Cookie Policy
Alehra is committed to protecting privacy and security, including in HIPAA-regulated contexts.
Last Updated: February 17, 2026
Cookie Settings
When you visit any Alehra website or application, we may store or retrieve information on your browser, mostly in the form of cookies. We use cookies and similar technologies to improve your experience, provide secure login, enable telehealth functionality, and optimize site performance.
Because we respect your right to privacy, you can choose to not allow some types of cookies. However, blocking some categories may impact your experience and the services we can offer.
Read our Privacy Policy to learn more.
What Are Cookies?
Cookies are small text files stored on your browser or device when you visit a website. They help websites function properly, enhance user experience, and provide insights into usage patterns.
Some cookies are temporary (session cookies) and expire when you close your browser. Others are persistent and remain until deleted or expired.
Cookie Categories
Essential Cookies (Always Active)
RequiredThese cookies are strictly necessary for the operation and security of the Platform and cannot be disabled. They enable secure authentication, role-based access, session security, and core telehealth functionality.
- Secure login sessions and authentication
- Role-based access (Provider, Admin, Client)
- Session security, timeout management, and fraud prevention
- CSRF protection and secure token handling
- Core scheduling and telehealth session connectivity
Essential cookies do not track users for advertising or store marketing profiles.
Performance / Analytics Cookies (Optional)
Inactive by DefaultThese cookies help us understand how users interact with our public website so we can improve usability and performance. Analytics tools are configured to exclude clinical portals wherever applicable.
- Pages visited and time spent on pages
- Navigation patterns and general device/browser information
- General location at city/state level (where available)
We do not use analytics cookies to collect Protected Health Information (PHI). We do not sell analytics data.
Functional Cookies (Optional)
Inactive by DefaultThese cookies enable enhanced functionality and personalization, such as remembering preferences and supporting optional features.
- Remembering UI preferences (e.g., theme, layout, language)
- Saving non-clinical dashboard preferences
- Supporting accessibility settings
- Enabling feedback tools (where implemented)
Functional cookies are not used to store PHI.
Targeting / Advertising Cookies (Optional)
Inactive by DefaultThese cookies may be used on our public marketing website to measure campaign effectiveness and show relevant Alehra ads on other platforms. They are not used inside clinical portals.
- Measuring marketing effectiveness
- Limiting repeated ad displays
- Showing relevant ads about Alehra on other sites
We do not use PHI for advertising and do not sell health data.
Telehealth & Session Recording Technologies
Alehra may offer telehealth services and features such as ambient transcription or session recording where enabled by an organization’s settings and applicable consent workflows.
- Recordings are not stored in browser cookies.
- Recordings (when enabled) are stored securely in encrypted environments.
- Access is restricted using role-based permissions and audit controls.
HIPAA & Security Practices
We implement safeguards aligned with HIPAA requirements, including encryption, role-based access control, session protections, and audit logging. Cookies used in secure portal environments are limited to what is required for security and core functionality.
- Encryption in transit (TLS 1.2+)
- Encryption at rest (where applicable)
- Role-based access control and least-privilege permissions
- Automatic session expiration
- Audit logging for key access events
- Business Associate Agreements (BAAs) with vendors where required
Managing Your Cookie Preferences
You can manage cookie preferences using our cookie banner (where available) or through your browser settings. If you disable Essential cookies, you may be unable to sign in or access secure services.
- Use the Cookie Preferences panel on the site (if enabled)
- Adjust browser cookie settings (block, delete, or restrict cookies)
- Use device-level privacy controls where available
Third-Party Services
We may use third-party vendors for hosting, security monitoring, content delivery, and (optional) analytics on public pages. Vendors that may access PHI are required to have appropriate contractual protections, including BAAs where applicable.
Updates to This Policy
We may update this Cookie Policy to reflect changes in technology, regulations, or our services. The updated version will be posted on this page with a revised “Last Updated” date.