Data Retention and Deletion

Retention by information type

Information type	Retention period
Uploaded bill documents and EOBs	30 days after upload, or until case closure if longer
Analysis results and case records	12 months after case closure
Letters and correspondence sent on your behalf	3 years, for audit and dispute purposes
Electronic authorization records	3 years
Payment and transaction records	7 years, as required for tax and financial recordkeeping
Account and contact information	Until you delete your account, then 30 days
Backups	Overwritten through normal lifecycle within 90 days

Why authorizations and correspondence are kept longer

If a provider or regulator ever questions whether we were permitted to contact them on your behalf, the signed authorization and the record of what was sent are the answer. These records contain your name, account number, and what you approved, not the full bill contents. Retaining them for three years protects both you and Itemizeit in the event of a billing dispute or regulatory inquiry.

Deleting your information

• Delete a bill: from Case Settings inside that case, at any time
• Close a case: from Case Settings, which starts the deletion schedule above
• Delete your account: from your account settings, or by emailing privacy@useitemizeit.com. Account and contact information is deleted within 30 days. Records subject to longer retention periods (authorizations, correspondence, payment records) are retained for those periods regardless of account deletion.

What deletion does not undo

Deleting a bill or closing a case does not retract communications already sent to a provider on your behalf. Those were delivered before the deletion request and cannot be recalled.

Contact

privacy@useitemizeit.com