Cookie Policy

Updated: September 01, 2025

We use cookies and similar technologies to make BurnaAI work better for you. This policy explains what cookies are, how we use them, and how you can control them.

Your choices matter to us. You can adjust your cookie preferences anytime using the tools we provide.

What Are Cookies?

Cookies are small text files that websites store on your device when you visit them. They help websites remember your preferences, keep you logged in, and understand how you use the site.

Similar technologies we use:

Local Storage: Stores data on your device for better performance
Web Beacons: Track email opens and page views
Session Replay: Records interactions to improve usability
Device Fingerprinting: Identifies devices for security purposes

Types of Cookies We Use

Essential Cookies (Always Active)

Purpose: Make our website and platform work properly

Legal Basis: Contract performance and legitimate interest

Retention: Session to 12 months

What they do:

Keep you logged into your BurnaAI account
Enable secure payment processing
Provide core platform functionality
Prevent fraud and ensure security

You cannot opt out of these without affecting functionality.

Analytics Cookies (Your Choice)

Purpose: Help us understand website usage and improve performance

Legal Basis: Legitimate interest (with opt-out) or consent

Retention: Up to 26 months

What they do:

Track page views and user interactions
Measure website performance
Identify technical issues
Test new features

Third parties: Google Analytics (IP anonymized), Hotjar, FullStory

Preference Cookies (Your Choice)

Purpose: Remember your choices and settings

Legal Basis: Legitimate interest

Retention: Up to 24 months

What they do:

Save your language preferences
Remember dashboard settings
Store communication preferences
Maintain accessibility options

Marketing Cookies (Your Choice)

Purpose: Show relevant BurnaAI information across the internet

Legal Basis: Consent only

Retention: Up to 24 months

What they do:

Display targeted ads on other websites
Measure marketing campaign effectiveness
Provide personalized content
Enable cross-device tracking

Third parties: Google Ads, LinkedIn, Facebook, HubSpot

How We Use Cookies

On Our Website

Improve performance and user experience
Understand which content is most helpful
Ensure security and prevent fraud
Provide customer support

On Our Platform

Maintain secure login sessions
Enable clinical documentation features
Support EHR integrations
Optimize platform performance

Important: All clinical data analysis uses only de-identified information.

Third-Party Services

We work with trusted partners who may use cookies:

Customer Support

Zendesk - Help center and support tickets

Remember your support history
Enable live chat functionality

Payment Processing

Stripe - Secure billing and payments

Process payments securely
Prevent payment fraud
No payment card details stored in cookies

Marketing and Analytics

Google Services - Analytics and advertising HubSpot - Customer relationship management

LinkedIn/Facebook - Professional and social media advertising

Session Recording

FullStory - User interaction recording for platform improvement Opt out: https://www.fullstory.com/optout/

All third parties bound by strict data protection agreements.

Your Cookie Choices

Cookie Preference Center

Easy control at your fingertips:

Toggle different cookie categories on/off through browser settings
Update your choices anytime
Changes take effect immediately

Browser Settings

Control cookies in your browser:

Chrome: Settings → Privacy and Security → Cookies
Firefox: Settings → Privacy & Security → Cookies
Safari: Preferences → Privacy → Cookies
Edge: Settings → Cookies and site permissions

Advertising Opt-Outs

Stop targeted ads:

Google Ads: https://adssettings.google.com/
LinkedIn: https://www.linkedin.com/legal/privacy-policy
Facebook: https://www.facebook.com/settings?tab=ads
Industry Tools: http://www.aboutads.info/choices/

Global Privacy Control

Automatic opt-out: If your browser sends a Global Privacy Control signal, we automatically respect that choice.

Legal Basis and Rights

GDPR Compliance (EU/EEA/UK/Switzerland)

Legal basis for cookie processing:

Consent: Marketing and non-essential analytics cookies
Contract Performance: Login and payment processing
Legitimate Interest: Security, essential analytics, preferences

Your rights:

Access: Know what cookies collect about you
Correction: Update inaccurate information
Deletion: Request removal of cookie data
Objection: Object to legitimate interest processing
Withdrawal: Remove consent for marketing cookies anytime

CCPA Rights (California)

Know: What personal information cookies collect
Delete: Request deletion of cookie information
Opt-Out: Stop "sale" of information through advertising cookies
Non-Discrimination: Same service quality regardless of choices

How to Exercise Rights

Email: [hello@burna.ai](mailto:hello@burna.ai)

Response time: 30 days maximum

International Transfers

Data may be transferred internationally with appropriate safeguards:

EU-US Data Privacy Framework compliance
Standard Contractual Clauses for business relationships
Encryption and access controls for all transfers

Primary processing: United States (HIPAA-compliant facilities)

Healthcare Data Protection

HIPAA Compliance

Important: Cookies on our website do NOT collect patient health information.

Clinical data separation:

Patient data processed separately under HIPAA
Business Associate Agreements cover all clinical information
Marketing cookies never access healthcare data
Cookie practices don't affect your HIPAA compliance

For Healthcare Organizations

Disable non-essential cookies without affecting clinical functionality
All patient data protection covered by separate agreements
Cookie practices comply with healthcare regulations

Data Retention

How long we keep cookie information:

Session Cookies: Deleted when you close your browser
Essential Cookies: Up to 12 months
Analytics Cookies: Up to 26 months
Marketing Cookies: Up to 24 months
Preference Cookies: Until you delete your account

Automatic deletion:

Scheduled removal at expiration
Immediate deletion when you withdraw consent
Complete removal when you close your account

Children's Privacy

Age restrictions:

Platform not intended for users under 18
Enhanced protections for verified minors
Parental consent required where applicable
Limited cookie functionality for children

If you believe a child has provided information, contact us immediately.

Updates to This Policy

When We Make Changes

New cookie technologies
Legal requirement changes
Service improvements

How We Notify You

30-day advance notice for material changes
Email notification to registered users
Website banner for significant updates
Updated effective date clearly posted

Liability and Legal Framework

Governing Law

This policy is governed by Tennessee state law.

Limitations

BurnaAI is not responsible for:

Third-party cookie practices
Service disruption from cookie blocking
Third-party data breaches
Changes to partner cookie functionality

Maximum liability limited to fees paid in preceding 12 months.

Dispute Resolution

1. Direct contact: [hello@burna.ai](mailto:hello@burna.ai) (30-day response) 2. Mediation: American Arbitration Association 3. Arbitration: Binding individual arbitration (no class actions)

Contact Us

Privacy Questions

BurnaAI Privacy Team

Email: [hello@burna.ai](mailto:hello@burna.ai)

Technical Support

For cookie-related issues:

Email: [hello@burna.ai](mailto:hello@burna.ai)

Live Chat: Available on website

Regulatory Contacts

EU Users: Contact your local Data Protection Authority

California Users: California Attorney General's Office

UK Users: Information Commissioner's Office (ICO)

---

Want to manage your cookie preferences? Contact us anytime at [hello@burna.ai](mailto:hello@burna.ai).

Questions about healthcare data? All patient information is protected separately under our HIPAA compliance program - cookies don't affect clinical data.

---

*This Cookie Policy is effective as of September 01, 2025.*