Privacy Policy
Last updated: 2026
Promoza, Inc. ("Promoza," "we") is a US company that helps you review and resolve your medical bills and insurance denials. You hire us to act as your own agent with your providers and insurers. We treat your information with care and operate to HIPAA-grade standards even where HIPAA may not strictly apply to a patient's own agent.
What we collect
The documents you give us (medical bills, itemized statements, EOBs, denial letters) and the details needed to act on them — your name, contact information, provider and insurer, and the amounts in dispute. To collect our success fee we also store a payment method through our processor, Stripe. We collect the minimum needed to do the job.
How we use it
To analyze your bill, find errors and protections, draft and send appeals on your behalf, verify any savings, and charge our success fee if we win. We use an AI model running on US, healthcare-grade infrastructure under a Business Associate Agreement that does not train on your data. A human advocate reviews appeals before they are sent.
We do not sell your data
We never sell your personal or health information, and we do not use it for advertising. We share it only with the providers, insurers, and service vendors needed to resolve your case, each under appropriate agreements.
Where your data lives & how it's protected
Your information is stored on US-based infrastructure (US data residency), encrypted in transit and at rest, with least- privilege access and audit logging. Every subprocessor that touches your health information — including our cloud host and AI model provider — operates under a signed Business Associate Agreement. We redact or tokenize direct identifiers before model calls where feasible.
Your authorization
When you start a case you authorize us to access related records (your HIPAA right of access) and to communicate and act as your agent with your providers and insurers. You can withdraw that authorization at any time by contacting us, though we cannot undo actions already taken.
Payments
Payments are processed by Stripe. We store a payment method on file to charge our success fee only on a verified win — we do not store your full card details ourselves.
Retention & your choices
We keep your information only as long as needed to provide the service, support your case, defend any dispute, and meet legal obligations, then delete or de-identify it. You may request a copy or deletion of your data at any time.
Breach notification
As a US health app we maintain breach-notification readiness consistent with the FTC Health Breach Notification Rule and applicable state laws, and will notify affected users as required if a breach occurs.
Contact
Questions? Email support@promoza.com.