Privacy and data use.
This notice describes the information used by the BillHelp website and case service, operated by Raffaello d’Amore. Use our contact form for privacy questions and requests.
Information you provide
- Account: sign-in provides an account identifier, email address, and available name information.
- Case: we save the details you submit, including your name, date of birth, bill amount, insurance and billing documents, case context, signature, authorization record, and case status. These may contain sensitive health information.
- Contact: we save your name, email, topic, message, and submission time so we can handle your request. Please do not include medical records, insurance identifiers, or payment-card details in this form.
Documents selected during intake stay in the current browser page until you submit the case. After successful submission, case records and documents are stored for the service. The free plan for bills under $100 is generated in your browser without creating a case.
How information is used
We use case information to investigate the billing issue, prepare next steps, record your authorization, communicate case updates, and carry out authorized follow-up. We use the patient’s date of birth only for this case and share it with an insurer or provider during a call only when needed for identity verification. Contact messages are used to respond to questions, handle corrections, and process privacy requests.
Service providers and sharing
- ChatGPT/OpenAI provides sign-in. Cloudflare infrastructure hosts the website, case records, and uploaded files.
- Resend handles case notification emails when sent; this includes the recipient address and notification content.
- If document analysis is enabled and run, relevant case details and files are sent to OpenAI for processing. The application requests non-stored responses and attempts to remove temporary uploaded analysis files after processing. This does not describe or override provider security-log retention.
- Relevant information may be shared with your provider or insurer for authorized case work, subject to their representation requirements. If AI phone calls are enabled, the information needed for the call is shared with the calling provider under the applicable healthcare agreement.
Case documents are not public pages. Application access checks limit them to the signed-in case owner and the BillHelp operator. Hosting, sign-in, and other service providers also process technical information under their own terms and privacy practices.
Website analytics and cookies
Our first-party analytics count visits to public pages, intake button clicks, starts, and submissions. The analytics records contain a day, public page path, event type, broad referring-source category, and aggregate count. They do not contain case documents, query strings, email addresses, or persistent visitor IDs. This analytics feature sets no cookies and skips collection when the browser signals Do Not Track or Global Privacy Control.
Google Analytics measures public marketing-page activity using browser identifiers and cookies, approximate geography, device information, and referral information. Our integration removes query strings and fragments from reported page URLs and reports only the origin of referring websites. It does not send case documents, patient names, or intake answers. Google Analytics is disabled when you enter intake or your case dashboard and is not loaded on sign-in or internal pages. Do Not Track and Global Privacy Control signals disable collection. You can also disable website analytics on this browser by visiting this opt-out link; this stores a local preference on your device.
Sign-in and security services may use cookies and process IP addresses and technical logs. Website fonts may be fetched from Google Fonts. These are separate from our aggregate analytics. The site does not include advertising pixels or an analytics data-sale integration.
Retention and your choices
Case and contact records remain stored until removed through an operator-handled request or other record maintenance; closing a case does not automatically delete its files. Contact-form abuse controls use a daily hashed network identifier, with old rate-limit records removed during later submissions. We do not store that identifier with your contact message.
You can ask to access, correct, or delete your information through the contact form. Select “Privacy request” and use the email associated with your account where possible. We may need to verify your identity before acting. Some records may need to be retained to meet applicable obligations or resolve a dispute; we will explain any limitation when handling the request.
You can revoke your case authorization from your case dashboard. Revocation stops new authorized activity; it does not erase actions already taken or automatically delete records.
Changes to this notice
We will update this page and its effective date when these practices change. Contact us if you need clarification before submitting information.