Privacy Policy

What we collect

When you use Rebuttal, you provide: your email address (to deliver your appeal letter), your insurance denial letter (to generate the appeal), and payment information processed by Stripe. We never see or store your credit card number — payment processing is handled entirely by Stripe.

How we use it

Your denial letter is processed to extract the denial code, plan type, and relevant clinical information needed to draft your appeal. Your email address is used solely to deliver the appeal letter by secure expiring link. Payment information is used to charge the one-time $9.99 fee via Stripe.

How long we retain it

Your uploaded denial letter is deleted from our systems immediately after your appeal letter is generated. Your generated appeal letter is retained for up to 24 hours so you can download it via the secure link in your email, then deleted automatically. Your email address is retained for a limited window to allow letter recovery via https://sendrebuttal.com/recover, then deleted. Payment records are retained by Stripe per their own data retention policy.

Third parties we use

• Stripe — payment processing for the $9.99 fee. Stripe receives your payment information directly; we receive only a payment confirmation.
• Resend — email delivery. Your email address is transmitted to Resend to send your appeal letter link.
• Vercel— application hosting and infrastructure. Your data transits Vercel's systems.
• Anthropic API— AI generation. Your denial letter is submitted to Anthropic's API to generate the appeal text. Anthropic's API data handling applies.
• PostHog — anonymous product analytics. We track usage events (upload attempted, payment succeeded, etc.) using anonymized identifiers only. No document content, letter text, or personal information is included in analytics events.

We do not sell your data. We do not share your data for advertising. We do not use tracking pixels or cross-site trackers.

Medical information

Rebuttal is a consumer drafting tool, not a covered entity under federal health privacy law. Information in your denial letter (such as procedure codes or diagnoses) is treated with care, but federal health privacy protections do not apply to data you voluntarily upload to a consumer service. Do not upload anything you would not be comfortable sharing with the processors listed above.

Your rights

You can request deletion of your data at any time by emailing hello@sendrebuttal.com with the email address you used to pay. We will confirm deletion within 5 business days.

Contact

Questions or requests: hello@sendrebuttal.com.