Privacy Policy: Reflexor
This document describes product behavior. It is not legal advice.
1. Summary
Reflexor is a local-first coding assistant for Windows x64, Linux x64, and macOS Apple Silicon. Chat, completions, project indexes, and conversation history stay on your computer unless you turn on an optional network feature.
By default there is no Reflexor cloud account, prompts and source code are not sent to Reflexor servers, product telemetry is off, and Web Search, Web Research, and MCP stay disabled. Engine and model downloads happen only after you confirm them.
Reflexor is not fully offline in every configuration.
2. What stays local by default
- Chat prompts and model responses through the local engine and the bundled backend on 127.0.0.1
- Workspace files used as context or retrieved through local indexing
- Conversation history, pins, ledger, and virtual context under ~/.reflexor/
- Local indexes and embeddings
- Approvals, plans, and the rollback journal
- Local telemetry files, if you enable telemetry
Open only trusted local folders. Untrusted and virtual workspaces are not supported.
3. What may leave your machine
- Web Search (off by default): sanitized search query text after consent or Settings enablement. Queries do not include code, file contents, absolute paths, or RAG context.
- Web Research (off by default): HTTP(S) request to a URL you approve. Private or localhost URLs need a separate approval.
- Search-provider API keys stored in editor Secret Storage, if you configure them
- MCP tools, only if you enable MCP and connect servers
- Remote Ollama or another non-local inference endpoint, only after you grant consent. Prompts and embeddings then go to that endpoint.
- Confirmed download of the managed local engine or of model weights
Reflexor does not send prompts, source code, or workspaces to Reflexor cloud servers. There is no product telemetry upload.
4. First connection
Startup of the core product talks to localhost only. The first external connection happens after you confirm an engine or model download, allow a web request, grant remote-inference consent, or connect an integration you configured.
5. Local data, export, and deletion
Local product data lives under ~/.reflexor/. Uninstalling the extension does not automatically delete downloaded models, the embedded engine, history, or indexes.
In the Command Palette you can export or delete all conversations, and clear the rollback journal. Automatic deletion of old conversations is available in Settings. Those actions are destructive.
6. Your controls
Disable Web Search, Web Research, telemetry, and MCP in Settings. Set Web Research permission to disabled to hard-block URL fetch. Turning a feature off stops new use. It does not retract data already sent to a third party you allowed.
7. Website
The marketing site is static and does not create accounts. Hosting may keep access logs. Optional website analytics, if enabled, may record page views and store-click events with campaign and editor context. It does not receive source code, prompts, or local model data.
8. Third parties
Ollama, model providers, search providers, MCP servers, GitHub releases, hosting, and the editor process data under their own terms when you use them.