Privacy Policy

1. Who we are

IRMAAppeal ("IRMAAppeal," "we," or "us") is operated by Coellaborate, LLC, based in Moseley, Virginia. IRMAAppeal provides software that helps you evaluate your own Medicare IRMAA appeal and generate appeal paperwork and detailed instructions. This policy explains how we collect, use, and share information through the IRMAAppeal service (the "Service").

2. Information we collect

About you, when you create an account:

• Account details: email address, password (stored hashed).
• Household details you provide: your name, mailing address, phone, and — if you're married — your spouse's name, so we can prepare appeal documents for both of you.
• Your IRMAA notice and income details: premium year, tax year, filing status, income figures, and the appeal reason you select.
• Billing information processed by our payment provider (see "Subprocessors" below) when you pay the one-time fee for an appeal.
• Usage data: pages visited, actions taken, IP address, browser, and device information.

We do not collect or store your Social Security Number for any part of the Service. That field is filled in when the SSA-44 PDF is generated and is never seen by or stored in our system.

3. How we use information

• To provide the Service: save your appeal details, determine an appropriate appeal process to follow, and generate your appeal documents.
• To operate your account and process your one-time payments.
• To communicate with you about your account, security, and service updates.
• To improve, secure, and troubleshoot the Service.
• To comply with applicable law.

4. How we share information

• With our subprocessors, who help us run the Service under written contracts.
• To comply with legal process, protect rights, or respond to security incidents.
• In connection with a merger, acquisition, or sale of assets, subject to this policy remaining in force.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We never share your information with any third party for marketing purposes.

5. Subprocessors

We rely on the following service providers to run the Service:

• Supabase — database, authentication, and file storage.
• Stripe — one-time payment processing.
• Vercel — web hosting, content delivery, and the serverless functions that process your requests (including your appeal details) before passing them to Supabase or Stripe.

6. Data retention

We retain information for as long as your account is active and for a reasonable period afterwards to support business, legal, and audit requirements. You can delete your saved appeals from your account at any time, which removes the underlying data from our active systems.

7. Security

We use industry-standard measures to protect information, including encryption in transit, encrypted storage, role-based access controls, and row-level database security. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain uses. To exercise these rights, email support@irmaappeal.com.

9. Minors

The Service is not directed to users under 18, and we do not knowingly collect personal information from them. If you believe a minor has provided us information, contact us so we can delete it.

10. International users

IRMAAppeal is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection rules than your country.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect.

12. Contact

Questions about this policy? Email support@irmaappeal.com.