Agent Eva AI LLC
Privacy Policy
Last updated: November 2, 2026
Agent Eva AI LLC operates this Service, a free, consumer-facing tool that helps you understand whether your health insurance is likely to cover GLP-1 medications, and what prior-authorization criteria typically apply. This Privacy Policy explains what data we collect, what we don't, and why.
The short version: card images are processed in memory and are not retained by us. If you use the coverage chat, your messages and the guide's replies are stored in AgentEva Hub and sent to Anthropic to generate replies. Please do not enter names, member IDs, dates of birth, or personal medical details.
1. What we process and what we keep
When you upload a photo of your insurance card, the following happens:
- The image is sent to Google Cloud Vision for optical character recognition (OCR). The image is not retained by us after OCR completes. Google's handling of the image is governed by Google Cloud's terms; we do not retain it on our servers.
- The raw text returned by OCR is held in memory only long enough to identify your insurer and plan type. It is never written to our database.
- What we never read or store: your name, member ID, group number, RxBIN/PCN, copay amounts, deductibles, date of birth, phone numbers, or any other identifiers printed on the card.
2. What we save for analytics
For each lookup, we record a de-identified event row containing:
- The matched insurer name and plan type
- The drug and indication you looked up
- The page that referred you (if any)
- Your browser's user-agent string
- A random session identifier (not tied to your IP, email, or name)
- Whether the lookup originated from card OCR or manual selection
We use this to understand which insurers and drugs are most commonly checked, improve OCR accuracy, and prioritize new coverage data. We do not sell this data to third parties.
3. Third-party services we use
- Google Cloud Vision — performs OCR on your uploaded card image. Image is not retained by us; Google's retention is per their terms.
- Anthropic — generates plain-language summaries and coverage chat replies. The chat sends your messages, recent conversation history, and matched policy information to Anthropic. Information you type into chat may therefore be included. Only plan selectors, such as insurer, medication, intended use, and plan type, are sent to the criteria lookup API.
- Railway — hosts our web applications, analytics database, and AgentEva Hub chat transcripts. Administrators can review chat transcripts to support and improve the guide.
- Google Fonts — serves the Inter typeface; subject to Google's own privacy policy.
4. Cookies
We use a single first-party session cookie (necessary to make the lookup flow work and to attach a random, non-identifying session ID to analytics events). We do not use third-party advertising or tracking cookies.
5. HIPAA
Agent Eva AI LLC is a consumer-facing informational tool, not a covered entity or business associate under HIPAA. The coverage guide asks for plan information, not personal medical information. Do not submit protected health information in chat; messages are stored and processed as described above. We are not acting on behalf of, and have no business-associate relationship with, your health insurer, healthcare provider, or pharmacy.
6. Children
Agent Eva AI LLC is not directed to children under 13. We do not knowingly collect information from children.
7. Your choices
Analytics rows use a random session identifier. Chat transcripts are stored separately; clearing browser data does not delete a transcript. For questions about your information or a chat deletion request, contact us at ben@agenteva.ai.
8. Changes
We may update this policy as the product evolves. The "Last updated" date at the top reflects the most recent change.
Contact
Agent Eva AI LLC
ben@agenteva.ai