Privacy Policy

RVUDoc is a wRVU calculator and documentation library for outpatient providers. Some tools run in your browser; account features use hosted services and AI tools send submitted text or selected report findings to Anthropic. Do not enter patient-identifying information.

What we collect

• Your email address, used for sign-in and account communications.
• Your saved RVU scenarios: specialty, code and visit volumes, compensation figures (base salary, bonus rate and threshold, quality and other bonus), wRVU totals, and locality. No patient information.
• Your practice workspace: monthly wRVU totals, goals, compensation-statement amounts, confirmed offer terms, contract milestones, favorite codes and code-update read history. Guest workspaces stay in browser storage when saved; signed-in workspaces are saved to your account when you choose Save to account. Exported backups contain this information.
• Your confirmed RVUDoc Review data: reporting month, RVU year, CPT/HCPCS codes, modifiers, billed and performed unit totals, credited work RVUs and optional numerical compensation terms. Recognized posting reports also include signed charge units, charge and payment totals, transaction counts, original and revised work RVUs, adjustments and service-month totals. We save these aggregates, findings, generated AI reports, review status and usage metadata to your account. Replacing a month preserves its previous aggregates and explanation as a private, read-only version, with up to 20 previous versions per month. This limit does not automatically delete reports. You can request deletion through our support address. Original spreadsheets, worksheet names, file names, encounter identifiers and other source columns are not transmitted or saved by this feature.
• Your report-notification preference and delivery status. Notifications go to your verified account email only when you enable them and delivery is configured.
• Your private template library: reusable text, titles, collections, favorites and snapshots of accessible source templates you copy or review. These are stored in your account, restricted to the owner through database access rules, and retained until deleted. Do not include patient information. Identifier checks are incomplete.
• Subscription metadata from Stripe (customer id, plan, renewal date). Card numbers never touch our servers.
• Vercel page-view analytics, including page visits and referring websites. Query strings and URL fragments are removed before collection. Custom action tracking and campaign session storage are currently disabled. Do Not Track and Global Privacy Control are respected for browser analytics. Browser analytics does not include entered compensation amounts, clinical text, email addresses, or uploaded files.
• Operational request metadata, such as IP address, user-agent and request path, may be processed by hosting providers for security and diagnostics. Retention depends on provider settings and policies; we do not promise a universal 30-day deletion period.

What we do not collect

• Patient-identifying information is prohibited. Do not paste patient names, MRNs, or other identifying information into any field. Automated checks cannot prevent every disclosure. RVUDoc is not offered as a service for processing PHI.
• No analytics tracking that follows you across the web. No third-party advertising cookies.
• No payment card numbers; Stripe handles all card data directly.

AI tools and submitted text

Capture Audit sends your submitted vignette to Anthropic to generate suggestions. The audit handler does not save the vignette or result in our database or application logs. It records an account ID, hashed IP, date, time and tier for daily usage limits. Your browser keeps the current note and result in page memory; preferences and numerical audit tallies may be saved in browser storage. Clearing the page does not delete data already sent to a provider.

Before sending an audit, review the text and remove identifiers. Common-identifier checks run in the browser and on the server, but they are incomplete and are not a deidentification service. Passing a check or selecting the confirmation box does not establish HIPAA compliance. For preparation guidance, see the HHS deidentification guidance.

Contract Review also sends submitted text to Anthropic. A draft is saved in browser session storage during the checkout flow, and generated reports and associated review metadata are saved to your account. Reports can contain excerpts from the submitted contract even though the source document is not saved as a separate database field. Remove sensitive details that are not needed for review.

Monthly spreadsheet review

RVUDoc Review reads Excel and CSV files in your browser. Source cells and unmapped columns remain in page memory; this feature does not save the original file to browser storage or upload it to our server. Review your column mappings and monthly totals before confirming. Only the structured monthly aggregates and optional numerical compensation terms are sent to RVUDoc and saved in Supabase with your account ID.

To prepare an AI explanation, RVUDoc sends Anthropic a bounded selection of calculated findings: monthly totals, code and modifier comparisons, E/M distribution when applicable, compensation context and scope limitations. Posting-ledger explanations use signed credit adjustments and reporting-period context instead of CMS, performed-volume or E/M comparisons. It does not send the original spreadsheet, raw rows, source identifiers or your account email. The resulting AI report is saved to your account. Selecting only numeric aggregates is not a deidentification certification; prepare reports without patient information and follow your organization's data-sharing requirements.

The dashboard displays the 24 most recent saved reporting months. Older saved reports may remain in the database; this display limit is not an automatic deletion policy. Contact us to request deletion of saved reviews. Printing or saving a report as PDF creates a copy under your control. A confirmed calculator transfer places only the reporting month, credited wRVU total and numerical compensation terms in temporary storage in the same browser tab; it expires for use after 30 minutes and does not include source rows or AI report text.

Transferring terms from a contract review to the offer desk uses temporary storage in the same browser tab. The calculator transfer also contains the offer label and annual production assumption. Transfers expire for use after one hour and do not include contract text. Statement checking, offer calculations and interactive coding cases do not send entered values to an AI provider. Coding-case answers stay in page memory.

Anthropic has its own retention rules. Its standard API policy describes deletion within 30 days, with exceptions including legal obligations, abuse prevention and different contractual arrangements. Do not assume zero retention. See the current Anthropic commercial data retention policy.

How we use it

• To run the calculator and persist your scenarios across devices.
• To understand who uses RVUDoc and make it better. The RVUDoc administrator may review calculator inputs, including specialty and compensation figures, in aggregate to guide product and content decisions. We do not sell this data or share it outside the sub-processors listed below.
• To process subscriptions through Stripe.
• To send account emails (sign-in links, receipts, important product updates). We do not send marketing emails without opt-in.
• To prepare and store monthly Review reports and, if you enable notifications and transactional delivery is configured, send an email through Zoho ZeptoMail / CPaaS linking to your private report. The notification contains no code-level findings or compensation amounts. Viewing the detailed report requires sign-in and Review access. This preference is separate from newsletter consent.

Sub-processors

We share data only with vendors that help us run the service:

• Supabase (US): database and authentication.
• Stripe (US): subscription billing.
• Vercel (US): web hosting and website analytics.
• Anthropic: AI processing of audit vignettes, contract text and bounded monthly Review findings.
• Zoho ZeptoMail / CPaaS: delivery of enabled report-ready notifications using your account email when configured. Detailed Review reports remain in your RVUDoc account. The admin@rvudoc.com inbox remains the customer-service reply address.

Your rights

You can view saved data and use the available export tools. To request account or saved-report deletion, email admin@rvudoc.com. Provider retention policies and legal obligations may apply to data already processed by those providers.

Children

RVUDoc is intended for licensed clinicians and is not directed to anyone under 18.

Changes to this policy

We will update this page when our practices change and date the update at the top.

Contact

Questions, deletion requests, or concerns: email admin@rvudoc.com.