Privacy Policy

Agent Eva AI LLC operates this Service, a free, consumer-facing tool that helps you understand whether your health insurance is likely to cover GLP-1 medications, and what prior-authorization criteria typically apply. This Privacy Policy explains what data we collect, what we don't, and why.

The short version: we don't store your insurance card image, your member ID, your name, or any other identifying information. We process your card in memory, throw the image bytes away, and keep only de-identified usage analytics.

1. What we process and what we keep

When you upload a photo of your insurance card, the following happens:

• The image is sent to Google Cloud Vision for optical character recognition (OCR). The image is not retained by us after OCR completes. Google's handling of the image is governed by Google Cloud's terms; we do not retain it on our servers.
• The raw text returned by OCR is held in memory only long enough to identify your insurer and plan type. It is never written to our database.
• What we never read or store: your name, member ID, group number, RxBIN/PCN, copay amounts, deductibles, date of birth, phone numbers, or any other identifiers printed on the card.

2. What we save for analytics

For each lookup, we record a de-identified event row containing:

• The matched insurer name and plan type
• The drug and indication you looked up
• The page that referred you (if any)
• Your browser's user-agent string
• A random session identifier (not tied to your IP, email, or name)
• Whether the lookup originated from card OCR or manual selection

We use this to understand which insurers and drugs are most commonly checked, improve OCR accuracy, and prioritize new coverage data. We do not sell this data to third parties.

3. Third-party services we use

• Google Cloud Vision — performs OCR on your uploaded card image. Image is not retained by us; Google's retention is per their terms.
• Anthropic — generates plain-language summaries of coverage criteria. We send only the matched insurer name, drug, indication, plan type, and the public criterion data — never your name or other identifying information.
• Railway — hosts our web application and analytics database.
• Google Fonts — serves the Inter typeface; subject to Google's own privacy policy.

4. Cookies

We use a single first-party session cookie (necessary to make the lookup flow work and to attach a random, non-identifying session ID to analytics events). We do not use third-party advertising or tracking cookies.

5. HIPAA

Agent Eva AI LLC is a consumer-facing informational tool, not a covered entity or business associate under HIPAA. We do not collect protected health information (PHI) as defined by HIPAA — we deliberately design the product to avoid it. We are not acting on behalf of, and have no business-associate relationship with, your health insurer, healthcare provider, or pharmacy.

6. Children

Agent Eva AI LLC is not directed to children under 13. We do not knowingly collect information from children.

7. Your choices

Because we do not collect identifying information, we cannot identify or delete your specific analytics rows on request. You can clear your browser's cookies at any time to reset your session. If you have questions about your data, contact us at ben@agenteva.ai.

8. Changes

We may update this policy as the product evolves. The "Last updated" date at the top reflects the most recent change.

Contact

Agent Eva AI LLC
ben@agenteva.ai