Privacy Policy - Reflexor

Last updated: 2026-08-15

Applies to: Reflexor extension 0.3.0 (preview, release channel)

Summary

Reflexor is local-first on Windows x64, Linux x64, and macOS Apple Silicon (darwin-arm64) for VS Code and Cursor. Chat, code, and history stay on your computer unless you use web features.

Web Search and Web Research are off by default:

• No DNS, search, or page fetch runs without explicit consent.
• On the first explicit web request, Reflexor shows the sanitized query and offers Allow once / Allow for this session / Cancel.
• Persistent enable is available only in Settings or through /web-search-config enable.
• Search queries do not include code, file contents, absolute paths, or RAG context.
• Private and localhost addresses need separate approval.
• Product telemetry and MCP are off by default.

What stays local by default

• Prompts, model responses, and workspace code used as context / RAG
• Local history, indexes, approvals, plans, and rollback journal in ~/.reflexor

What may leave your machine

• Web Search queries and URLs approved for Web Research
• Third-party API keys in VS Code SecretStorage, if configured
• Authorized MCP tools and a managed local-engine download after confirmation

We do not send prompts, source code, or workspaces to Reflexor cloud servers. There is no product telemetry upload.

This website

The marketing site is static and does not create accounts. Hosting may keep access logs. Optional analytics may record page views and store clicks with campaign and editor context, but it does not receive code, prompts, or local model data.

Your controls

Disable web search/research in Settings, clear local data through Reflexor commands, or uninstall the extension. Downloaded models are not removed automatically.

Contact

contato@reflexor.com.br

This document describes product transparency and is not legal advice.

Regional variant for Australia.