Privacy Policy
JUPTR LLC d/b/a MySuperbills and its affiliates under common control (“CLIENT”,“we”,“us”, or “our”) have prepared this Privacy Policy to describe how we collect, use, disclose, and safeguard personal information. This policy covers information obtained through MySuperbill-branded digital services, which include our website, mobile applications, and tools for out-of-network (OON) health insurance claim submission and tracking. Your use of our services and provision of health information constitutes authorization for us to use and share your information with insurers and claims infrastructure providers for claim processing and other purposes consistent with this Privacy Policy.
Users who register for an account and use our platform to submit, monitor, or manage health insurance claims provide personal information directly to us. We also may receive responses or status updates from insurance payers, healthcare providers, or related third parties involved in processing claims. Our services involve facilitating the collection, documentation, and transmission of claim-related data, which may include medical, insurance, billing, and contact information.
Individuals who visit or interact with our website or digital platforms are also covered by this policy, even without submitting a claim or registering an account. Our offerings may expand over time, and we may collect additional categories of information as a result—such as analytics derived from website activity, user communications, or optional service features that users choose to enable. This Privacy Policy will be updated as applicable laws may require.
The purpose of this Policy is to explain how we handle personal information we collect or receive and how data subjects can understand and exercise their privacy rights where applicable. Under applicable laws, including the California Consumer Privacy Act (CCPA/CPRA), this Policy also serves as your Notice of Collection. We describe the categories of personal information we collect, the sources from which we obtain it, the purposes for which we use it, and the categories of third parties to whom it may be disclosed, sold, or shared. Additional notices at the point of collection may supplement or reference this policy where required.
As our services and data practices evolve, this policy will be updated accordingly. Material changes will be reflected on this page, with additional notice provided where required.
Note on Health Information and HIPAA:
Individuals with out-of-network (OON) claims are assisted by our current services. Because we are not a healthcare provider or insurer, HIPAA does not apply to our services provided directly to individuals. If required by law, we will comply with HIPAA’s applicable privacy and security requirements. Otherwise, information you provide is governed solely by the commitments in this Privacy Policy.
1. What Data We Collect
Our purposes for collecting and processing personal information include providing users with access to our claim submission and tracking services, communicating with payers, and supporting the functioning and improvement of our digital platforms. Data submitted directly by users, data received from payers, and data derived from user interaction with our services may all be included in the information we collect.
Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household constitutes “Personal Information” (also referred to as “personal data” in some jurisdictions). Identifiers, insurance and claim-related data, internet activity, and in some cases, sensitive personal information as defined under applicable law are all included within the definition of Personal Information.
| Category of Personal Information | Examples | Current Use of This Data | Categories of Recipients |
|---|---|---|---|
| Identifiers | Name, date of birth, email, phone number, address, insurance ID | Collected Processed Shared* | Insurance payers; claims and other infrastructure providers; affiliates providing operational support |
| Sensitive Personal Information | Diagnosis codes, CPT/procedure codes, session notes, insurance policy numbers | Collected Processed Shared* | Same as above |
| Account registration information | Username, login credentials (hashed), communication preferences | Collected Processed | Not applicable |
| Commercial Information | Claim submission history, eligibility determinations, claim statuses | Collected Processed Shared* | Same as Identifiers |
| Financial Information | Payment method (Stripe), transaction confirmations, billing ZIP | Collected Processed Shared* | Stripe; claims and other infrastructure providers |
| Professional Information | Provider name, NPI, service dates | Collected Processed Shared* | Insurance payers; claims and other infrastructure providers |
| Internet/Electronic Activity | IP address, device/browser data, user session activity | Collected Processed Shared* | Analytics providers; infrastructure vendors |
| Geolocation Data | Approximate location based on IP address | Collected Processed Shared* | Same as above |
| Inferences | User preferences derived from feature use or behavior | Collected (Created) Processed | Internal analytics only |
| Aggregated/Deidentified Data | Operational metrics (e.g., claim turnaround time, approval rates) | Collected Processed (anonymized) | Internal analytics only; not shared or sold |
The table above provides illustrative, not exhaustive, disclosures intended to reflect the typical scope of our data practices. Depending on how individuals interact with our services, additional categories or examples of personal information may be collected or used. The following important notes and explanatory details should be read in conjunction with the table:
(a) Disclosures made solely to provide our services as requested and directed by the user are marked as Shared*. Service providers or contractors under written agreement receive these disclosures, as do other third parties—such as insurance payers and claims infrastructure providers—when necessary to process claims or deliver the requested services. Under the CCPA/CPRA, these disclosures are not considered “sharing” or “selling.” An asterisk (*) marks these disclosures in the table for clarity; no listed disclosures involve selling or sharing as defined by CCPA/CPRA.
(b) The table above does not include additional categories of personal information identified under applicable laws (such as the CCPA/CPRA) if we do not collect, process, or share/sell such information. Biometric data, sensory recordings, and protected classifications are examples of such excluded categories.
(c) Account creation on our website may result in the collection of additional information such as your name, email address, login credentials, and any preferences or information you submit through the account interface. Our Terms of Use, which govern your interaction with our online services, may provide additional terms regarding account registration and use.
(d) Once information has been de-identified or anonymized in accordance with applicable laws, it is no longer considered personal information. Such de-identified data may be used, shared, licensed, or otherwise processed by us for any lawful purpose, including but not limited to research, analytics, benchmarking, product development, service improvement, business intelligence, marketing insights, or the creation of aggregated datasets. Reasonable steps are taken to ensure that de-identified data cannot be re-associated with any individual.
2. Sources of Personal Information
A variety of sources provide us with personal information, depending on how individuals interact with us and our services. The following sources may be included:
- Information you provide directly – Personal and health-related information you submit when using our services is collected by us, including claim-related documents, forms, or images (such as superbills, provider details, or insurance information) that you upload through our platform.
- Direct communications – Information you provide when communicating with us may be collected, whether through a web form, email, phone call, or other online or offline channels.
- Your interactions with our website and platform – Technical data from your browser or device may be collected when you visit or interact with our digital services, including IP address, browser type, and usage patterns. Cookies and similar technologies may be used to support functionality, analytics, or performance tracking.
- Account registration and profile activity – Information you provide during sign-up and while using your account is collected if you register for an account, including communications, preferences, interaction history, and any content you submit or actions you take while logged into your account.
- Insurance payers and claims infrastructure providers – Information may be received from insurance payers or claims infrastructure providers in response to your claim submission as part of processing your out-of-network (OON) claim, such as claim status, eligibility responses, or payment updates.
- Authorized third parties acting on your behalf – Information may be received from individuals or entities you authorize to act for you in some cases (such as a representative submitting claims on your behalf, or a provider’s administrative staff forwarding documentation).
- Service providers and affiliated entities – Personal information may be received or generated in collaboration with service providers (e.g., infrastructure, analytics, communications) or operational affiliates under common control who support delivery of our services.
- Payment processors – Limited transaction details may be received from the payment processor if you submit payments for our services through our platform (e.g., via Stripe), such as payment confirmation or billing ZIP code.
- Feedback and communications – Any personal information you include in messages, support requests, or feedback submitted through forms, emails, or other channels is collected.
- Job applications – Information you provide through a third-party platform (e.g., Indeed or LinkedIn) when submitting a job application may be collected and retained for recruiting, business operations, and legal compliance purposes.
- Deidentified or aggregated insights – Aggregated service usage metrics derived from individual interactions may be used for internal analytics, product improvement, product development, operational evaluation, and any other purpose permitted by law, though this data is not considered personal information subject to this Privacy Policy.
3. Purposes for Collecting and Using Personal Information
Personal information is collected, used, and otherwise processed by us for a variety of business and operational purposes, depending on the context in which we receive the data. The following purposes may be included:
- To provide services and functionality – Access to our website and digital tools is enabled, account creation and management is allowed, insurance claim submission and tracking is facilitated, payers or intermediaries are communicated with on your behalf, and your requests or transactions are fulfilled.
- To support decision-making using automated tools, including AI – Automated systems may be used to process and analyze personal information for purposes including validating claim data, assessing documentation, suppressing irrelevant communications, or monitoring usage patterns. Required disclosures will be provided and the ability to request human review will be offered as may be required by law where such tools produce legal or similarly significant effects.
- To analyze, improve, and develop our offerings – Usage patterns are assessed, technical issues are troubleshot, internal research is conducted, new products or services are developed, and existing features are enhanced.
- To personalize experiences and market responsibly – Communications are tailored, user workflows are improved, and anonymized usage data is analyzed to optimize service delivery. Cross-context behavioral advertising is not engaged in by us.
- To maintain the security and integrity of our systems – Monitoring for fraud, abuse, threats, or other illegal or unauthorized activities is conducted, and the rights, property, and safety of MySuperbills, our users, or others are protected.
- To comply with legal obligations and protect legal interests – Lawful requests, subpoenas, or court orders are responded to; recordkeeping and regulatory requirements are complied with; and legal claims are exercised or defended.
- To process job applications – Your information may be used to evaluate your qualifications, communicate with you during the hiring process, and comply with applicable employment laws if you apply for a role with us.
- To generate de-identified or aggregated data – Identifiers may be removed from personal information to create de-identified or aggregated datasets, which may be used for any lawful purpose not governed by this policy.
4. Information Sharing and Disclosure
Personal information may be disclosed to third parties for a variety of operational, legal, and commercial purposes, including the following:
- To fulfill a request or transaction – Access to a website feature may be provided, an out-of-network insurance claim may be submitted on your behalf, account-based functionality may be facilitated, or a job application may be processed.
- To comply with contractual obligations – Personal information may be disclosed as necessary to fulfill our obligations under agreements with our customers and end users, service providers, partners, or other third parties involved in delivering or supporting our services.
- To service providers and vendors – Information may be shared with contractors, cloud infrastructure providers, analytics platforms, and other service providers who assist us in delivering services, operating our website, or supporting our business operations. Applicable law and contractual obligations require these parties to handle the information accordingly.
- To business partners or other third parties – Personal information may be disclosed to operational partners, affiliated entities under common control, or other trusted third parties in connection with supporting or improving our services. Personal information is not shared with third parties for cross-context behavioral advertising.
- To comply with legal obligations – Personal information may be disclosed if required by law, regulation, subpoena, court order, or governmental request. Data may also be disclosed as necessary to enforce our Terms of Use, investigate violations, detect or prevent fraud, or protect the rights, property, or safety of MySuperbills, our users, or others.
- In connection with a business transfer – Personal information may be disclosed or transferred as part of any transaction in which MySuperbills or any of its assets, units, or affiliates are acquired, merged, reorganized, or otherwise transferred.
Reasonable steps are taken to safeguard personal information we collect, including through technical, administrative, and physical controls appropriate to the nature of the data and our operations. De-identified or aggregated information may also be shared with third parties for lawful business purposes. As long as we maintain and use such information in accordance with deidentification standards permitted by law, it does not identify you personally and is not subject to this Privacy Policy.
5. Legal Basis for Processing
One or more of the following legal grounds supports our processing of personal information where required by law:
- Your consent, where applicable, supports the processing;
- Contract performance or steps taken at your request before entering into a contract necessitates the processing;
- Compliance with a legal obligation requires the processing;
- Our legitimate interests necessitate the processing, such as providing and improving our services, preventing fraud, ensuring network and information security, or pursuing business operations—except where your rights and freedoms override such interests.
6. Cookies and Tracking Technologies
Cookies, pixel tags, and similar tracking technologies are used by us and certain third-party partners to collect information about how visitors interact with our website. Site functionality is improved, traffic patterns are analyzed, engagement with content is understood, and advertising and marketing efforts may be supported through these technologies in compliance with applicable laws.
Small data files stored on your device constitute cookies, which can retain information such as a user identifier, session state, or preferences. Files or data stored on your hard drive cannot be accessed by cookies, nor can cookies interact with cookies set by other websites, but browser or device activity may be associated over time. Small pieces of code called pixel tags (sometimes called web beacons) can track certain actions on web pages or emails, such as whether a user viewed or clicked specific content.
First-party cookies are used by some parts of our website to help us assess content usefulness, understand how visitors navigate through our site, and identify ways to improve the user experience. Third-party service providers—for example, analytics platforms or infrastructure vendors—may also work with us and set cookies or similar technologies to help us understand site performance and usage. Cross-context behavioral advertising is not currently engaged in by us. Should this change and such activity occur, our Categories of Personal Information table will reflect it as “shared” or “sold” without an asterisk (*), indicating that the disclosure is not solely for service delivery. This policy will be updated and any required opt-out mechanisms will be provided in that case.
Your browser settings may allow you to manage or restrict the use of cookies and similar technologies, including blocking cookies entirely, receiving notifications when cookies are set, or deleting existing cookies. The functionality of certain features or pages may be impacted by disabling cookies. More information about interest-based advertising or opt-out options for third party tracking by participating advertising networks can be found at:
- DAA (Digital Advertising Alliance)
- NAI (Network Advertising Initiative)
Continued use of our website constitutes your consent to the use of cookies and tracking technologies as described above. No guarantee is made that browser-level controls or third-party opt-out tools will block all tracking activity, and responsibility for the functionality or effectiveness of those tools is disclaimed.
7. Account and Password Security
Account registration and password selection may be required for certain features or sections of our website. Anyone who has your login credentials will be able to access your MySuperbills account. Maintaining the confidentiality and security of your username and password is solely your responsibility, as is any activity conducted under your account. Unauthorized access resulting from your failure to safeguard your credentials is not the responsibility of MySuperbills.
Physical, electronic, and administrative safeguards are implemented to help protect the personal information you provide, as required by applicable law. Industry-standard encryption technologies such as SSL may be used to protect data during transmission in areas where sensitive information may be transmitted. Due to the inherent nature of the internet, however, no data transmission or storage system can be guaranteed to be 100% secure. Security of any information you transmit to us online cannot be guaranteed.
Precautions to protect your personal information while online are encouraged, including regularly updating your passwords, using complex combinations of letters and numbers, and ensuring your browser and operating system are up to date.
8. Information of Children and Minors
Children under the age of 13 are not the intended audience for our website, and personal information from children under 13 is not knowingly collected directly. Information about minors, including children under 13, may be received when submitted by a parent or legal guardian in connection with an out-of-network claim or related request. Providing the requested services on behalf of the parent or guardian is the sole purpose for processing such information.
Should we become aware that personal information has been inadvertently collected directly from a child under 13 without appropriate parental consent, it will be deleted in accordance with applicable law, as feasible, and without liability to you or anyone else. Reasonable steps may be taken, including restricting access or suspending accounts, if a user is determined to have repeatedly submitted information in violation of this policy or applicable children’s privacy laws.
9. Third Party Websites
Links to third-party websites that are not owned or operated by MySuperbills may be contained on our website. Personal information about you is not transmitted to those websites, and their privacy practices or content are not our responsibility. Your information will be governed by that site’s privacy policy and terms of use if you choose to leave our site and visit a third-party website, which may differ from ours—even if the third party is a service provider used by MySuperbills.
If you apply for a position with MySuperbills through a platform such as Indeed.com, for example, your application may be processed under that platform’s own privacy policy. Reviewing the privacy policies of any third-party websites before providing them with your personal information is encouraged.
10. Do Not Track Signals
Private browsing modes (such as “Incognito” or “Private” windows), browser setting adjustments, or third-party tools to manage cookies and trackers may be used to reduce or block tracking technologies. Information may still be collected independently by your browser provider or third-party services, and their behavior is not controlled by us. Your browser’s support documentation should be consulted for more information.
11. Retention and Disposal of Personal Information
Personal information is retained for as long as reasonably necessary to fulfill the purposes for which it was collected, including providing our services, complying with legal obligations, enforcing agreements, resolving disputes, and supporting internal compliance and improvement efforts. The nature of the information, the context in which it was collected, and applicable legal or regulatory requirements may all affect the specific retention period for any given category of data.
12. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time at our sole discretion or as required by law. Unless otherwise stated, all changes will take effect upon posting the revised version to this page. Continued use of our platform following any changes constitutes acceptance of the updated policy.
We encourage you to review this page periodically to stay informed about our data practices. If we make material modifications to how we gather, use, or share your personal information, we may also notify you through additional means, such as email or a notice on the website.
13. Questions or Suggestions
If you have any questions or concerns about how we gather, use, or disclose personal information, you may contact us by e-mail at: legal@MySuperbills.com. Please allow up to five business days for a reply.
14. California Resident Privacy Disclosures & Statement of Rights
California Residents Only.
Residents of California are the only individuals to whom this section applies, to the extent our operations are subject to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and related regulations.
California Rights
The following rights regarding your personal information may be available to California residents, subject to certain exceptions and limitations under applicable law:
- Right to Know – You have the right to request information about the personal information we collect, use, disclose, or sell, including: (1) the categories of personal information we have collected; (2) the categories of sources from which it was collected; (3) the purposes for collecting, selling, or sharing the information; (4) the categories of third parties to whom personal information was disclosed; and (5) in certain cases, the specific pieces of personal information we have collected about you.
- Right to Delete – You may request that we delete personal information we have collected from you, subject to certain legal exceptions.
- Right to Correct – You may request that we correct inaccurate personal information we maintain about you.
- Right to Opt Out of Sale or Sharing – If we sell or share personal information as defined by California law, you have the right to opt out of such sale or sharing.
- Right to Know Recipients of Disclosures – You may request information about the categories of third parties to whom we have disclosed personal information for a business or commercial purpose.
- Right to Non-Discrimination – You have the right not to receive discriminatory treatment for exercising your privacy rights under the California Consumer Privacy Act (CCPA/CPRA). We will not deny you services, charge different prices, or provide a different level of service solely because you exercised those rights. However, please note that certain services may require us to collect or use specific types of personal information. For example, some features may only be available to registered users or individuals who provide the information necessary to use those features.
Exercising Your Rights
As a California resident, you may exercise your privacy rights, request access to or correction of the personal information we have collected about you, or contact us for more information about our privacy practices. To submit any California privacy rights requests, please contact us via legal@MySuperbills.com.
Verification Process
You may submit your California rights requests using any of the methods listed above. For certain requests, California law requires us to verify the identity and authority of the individual making the request in order to protect your privacy and personal information. Depending on the nature and sensitivity of the request, we may ask you to provide two or more pieces of information that match data already in our records before we can process the request.
Authorized Agent
If you wish to submit a California rights request through an authorized agent, you may do so by designating the agent in writing and contacting us through any of the methods listed above. To help us verify and process the request, please provide the following information:
- Your full name and date of birth
- Your current address and telephone number
- The name of the authorized agent
- Whether the requested information should be delivered to you or to the agent, along with appropriate delivery instructions
- The specific types of requests you are authorizing the agent to make (e.g., Request to Know, Request to Delete, or Request to Opt-Out of Sale or Sharing)
- Your signature and the date of authorization
If any required information is missing or cannot be verified, we may request additional documentation prior to processing the request. We may also ask for further verification depending on the nature or sensitivity of the request, in accordance with applicable law.
No Sale of Minor Information
No actual knowledge of any sale of the personal information of consumers under 16 years of age is held by MySuperbills.