- What we collect
- The bill you upload, an optional note, and payment confirmation from Stripe. We don't ask for your name or email. Stripe handles your card; we never see it.
- Redaction
- Before any AI model sees your bill, we read it with text recognition on our own server and replace names, street addresses, account, member and policy numbers, phone numbers, emails, dates of birth, and SSNs with placeholders. On photos, those spots are blacked out. Automated redaction is good but not perfect, so we also scrub the AI's output before saving it.
- AI processing
- The redacted bill is reviewed by a large language model through Vercel's AI Gateway, under API terms that don't allow training on your data.
- Retention
- Uploaded files are deleted as soon as your audit finishes, and an hourly job deletes anything older than 24 hours regardless. Reports (redacted) are deleted automatically after 30 days.
- Sharing
- We never sell data. The share card shows only the savings amount. Your report link is private and unguessable; anyone you give it to can read it.
- Analytics
- We use cookie-free Vercel Web Analytics and count anonymous events like "report viewed".
- Not advice
- This is an AI first-pass review, not legal or financial advice.