Privacy Policy

Last Updated: March 12th, 2025

Welcome to Appealed ("Company," "we," "our," "us"). We respect your privacy and are committed to protecting it through this Privacy Policy. This policy describes the types of information we may collect from you through our direct contact methods, our software-based service ("Platform"), and our website (www.getappealed.com) and how we use, store, and disclose that information.

1. Information We Collect

We may collect the following types of information from users:

Personal Information: Name, email address, phone number, and other identifying details you provide when creating an account or contacting us.
Health-Related Information: Insurance details, medical conditions, treatment history, denial letters, and appeals documents that you upload to our platform.
Usage Data: IP address, browser type, device information, pages visited, and interactions with our site.
Cookies and Tracking Technologies: We may use cookies or third-party analytics to improve user experience.

2. How We Use Your Information

We use the information collected for the following purposes:

To generate appeal letters and provide our services.
To improve our platform and user experience.
To communicate with you about updates, support, and marketing (if opted in).
To comply with legal and regulatory obligations.

3. How We Store and Protect Your Data

Protected Health Information (PHI): We do not store PHI. All PHI data submitted via our Appeal Letter Generator is only processed locally and is not saved. Once the letter is downloaded, the data disappears when the session ends.
Appeal Letter Storage: Users can choose if they would like us to store their appeal letter for future reference, and they can request this to be removed at any time.
Data Security: Our servers are U.S.-based through Google Cloud, which is HIPAA compliant with built-in safeguards to protect against threats, unauthorized access, and data breaches.
Encryption: We implement industry-standard encryption and security protocols to protect any stored user data.
Access Controls: We limit access to personal information to authorized personnel who are bound by confidentiality obligations.

4. User Rights and Choices

Users may have the following rights:

Access, Correction, and Deletion: Users may request access to, correction of, or deletion of their data at any time.
Marketing Preferences: Users may opt out of marketing communications.
Data Portability: Users may request an export of their data in a structured format.
Exercising Rights: To exercise these rights, contact us at carly@getappealed.com.

5. Sharing and Disclosure of Information

We do not sell or rent personal data. We may share information:

With Insurance Companies: Only with the user's insurance company after being explicitly authorized by the user to appeal for them on their behalf.
With Third-Party Service Providers: We use Google Cloud and OpenAI, which operate under strict BAA agreements and are compliant with data security, data training, and data retention requirements.
For Legal Compliance: When required by law or to comply with regulatory obligations, subpoenas, or lawful requests by authorities.
In the Event of a Business Transfer: If Appealed is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.

6. HIPAA Compliance and Data Protection

As a provider of services that process health-related data, we take HIPAA compliance seriously. We implement the following safeguards:

Business Associate Agreements (BAAs): We have signed BAAs with both Google Cloud and OpenAI to ensure compliance with HIPAA regulations.
PHI Processing and Storage: We do not store PHI; all processing occurs locally on the user's device. If a user decides to store their appeal letter on our platform, all PHI data is anonymized and encrypted upon being stored.
Security Measures: We employ encryption, access controls, and other safeguards to ensure the confidentiality and integrity of user data.
User Control: Users have full control over their appeal letters and may choose whether to store them on our platform.
Data Minimization: We collect and process only the minimum necessary personal data required to provide our services.

7. Children's Privacy

Our platform is intended for adults. We do not knowingly collect personal data from minors under 18. If we become aware that a minor has provided us with personal information, we will take steps to delete such information immediately.

8. Changes to This Policy

We may update this policy periodically. Any changes will be posted on this page with an updated effective date. If significant changes are made, we will notify users through email or a notice on our website.

9. Contact Information

For any questions about this Privacy Policy, contact us at:

Email: carly@getappealed.com