Privacy Policy

Last Updated: March 14th, 2025

Welcome to Appealed LLC ("Company," "we," "our," "us"). We respect your privacy and are committed to protecting it through this Privacy Policy. This policy describes the types of information we may collect from you through our direct contact methods, our software-based service ("Platform"), and our website (www.getappealed.com) and how we use, store, and disclose that information.

1. Information We Collect

We may collect the following types of information from users:

Personal Information: Name, email address, phone number, and other identifying details you provide when creating an account or contacting us.
Health-Related Information: Insurance details, medical conditions, treatment history, denial letters, and appeals documents that you upload to our platform.
Usage Data: IP address, browser type, device information, pages visited, and interactions with our site.
Cookies and Tracking Technologies: We may use cookies or third-party analytics to improve user experience.

2. How We Use Your Information

We use the information collected for the following purposes:

Service Delivery: To generate appeal letters and provide our services.
Research and Development: For research and development purposes, including to analyze and improve our business. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. To improve our platform and user experience.
Communication and Marketing: To communicate with you about updates, support, and marketing (if opted in).
Compliance and Protection: To comply with legal and regulatory obligations.

3. How We Store and Protect Your Data

Protected Health Information (PHI): All PHI data submitted via our Appeal Letter Generator is only processed locally and is not saved. Once the letter is downloaded, the data disappears when the session ends. The user can choose to store their appeal letter on our platform for future reference in which;
Appeal Letter Storage: All appeal letters stored on our platform are encrypted using 256-bit AES encryption for data at rest and in transit. Users can request their data to be removed at any time.
Data Security: Our servers are U.S.-based through Google Cloud, which is HIPAA compliant with built-in safeguards to protect against threats, unauthorized access, and data breaches.
Encryption: We implement industry-standard encryption and security protocols to protect any stored user data and appeal letters.
Access Controls: We limit access to personal information to authorized personnel who are bound by confidentiality obligations.

4. User Rights and Choices

Users may have the following rights:

Access, Correction, and Deletion: Users may request access to, correction of, or deletion of their data at any time.
Marketing Preferences: Users may opt out of marketing communications.
Data Portability: Users may request an export of their data in a structured format.
Exercising Rights: To exercise these rights, contact us at carly@getappealed.com.

5. Sharing and Disclosure of Information

We do not sell or rent personal data. We may share information:

With the user's insurance company after being explicitly authorized by the user to appeal for them on their behalf.
With Third-Party Service Providers: Third parties that provide services on our behalf or help us operate the Service or our business (such as hosting, information technology and security, support, email delivery, payments, safety monitoring, performance monitoring, marketing, customer research, and analytics). For Google Cloud and OpenAI—we have signed strict BAA agreements with both and operate under no data training or data retention requirements.
For Legal Compliance: When required by law or to comply with regulatory obligations, subpoenas, or lawful requests by authorities.
In the Event of a Business Transfer: If Appealed is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.

6. HIPAA Compliance and Data Protection

As a provider of services that process health-related data, we take HIPAA compliance seriously. We implement the following safeguards:

Business Associate Agreements (BAAs): We have signed BAAs with both Google Cloud and OpenAI to ensure compliance with HIPAA regulations.
PHI Processing and Storage: We do not store PHI; all processing occurs locally on the user's device. If a user decides to store their appeal letter on our platform, all PHI data is anonymized and encrypted upon being stored.
Security Measures: We employ encryption, access controls, and other safeguards to ensure the confidentiality and integrity of user data.
User Control: Users have full control over their appeal letters and may choose whether to store them on our platform.
Data Minimization: We collect and process only the minimum necessary personal data required to provide our services.

7. Data Security

We implement appropriate technical and organizational measures to protect the information we collect and store. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. The length of time we retain a category of personal information is determined based on whether it is sufficient to fulfill the purposes for which we collected it, including to satisfy legal, regulatory, accounting, or reporting requirements, establish or defend legal claims, enforce our agreements, resolve disputes or fraud prevention. We may either delete or anonymize personal information we no longer require.

8. Children's Privacy

The Service is not intended for use by anyone under 18 years of age. If you are a parent or guardian of a child under 18 from whom you believe we have collected personal information in a manner prohibited by law, please contact us at carly@getappealed.com. If we learn that we have collected personal information through the Service from a child under 18 years of age without the consent of the child’s parent or guardian as required by law, we will delete the information.

9. Changes to This Policy

We may update this policy periodically. Any changes will be posted on this page with an updated effective date. If significant changes are made, we will notify users through email or a notice on our website.

10. Contact Information

For any questions about this Privacy Policy, contact us at:

Email: carly@getappealed.com