What happens to your bill, stated as mechanics rather than promises.

The invoice, stage by stage

• The PDF or pasted text is read in the browser. No endpoint receives the invoice document.
• Redaction runs on your device before any analysis request.
• You confirm the redaction before anything is sent — this step cannot be skipped.
• Deterministic checks (math, duplicates, clerical-rate, block-billing) run on your device and work with your network off.
• Closing the tab discards the review. There is no "get this back later."

What is redacted before anything is transmitted

Names, firm names, case numbers, addresses, and account numbers are replaced with tokens (like TK-2 or CLIENT-1) or stripped outright before the assessed layer is ever called. Only redacted line-item text is sent, only after you approve this screen, and only for the assessed layer — along with which category and cited lines a deterministic finding already covers, never its dollar amount. We do not keep a copy. The exact-dollar findings never leave this device.

What is actually collected, and why

• A payment record: that this session paid $29, an opaque session id, timestamp, and amount. No invoice content.
• We do not keep a separate list of customer emails. Stripe keeps the email you enter at checkout for your receipt.
• Analytics via Google Analytics 4: device, referrer, which screens were opened, and review-progress events. Those events carry only counts, yes/no values, and fixed categories: how many findings of each kind a review produced, whether a math or duplicate finding appeared, how many lines were read, which kind of upload error occurred, and whether a checkout started or completed. No invoice text, tokens, dollar findings, or file names are sent to this service, and review events go to Google Analytics only, not to the advertising tag. This site loads the Google tag (gtag.js) directly, with a GA4 measurement ID. Analytics cookies stay off until you choose "Allow" in the cookie banner; until then, Google's tag may send limited measurements without analytics cookies, which Google uses to estimate totals. If your browser sends the Global Privacy Control (GPC) signal, this site sends no review events at all.
• A Google Ads conversion tag (Consent Mode v2). Advertising storage defaults to denied. Even while denied, the tag can still send a limited, cookieless ping to Google — timestamp and coarse browser/ referrer information, no cookies or advertising identifiers, never invoice content. Granting consent through the cookie banner enables full ad-conversion tracking (cookies and advertising identifiers).
• Cookie/consent preferences, managed by CookieYes. Its banner is how you allow or refuse analytics and advertising cookies; both stay off until you allow them, and you can change your choice at any time.

Firebase, scoped precisely

Your browser only ever loads the Firebase client SDK (Auth + Firestore) if you are signing in as an admin at the /admin route. As a consumer using the free review or the $29 instruments, your browser never loads it. The public blog you can read on this site is still backed by Firestore, but that read happens server-side, inside a Cloud Function, using the Firebase Admin SDK — your browser only ever calls a plain REST endpoint for it, not Firestore directly.

Error tracking

This site includes error-tracking code (Sentry) gated behind a deployment configuration value. As of the date above, no production build has that value set — a live check of this site's own network traffic shows zero requests to Sentry's collection endpoint, and the code path is inert. If that ever changes, any error report is stripped of Stripe/payment query parameters and any invoice, redaction, or dollar-finding data before it leaves your browser, and nothing on this site records or reconstructs what happened on your screen.

The concierge on the marketing site

There is no concierge, live chat, or voice feature on this site.

Two things this page will not claim

• We do not have a signed contract with our processing vendor guaranteeing zero data retention. No such deal exists yet, so we are not going to describe one.
• We do not claim a trained AI model runs on your device. Redaction and the deterministic checks are ordinary code, not a model, and nothing here performs on-device inference.

Questions

Contact Christopher J. Bradley through fairbillanalyzer.com.