This Privacy Policy explains how MedFair ("MedFair," "we," "us," or "our") handles information when you use our website and AI-powered medical bill, insurance denial, and medical debt analysis tools (the "Service"). By using the Service, you agree to the practices described here.
Ephemeral Processing — Our Core Privacy Rule
MedFair does not permanently store your medical documents. When you upload a medical bill, Explanation of Benefits (EOB), denial letter, or debt collection notice, that file is:
- Transmitted using encrypted, secure connections
- Loaded into temporary, in-memory processing only — never written to a persistent database or disk
- Analyzed by our AI system in real time, typically within seconds
- Discarded the moment your on-screen analysis is complete, with no backup or retained copy
We call this our Ephemeral Processing rule. There is no long-term medical-record database for a bad actor to breach, and no permanent document archive on our servers.
One narrow exception: if you choose to purchase the Full Dispute Letter, the generated letter text is held in a short-lived, encrypted checkout cache for up to one hour — solely so our payment processor's confirmation can be securely verified server-side and your receipt/backup download link can be sent. That cache entry is automatically and permanently deleted after one hour regardless of whether the purchase completes, and is never used for anything besides completing that single transaction.
Information We Collect
Because we do not require an account to use our core analysis tool, we collect very little information:
- Uploaded documents — processed ephemerally as described above, never stored
- Contact information — if you email us or submit our contact form, we retain your name, email address, and message so we can respond to you
- Payment information — if you purchase a Full Dispute Letter, payment is handled by a third-party payment processor; MedFair does not store your full card number
- Basic usage analytics — anonymized, aggregate technical data (such as browser type or page views) used only to improve the Service
How We Use Information
We use the limited information we retain to: respond to support requests, process payments, maintain and improve the Service, detect fraud or abuse, and comply with applicable law. We do not sell your personal information, and we do not use uploaded medical documents for advertising or model training beyond the single real-time analysis you requested.
HIPAA-Aligned Practices
MedFair is a direct-to-consumer tool, not a "covered entity" or "business associate" as defined under the Health Insurance Portability and Accountability Act (HIPAA). That said, we have voluntarily built our infrastructure to align with HIPAA's core safeguards, including encrypted transmission, strict access controls, and — most importantly — the Ephemeral Processing rule described above, which eliminates the risk of a stored medical-record breach entirely.
Cookies & Analytics
We may use minimal, privacy-respecting cookies or similar technologies to keep the Service functioning correctly (for example, remembering your selected tab) and to understand aggregate, anonymized usage trends. We do not use tracking cookies to build advertising profiles.
Third-Party Services
We rely on trusted infrastructure and payment providers to operate the Service. These providers are contractually bound to appropriate confidentiality and security standards. We do not share your uploaded documents with any third party — because, per our Ephemeral Processing rule, no copy of them exists past the moment of analysis.
Children's Privacy
The Service is intended for adults aged 18 and older who are managing their own or a family member's medical billing matters. We do not knowingly collect information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please email us at support@medfair.us.