Privacy policy

Effective 2026-10-01. Haggleline ("we") helps people check and lower bills. This page says what we collect, why, who helps us, how long we keep it, and your choices.

What we collect

• What you give us: your email, name, state, phone number (only for three-way calls), the bills, estimates and receipts you upload, and, if you choose, household size and income for a financial-assistance check.
• What we create: the findings for your bill, signed authorization forms (with the time, IP address and browser you signed from), call recordings (only where the other side agrees), call transcripts, the company's offers, and our fee records.
• Payment: your card is held by Stripe. We keep only the card brand and last four digits.

Medical bills contain health information. We treat everything you upload as sensitive, whether or not a law calls it that.

How we use it

• To read your bill and write your findings, script and letter.
• If you sign our authorization: to talk with the company that billed you, by phone, email or letter, and to verify any saving.
• To charge our fee after a saving is verified, and to send you emails about your case.
• To keep the service safe and working (fraud prevention, debugging, legal duties).

We do not sell your information, share it for advertising, or use it to build profiles. We do not use your bills or recordings to train AI models.

Who helps us (our service providers)

• Cloudflare: hosting, database and file storage.
• Anthropic: the AI that reads bills and helps run calls.
• Retell AI: the phone calls (under a business associate agreement for health information).
• Twilio: checking whether a phone number is a mobile number before we call it.
• Resend: email delivery. Stripe: payments.

They may use your information only to provide their service to us. The company we call on your behalf receives what is needed to discuss your bill, as your signed authorization describes.

How we protect it

• Files, recordings and transcripts are encrypted (AES-256) before storage, in addition to our host's encryption.
• Your findings are shown only on your signed-in page. Emails never contain your bill details.
• Sign-in uses one-time email links; sessions expire after 7 days.
• Staff access is logged.

How long we keep it

Bills, recordings, transcripts and signed forms are deleted 180 days after your case closes. Fee records are kept as tax law requires. You can delete your data at any time from your dashboard (Settings, Delete my data).

Calls

Our AI assistant says it is an AI and that the call is recorded at the start of every call. If the other person does not agree to recording, we stop recording or end the call. We do not use voice biometrics or voice cloning.

Your choices and rights

• Revoke your authorization at any time from your case page.
• Stop reminder emails with the link in any email.
• Ask for a copy of your data, a correction, or deletion. Residents of California and other states with privacy laws have these rights by law; we give them to everyone.

If something goes wrong

If a breach affects your information, we will tell you without unreasonable delay and within 30 days, and tell regulators when the law requires.

Contact

Email support@haggleline.com.