Privacy Policy

Billhawk.ai ("Billhawk", "we", "us") is an AI-powered document review tool that helps U.S. consumers understand their medical bills. This Policy explains what we collect, how we use it, how long we keep it, and the choices you have.

Billhawk is not a law firm, healthcare provider, insurance company, medical billing service, or financial advisor. See our Disclaimer and Terms of Service for the limits of what Billhawk provides.

Billhawk is currently free to consumers. We do not sell your personal information.

Users may upload documents such as:

• Medical bills
• Itemized bills
• Explanation of Benefits (EOBs)
• Collection notices
• Other related billing documents

You should only upload documents that relate to you or that you are otherwise authorized to share.

Depending on how you use Billhawk, we may collect:

• Information you provide directly, such as your email address and uploaded documents.
• Information extracted from uploaded documents, such as provider names, service dates, billing amounts, insurance payment information, and billing codes.
• Information generated during the review process, such as findings, recommendations, reports, and appeal or inquiry templates.
• Technical and usage information, such as browser type, device information, IP address, page views, event logs, and interaction data used to operate, secure, and improve the service.

• Uploaded source documents (PDFs, images, scans) are processed for the sole purpose of producing your review.
• Source documents are deleted immediately after processing and are not retained.
• Billhawk does not maintain a repository of uploaded source documents.

After processing, Billhawk may retain structured information extracted from your documents and information generated during the review, including:

• Provider and facility names
• Service dates
• Billing amounts and totals
• CPT, HCPCS, ICD, revenue, and other billing codes
• Insurance payment, adjustment, and balance information
• Analysis results and findings
• Generated recommendations and letter templates
• User-provided outcome feedback
• Usage events and operational logs

This structured information may be retained for:

• Product improvement
• Benchmarking
• Analytics
• Research
• Quality assurance
• Fraud and abuse prevention
• Future product development

Billhawk may create aggregated and de-identified datasets derived from uploaded information. These datasets may be used for:

• Benchmarking
• Industry insights
• Analytics products
• Research
• Product improvement
• Future commercial offerings

Billhawk takes reasonable steps to remove or de-identify personal information before information is included in aggregated or de-identified datasets. By using Billhawk, you grant us a royalty-free, worldwide license to use de-identified and aggregated data derived from your uploads for the purposes described in this Policy. This license does not extend to personally identifying information about you.

Users retain ownership of their uploaded documents. Billhawk retains ownership of its analysis, derived insights, aggregated statistics, de-identified datasets, benchmarking data, and product improvements.

Billhawk uses artificial intelligence to:

• Extract information from uploaded documents
• Analyze billing information
• Generate reports
• Generate recommendations
• Generate appeal or inquiry templates when appropriate

AI-generated content may contain errors. You are responsible for reviewing all outputs before relying on them or acting on them.

Billhawk does not use uploaded documents or personally identifying information to train publicly available AI models.

Email addresses may be used for:

• Report delivery
• Appeal or inquiry letter delivery
• Follow-up communications about your bill
• Outcome surveys
• Product updates (only with your consent)

You may unsubscribe from non-transactional communications at any time using the link in any email we send.

• Data is encrypted during transmission.
• We use technical and organizational security controls designed to protect information from unauthorized access.
• Audit logging may be maintained for operational and security purposes.
• Billhawk uses reputable cloud infrastructure providers to host its services.
• While we take reasonable measures to protect information, no method of transmission, processing, or storage can be guaranteed to be completely secure.

• Sell personal information.
• Sell or license personally identifying information.
• Share personally identifying information with advertisers.
• Share your uploaded documents or personally identifying information with your insurer, provider, employer, or any other third party without your direction.
• Use uploaded documents to train publicly available AI systems.

Billhawk is a consumer-facing service. Users voluntarily submit documents directly to Billhawk for analysis. Billhawk is not a healthcare provider, health plan, healthcare clearinghouse, law firm, insurance company, or financial advisor.

Only personnel with a clear operational need — for example, debugging a failed analysis or responding to a support request — can access individual records. Engineering work on extracted data uses de-identified copies wherever practical.

You can request access to, correction of, or deletion of your personal information by emailing privacy@billhawk.ai. Depending on where you live, you may have additional rights under laws such as the CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA, and TDPSA — including the right to opt out of certain processing.

Upon a verified request, Billhawk will make reasonable efforts to delete personal information retained about you, subject to legal, security, fraud-prevention, and operational obligations. Deletion of personal information does not affect previously created de-identified or aggregated datasets.

Billhawk is not intended for, and may not be used by, anyone under 18. We do not knowingly collect information from minors.

If Billhawk is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar corporate transaction, information covered by this Policy may be transferred as part of that transaction, subject to applicable law and the commitments described in this Policy.

We will update this Policy when our practices change. When we make material changes we will update the "Last updated" date at the top.

For privacy questions, please reach out via our contact form.