Privacy Policy

BillCheck uses your uploaded documents only to prepare your billing review packet.

We do not sell your data, use it for advertising, or use your documents to train public AI models.

Payment card details are handled by Stripe. BillCheck does not receive or store your full card number.

When spam protection is enabled on a new-profile form, Cloudflare Turnstile processes the challenge token and basic request information needed to distinguish a person from automated abuse. We do not send Cloudflare your uploaded documents, billing details, name, email address, or law firm's name for this check.

Uploads are encrypted in transit and stored in private encrypted storage. Access is limited to review staff who need the documents to prepare and check your packet.

You may request deletion of uploaded documents by contacting support@legalbillcheck.com or by using the deletion control in your account.

How long we keep your documents

We keep your uploaded documents and your prepared packet for a limited period after we deliver your packet so we can support you, check our quality, and improve how the service works.

Deleting your documents

You can ask us to delete your documents at any time. When you do, we delete your original uploads, the text we extracted from them, and your delivered packet from our systems. We keep only what we need to maintain basic payment and tax records and our security logs.

De-identified information we may keep

So the service keeps getting better for everyone, we may keep a de-identified record of general billing patterns and how our review handled them. Before anything is kept this way, we remove names, addresses, email addresses, phone numbers, case and matter numbers, your law firm's name, the specific narratives from your bills, and the exact amounts. What remains is a general pattern that is not tied to you and cannot reasonably be traced back to you.

What we do not do

We do not sell your data, use it for advertising, or use your documents to train public AI models. Payment card details are handled by Stripe and are not stored by us.

Your law firm's name and how we look it up

To manage your order, we collect your name, your email address, and the name of the law firm representing you. We use these only to prepare and support your billing review.

To confirm basic public details about the firm, such as its website, we look up the firm's name using internet search providers. We send these providers the firm's name only. We do not send them your name, your email address, your order details, or anything from your documents.

We keep a small record of the firms our customers name, along with the public details we find, so the service can recognize firms it has seen before and keep improving over time. This record is about firms, not about you: it does not include your name, your email address, or your documents. Where we note that an order referred to a firm, we store only an internal order reference, never your identity or your documents.

Automated analysis

To prepare your review, we analyze your documents using automated (AI) technology. Part of this analysis uses third-party AI service providers who process the document text on our behalf under contractual safeguards, including commitments of confidentiality and commitments not to use your documents to train their AI models.

We send these providers only the text needed for the review, after we run it through a cleaning step. We do not send them your original files, your name, your email, or your payment details.

A person on our team reviews the automated results before anything is delivered to you. The automated analysis does not replace that human review; it supports it.

Your deletion rights apply to this processing as well. When you ask us to delete your documents, we delete your uploads, the text we extracted from them, and your prepared packet from our systems. Text that was sent to a third-party AI provider is held only for a limited period under that provider's terms and is subject to the provider's own deletion practices; we do not use it to train AI models and neither do they.

If we turn off or change this automated analysis, or change the providers we use, we will update this policy.