for processing. OpenAI processes this data on our behalf to generate structured findings and comparisons. We encourage you to review OpenAI’s Privacy Policy for details on how they handle data received through their API. Per OpenAI’s API data usage policy, data submitted through the API is not used to train their models.

3.2 Hosting and Infrastructure

The Service is hosted on cloud infrastructure providers that may process technical request data (such as IP addresses and request metadata) as part of normal operations. We select providers that maintain industry-standard security practices.

4. Data Retention and Deletion

Uploaded documents and analysis results are retained only as long as necessary to provide the Service to you. Specifically:

• Uploaded documents and associated analysis data are stored for the duration of your active session and any saved cases you create.
• You may request deletion of your data at any time by contacting us at the address below. We will delete your uploaded documents, analysis results, and generated letters within 30 days of receiving your request.
• We may retain anonymized, aggregated data (such as error rates and usage counts) that cannot be linked to any individual or document for the purpose of improving the Service.

5. Data Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS/TLS), access controls on stored data, and regular review of our security practices. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Cookies and Tracking

The Service uses a minimal session cookie to associate your browser with your uploaded documents and analysis results. This cookie is essential to the operation of the Service and does not track you across other websites. We do not use third-party advertising cookies, social media tracking pixels, or cross-site analytics tools.

7. No Sale of Personal Data

We do not sell, rent, trade, or otherwise transfer your personal information or uploaded documents to third parties for their commercial purposes. We share data only with the third-party service providers described in Section 3, and only to the extent necessary to operate the Service.

8. Children’s Privacy

The Service is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing activities.
• Receive your data in a portable format.

To exercise any of these rights, please contact us using the information in Section 12. We will respond to your request within 30 days.

10. Limitation of Liability and Disclaimer

Reassure is a tool designed to help you review medical bills for potential discrepancies. The Service does not constitute legal advice, medical advice, insurance adjudication, or a guarantee of any reimbursement outcome. Findings and generated letters are informational drafts intended to assist you in discussions with your provider or insurer. Always consult a qualified professional for legal, medical, or insurance disputes. We are not liable for decisions made based on the output of the Service.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. Your continued use of the Service after any changes constitutes acceptance of the revised policy. We encourage you to review this page periodically.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a concern, please contact us at:

hello@reassure.health

Changelog