How we handle your bill

Last updated [date]

In short

We don’t keep your bill. It’s read once, to run your audit, and it isn’t saved on our servers.
AI reads it; our rules judge it. An AI service turns your bill into a list of lines. Tim’s rules, running in our own software, decide what to flag.
Your audit stays on your device. Results exist only in your browser and are gone when you close the page.
We never contact your lawyer. You decide whether to send the dispute email.

What happens when you upload a bill

Your file goes, over an encrypted connection, to our server.
Our server sends it to our AI service provider, which reads the bill and returns the lines (dates, people, descriptions, hours and amounts). This is a single request.
Our server sends those lines back to your browser and discards the file. We don’t save the file or the lines, and we don’t write their contents to our logs.
You check the lines, answer questions about your retainer, and the audit runs in your browser.

The AI service

We use a third-party AI service provider to read your bill. It processes the bill on our behalf only to read it for your audit, and under its commercial terms it does not use your bill to train AI models. [Confirm with the provider: whether zero data retention applies to our account; if not, how long it may keep requests for safety monitoring, and why.] [Confirm where the processing takes place, and whether it can be kept in Canada.] [Lawyer: confirm whether privacy law requires naming the provider.]

What we collect

The bill you upload, only for as long as it takes to read it.
Your name, the other party’s name and your province or state, which you enter to run the audit. These stay in your browser.
Your first name and email address, only if you take the overbilling quiz or join the waitlist. We use Resend to send a confirmation email and, after you confirm, your results or waitlist welcome and occasional updates. For the quiz, Resend also stores your score and result group. Your answers are included in your results email and encrypted confirmation link; they are not saved as mailing list contact fields. Confirmation links expire after 24 hours. You can unsubscribe at any time.
Payment details, when payments open, are handled by [Stripe]. We never see your full card number.
Basic technical information our hosting provider records for any website, such as IP addresses and pages requested, kept for [period] for security. [Confirm with the hosting provider.]

Solicitor-client privilege

Legal bills often describe privileged work. Sharing them with others can affect privilege, and some retainer agreements ask clients not to upload documents about their matter to AI tools. If you’re unsure, check your retainer or ask a lawyer before uploading. [Lawyer to review this paragraph.]

Your choices

You don’t need an account to run an audit.
Because we don’t store your bill or your audit, there’s nothing of yours for us to delete afterwards. Closing the page clears it.
To unsubscribe from emails, use the link in any email or contact us.

Where we operate

Legal Bill Buster is based in Ontario, Canada, and handles personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). [Confirm the hosting location, and any other laws that apply to U.S. customers.]

Contact

Questions about privacy: info@legalbillbuster.com.

Back to the audit