Your data, handled with care

Information we collect

We collect the information you give us when you create an account, contact support, or pay for a subscription. That includes your name, email address, and billing details, along with usage data such as the pages you open and the actions you take in the app. We also collect standard technical information like your IP address, browser, and device type so we can keep the service secure and reliable.

When you parse a remittance file in the viewer, the contents of that file are processed to render your results. We tell you exactly how that processing happens, and where, in the sections below.

How we use it

We use your information to run the service, authenticate your account, process payments, and respond when you reach out. We use aggregated usage data to understand which features help you and to fix the parts that get in your way. We never sell your personal information, and we do not use the contents of your remittance files to train models or for advertising.

• Provide, maintain, and improve the viewer and your account.
• Send service messages, receipts, and security notices.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Meet our legal, tax, and regulatory obligations.

PHI & HIPAA

Remittance files such as X12 835 documents can contain protected health information (PHI). When you use Visera to handle PHI on behalf of a covered entity, we act as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). We handle PHI only to provide the service and only as your instructions and applicable law allow.

A Business Associate Agreement (BAA) is available. If your organization needs a signed BAA before processing PHI, contact us at [DPO_EMAIL] and we will put one in place.

Data retention & deletion

We keep your account information for as long as your account is active, and for a limited period afterward to meet legal, tax, and audit requirements. Parsed file results are retained only as long as needed to deliver the feature you used; many parsing operations run in your browser and leave nothing on our servers.

You can delete your data at any time. Ask us to close your account and we will delete or de-identify your personal information, except where we are required to retain it. Email [DPO_EMAIL] to request deletion.

Third-party processors

We rely on a small set of vetted vendors to operate Visera. Each one processes data only on our instructions and under contract, and we limit what we share to what each vendor needs.

• Supabase — authentication and database hosting.
• Stripe — subscription billing and payment processing.
• Resend — transactional and account email delivery.
• PostHog — privacy-conscious product analytics.
• Sentry — error monitoring and performance diagnostics.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. We will not discriminate against you for exercising these rights.

To make a request, email us using the contact details below. We will verify your identity and respond within the timeframe required by law.

Contact

Questions about this policy or how we handle your data? Reach our data protection contact at [DPO_EMAIL], or write to [COMPANY], [ADDRESS]. We read every message and aim to reply quickly.