Privacy Policy

Last updated: July 31, 2026

This Privacy Policy explains what information Mareva (“we”, “us”) collects, how we use and protect it, and the choices you have. By using the service you agree to this policy.

1. Who we are and what we do

Mareva is a software tool that helps you understand medical bills, Explanation of Benefits (EOBs), insurance denials, pharmacy denials, and collection notices. You upload a document, and we produce a plain-language explanation, flag possible issues, and prepare communication drafts for your own review. We are not a healthcare provider, insurer, law firm, or medical billing company.

2. Information we collect

  • Account information — your name and email address when you create an account.
  • Documents you upload — the bills, EOBs, letters, and notices you choose to submit, which may contain health and financial information.
  • Case details you provide — optional information such as your state, insurance status, household size, income range, and notes.
  • Payment information — processed by our payment provider (Stripe). We do not store your full card number; we keep a record of the transaction and its status.
  • Technical data — basic log and device information used to operate and secure the service.

3. How we use your information

  • To create your account and provide the service.
  • To analyze your documents and generate your reports, letters, and next steps.
  • To process payments and unlock paid reports.
  • To secure the service, prevent abuse, and comply with law.
  • To respond to your support requests.

We do not sell your personal information, and we do not use your uploaded documents to advertise to you.

4. AI processing of your documents

To analyze a document, its contents are sent to our AI provider (OpenAI) through their business API. Under that API, your content is not used to train their models. The AI output is a draft for your review — you decide whether and how to use it.

5. Service providers we share data with

We use trusted providers to run the service, each only for the purposes above:

  • Supabase — authentication, database, and private file storage.
  • OpenAI — AI analysis of your documents (via their business API).
  • Stripe — payment processing.
  • Vercel — application hosting and delivery.

We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a business transfer.

6. How we protect your data

  • Documents are stored in private storage and are not publicly accessible.
  • Access is restricted to your account through row-level security.
  • Data is encrypted in transit (HTTPS) and at rest by our providers.
  • Secret keys are kept server-side and never exposed to your browser.

No system is perfectly secure, but we work to protect your information using industry-standard safeguards.

7. Data retention and deletion

We keep your account, documents, and reports for as long as your account is active or as needed to provide the service. You may request deletion of your account and associated documents by contacting us at support@mareva.ai. We may retain limited records (such as payment history) where required for legal, tax, or fraud-prevention purposes.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to limit certain uses. Residents of states such as California and Washington may have additional rights (including under the California Consumer Privacy Act and the Washington My Health My Data Act). To exercise any right, contact us at support@mareva.ai. We will not discriminate against you for exercising your rights.

9. Health information and HIPAA

Mareva is a consumer tool you use with your own documents. We are generally not a “covered entity” or “business associate” under HIPAA, and this service is not a substitute for your rights under HIPAA with your providers and insurers. We still treat the health and financial information you share as sensitive and protect it as described above. If we ever have a breach of covered health information, we will notify affected users as required by applicable law, including the FTC Health Breach Notification Rule.

10. Children

The service is intended for adults (18 and older) and is not directed to children. We do not knowingly collect information from children under 13.

11. Where we operate

The service is intended for users in the United States. If you access it from elsewhere, you are responsible for compliance with local laws.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above and, where appropriate, notify you.

13. Contact us

Questions or requests about your privacy? Email us at support@mareva.ai.

Mareva is not a healthcare provider, insurance company, law firm, or medical billing agency. We do not provide medical, legal, or financial advice. Our tools help users understand documents, identify possible issues, and prepare communication drafts for their own review. Results are not guaranteed. Please verify all information with your provider, insurer, or a qualified professional.