Privacy

Effective August 14, 2026. This is the policy that applies. If we change it, we change the date on this page.

Is This Bill is operated by John Shoufler, 5712 Morgan Rd, Russellville AR 72802. Contact: help@isthisbill.com. This page is for the website at https://isthisbill.com.

The default is delete

You can check a bill without an account. We read the pages you upload, return a verdict and a draft letter, and we do not keep the uploaded PDF or photo. An unsigned case is purged within 24 hours. Saving a case is optional. You have to create an account and choose to keep it. If you pay for the desk or to keep one case, we keep the structured result you asked us to keep — not a copy of the file.

This product is not a medical-records system and not a place to store a family’s bills. We do not claim HIPAA certification. We do not offer business associate agreements so you can park documents here.

What we collect

• The upload, briefly. One or two photos or PDFs, only long enough to analyze them. We do not archive the file.
• The analysis. Verdict, line items, amounts, and names and numbers the document printed. Unsigned, this is deleted with the case in 24 hours. We do not draft a letter until you have an account.
• An account, if you make one. Email address. Regular sign-in is a one-time link from help@isthisbill.com. Regular users have no password. Store reviewers named to Apple and Google get a password we give only those stores. We store the cases you paid to keep, household and workplace membership you create, dates you track, and inbound-mail metadata you turn on. If you ask us to draft a letter, we also store the name, mailing address, phone, and relationship you typed so the PDF can print a complete page. We do not ask for a Social Security number.
• Payment, if you pay. On the website, Stripe processes the card. In the iPhone app, Apple processes desk and keep through in-app purchase. We store the Stripe or Apple identifiers and which cases you paid to keep. We do not store full card numbers.
• Server logs. Case id, timing, the verdict word, and error codes. Not document text. Not the model prompt. Not the model completion.
• Cookies we need to run the site. A session cookie after you sign in. A short-lived anonymous-case cookie so the verdict page can find the scan you just did. If you arrive with a Residual Apps partner code, a first-party cookie remembers that code for 90 days so we can credit the partner if you later pay a software fee. That credit is a commission on our desk or keep fee — never a percentage of anything you save on a bill. No advertising cookies. No third-party analytics pixel.

What we do not do

• We do not sell personal health information.
• We do not use your documents to train models.
• We do not send document text to advertising or analytics companies.
• We do not keep the uploaded file after analysis.
• We do not give your bills to an employer who handed you a join code.
• We do not call, fax, or write a provider or insurer for you.

Who can see a document while we read it

Only the systems required to produce the verdict:

• Our host, DigitalOcean. The site and the JSON we keep for saved cases run on a server we operate there.
• Anthropic. The reading step sends page text or images to their API so we can extract the bill. That is processing, not storage for you. If we change that contractor, we will name the new one here.
• Our mail host (SuperCP / cPanel for help@isthisbill.com and bills@isthisbill.com). Sign-in links go out from help@isthisbill.com. If you turn on email-in, attachments you forward to bills@isthisbill.com are processed the same way as an upload.
• Stripe, if you pay. Email and payment details, not the bill file.

We do not use Supabase, Clerk, or a hosted login vendor on this product.

Accounts, family, work, and partners

A household invite lets another signed-in person see cases on that desk. Invite only someone allowed to handle that paperwork. You are responsible for who you invite.

A workplace desk is distribution only. The workplace sees a join count. It does not see bills, letters, or verdicts.

A partner-review request stores your email, an optional case id, and the note you typed — not the document file. A partner works for themselves. That is not us practicing.

Email-in only analyzes mail from an address that belongs to a signed-in account that accepted the disclaimer.

Money

A check shows the verdict. The letter and the saved case are $4.99 once, or $12 a month for the desk. $12 per month for the desk (saved cases, family seats, dates, and email-in). $4.99 once to keep a single case. We never take a percentage of anything you save. See Pricing.

How long we keep it

• Unsigned scan: deleted within 24 hours.
• Uploaded file: not kept after analysis.
• Saved case: until you delete that case or the account. If the $12 desk lapses you cannot keep new cases. A $4.99 keep stays on that one case until you delete it.
• Sign-in link: one use, expires in 20 minutes. We store a hash, not the raw link.
• Server logs: operational only, without document text.

You can download a JSON export or permanently delete the account from Account. Steps for Play and the website are on Delete your account. Deleting a case is on Cases. You can also write help@isthisbill.com.

Your rights

If you are in California or another US state with a privacy law, you can ask us for a copy of what we have, ask us to delete it, or tell us not to sell or share it. We do not sell it. We do not share it for cross-context advertising. Use the in-app export and delete, or email help@isthisbill.com. We will need enough to match the request to the account. We do not discriminate for using these rights.

Children

You must be 18 to use this service. It is not directed at children under 13. Do not upload a minor’s paperwork unless you are that person’s parent or legal guardian and you are allowed to handle it.

Security

The site is served over TLS. Session cookies are httpOnly. Magic-link tokens are hashed. That is ordinary care for a small web tool. It is not a promise that nothing can go wrong. Do not upload a document you are not allowed to handle.

US only

The service is offered in the United States. Do not use it if that is not where you are.

Changes

If this policy changes, the new text and date replace the old one on this page. Continued use after that date is use under the new policy. Material changes to how we keep saved cases will also be mailed to the account email if we have one.

Related: Terms and Disclaimer.