Current scope: Bill Negotiator AI is for US consumer internet, cable, and mobile bills. Please do not upload medical records, insurance documents, government IDs, payment-card images, passwords, or unrelated sensitive documents.
1. Information we collect
Information you provide
- One supported telecom bill file.
- Optional provider name and the last four account digits you enter as reading hints.
- Outcome details and notes you choose to add after using a report.
- Email address and messages you send through support.
- The savings amount you optionally choose to publish on a shared-results page.
Information created when we provide the service
- Extracted billing fields, review items, source references, explanations, and call-plan content that make up your structured report.
- Processing status, timestamps, error information, and security records needed to operate and protect the service.
- Purchase status, amount, currency, and Stripe transaction identifiers. We do not receive your full payment-card number through Stripe-hosted checkout.
2. How we use information
We use personal information to:
- process a supported bill and generate the report you requested;
- let you access and delete your structured report;
- process a purchase, maintain transaction records, and review refund requests;
- answer support questions and investigate product or security problems;
- prevent abuse, enforce service limits, and maintain reliability; and
- comply with applicable legal obligations.
We do not sell bill contents or use them for targeted advertising. We do not train a public model on your bill for our own independent purposes.
3. Source files and structured reports
Source bill files are handled for document reading, extraction, and report creation. The service removes the source file as soon as a scan completes successfully. An upload that is not processed expires after 24 hours and is removed during the next cleanup pass; a failed attempt may stay available during that window so you can retry. Structured scan data is removed when the upload expires.
The structured report is separate from the source file. It may retain provider name, statement dates, partial account references, charges, findings, and the call plan. Its private access link is valid for 30 days. The report remains until you delete its bill data or ask us to do so, unless limited transaction or security information must be retained for fraud prevention, payment records, legal obligations, or an unresolved dispute.
4. Service providers
We share information only as reasonably needed with providers that help us operate the service. Current core categories include:
- Stripe, which hosts checkout and processes payment and refund activity.
- OpenAI, which may receive bill text or document content needed to help extract, organize, and draft the requested report.
- Hosting, database, object-storage, email, logging, and security providers that process limited information for infrastructure and delivery.
These providers process information under their own contractual and security obligations. Their use is limited to providing services to us or meeting applicable legal requirements.
5. Security
We use administrative, technical, and organizational safeguards designed for the sensitivity of billing information, including access restrictions, private storage controls, protected transport, separation of production credentials, and operational monitoring. No online service can promise absolute security. See our Security page for current practices and responsible reporting.
6. Your choices and requests
You may ask to access, correct, or delete personal information associated with a report or support request.
- Delete individual reports through available product controls.
- Ask support to investigate a report deletion that did not complete.
- Ask for a copy of report information in a reasonably portable format.
- Opt out of non-essential product email using the link in that message, when available.
We may need to verify that a request comes from the report owner. We will explain if we cannot fulfill all or part of a request because of legal, security, or transaction-record obligations. Applicable law may provide additional rights.
7. Children and geographic scope
The service is intended for adults in the United States and is not directed to children under 13. Do not submit another person’s bill unless you are authorized to do so.
8. Changes to this policy
We may update this policy when the product, providers, or legal requirements change. We will post the revised effective date and provide additional notice when a change materially affects how we handle existing information.
9. Contact
Use the support form for privacy questions or requests. Choose “Privacy or deletion” as the subject and include the private report reference, but never its access token. Do not include a full account number or payment-card information in the message.