Privacy Policy
Last updated: July 7, 2026 · Draft pending legal review
Who we are
Undeny (“we,” “us”) provides software that helps medical practices draft appeals for denied insurance claims. Contact: pilots@undeny.xyz.
What we collect
Account information (name, email, practice name), documents you upload for appeal drafting, payment information (processed by Stripe — we never store card numbers), and product usage analytics (page views and feature usage; never document contents).
Health information
During the founding-pilot period, practices use Undeny with de-identified documents only. Before any documents containing protected health information are processed, we execute Business Associate Agreements with the practice and with our infrastructure vendors as required by HIPAA. Structured data we extract is limited to patient initials and internal account references — never full names, dates of birth, Social Security numbers, or addresses.
How we use information
To provide the service, process payments, send transactional emails (such as appeal-deadline reminders), and improve the product. We do not sell personal information. Uploaded documents are not used to train AI models.
Service providers
We use Supabase (database and file storage), OpenRouter (AI document processing), Stripe (payments), Resend (email), Vercel (hosting), PostHog (analytics), and Sentry (error monitoring). Each processes data only as needed to provide their service.
Security and retention
Data is encrypted in transit and at rest. Files live in private storage accessible only through short-lived signed URLs. We retain account data while your account is active and delete it on verified request.
Your rights
You may request access to, correction of, or deletion of your personal information by emailing pilots@undeny.xyz. We will respond within 30 days.
Changes
We will post any changes to this policy on this page and update the date above. Material changes will be announced by email.