Privacy Policy

Last updated: October 30, 2026

This policy explains what Pushback ("we", "us") collects when you use pushbackbills.com and our service, how we use it, and your choices. Because the documents you send us are about your health and your bills, we treat everything you send as sensitive.

The short version: we use your documents only to build your case, we never sell or share them for advertising, and we delete them 90 days after we deliver your case file.

1. What we collect

Documents you send: denial letters, bills, explanations of benefits and anything else you choose to upload. These can contain health information, such as diagnoses, treatments, medications and providers.
Contact details: your name and email address, so we can deliver your case file and reply to you.
Payment records: our payment provider, Whop, processes your payment. We receive confirmation that you paid and basic order details; we never receive your full card number.
Website usage: basic, aggregated information such as pages visited and the country you visit from, through our hosting provider and, if used, privacy-friendly analytics.

Please black out Social Security numbers, member and policy ID numbers, and bank or card details before you upload. We don't need them.

2. How we use it

To review your documents and prepare your case file.
To contact you about your case, deliver it, and handle refunds or complaints.
To process payment and keep records the law requires.
To improve the service using de-identified information only, for example counting which types of denials are most common. We never use your identifiable documents for this.

3. What we never do

We never sell your information.
We never share your documents or health information with advertisers, data brokers, insurers or employers.
We never use your health information to target ads to you.

4. Who we share it with

Only the service providers we need to run Pushback, each bound to protect your information and use it only on our instructions:

payment processing (Whop);
website hosting (Netlify);
email and secure file storage; and
software, including AI tools, that helps us read documents and draft letters, used under terms that do not allow them to train on your data.

We may also disclose information if the law requires it, and we will tell you when we are allowed to.

5. Consumer health data

Some US state laws, such as Washington's My Health My Data Act, give extra protection to health information. For any consumer health data we hold:

we collect it only with your consent, which you give when you choose to send us your documents, and only to provide the service you asked for;
we do not share it except with the service providers above, and we never sell it;
you can withdraw consent, see what we hold, and ask us to delete it at any time (see section 7).

6. How long we keep it

Your uploaded documents and case file: deleted 90 days after we deliver your case file, or sooner if you ask.
Payment and order records: kept as long as tax and accounting laws require.
Emails with you: kept up to 12 months, then deleted.

7. Your rights

Wherever you live, you can ask us to:

tell you what information we hold about you and send you a copy;
correct it;
delete it; or
withdraw your consent to us processing your health information.

Send your request through our contact form and choose "Privacy or data request". We reply within 30 days and won't treat you differently for asking. If we refuse a request, we'll explain why, and you can appeal by replying to our answer.

8. Security

We store files in encrypted storage, limit access to the people working on your case, and use secure connections. No system is perfectly secure; if a breach affects your information, we will notify you as the law requires.

9. Where your information is processed

Pushback is operated from the United Arab Emirates, and our service providers may process information in the United States and other countries. We use providers that protect it to the standard this policy describes.

10. Children

The service is for adults 18 and over. We don't knowingly collect information from children except within documents a parent or guardian sends about their own child's care.

11. Changes

If we change this policy in a way that affects how we use information you've already sent, we'll ask for your consent first.

12. Contact

Use our contact form.