Privacy Policy - Reflexor
Last updated: 2026-08-12
Applies to: Reflexor extension {{PRODUCT_VERSION}} (pre-release)

Summary
Reflexor is local-first on Windows x64, Linux x64, and macOS Apple Silicon (darwin-arm64): chat, code, and history stay on your computer (embedded local engine + bundled backend), except when you use web features.

Web Search and Web Research are off by default:
- No DNS, search, or page fetch runs without explicit consent.
- On the first explicit web request (/search, web intent, pasted URL, etc.), Reflexor shows the sanitized query and offers Allow once / Allow for this session / Cancel.
- Persistent enable is only via Settings (reflexor.webSearch.enabled / reflexor.webResearchEnabled) or /web-search-config enable.
- Search queries do not include code, file contents, absolute paths, or RAG context.
- Private/localhost URLs need a separate approval flow.
- Product telemetry: off by default.
- MCP: off by default.

What stays local by default
- Prompts and model responses (local engine)
- Workspace code used as context / RAG
- Local history and indexes (~/.reflexor)
- Approvals, plans, and rollback journal

What may leave your machine
- Web Search (default off): search query text to the configured provider after consent
- Web Research (default off; permission ask): URLs you approve
- Third-party API keys (VS Code SecretStorage), if configured
- MCP (opt-in)
- Optional managed local engine download (confirmation required)

We do not send prompts, source code, or workspaces to Reflexor cloud servers. There is no product telemetry upload.

First external connection
Happens when a web search or approved URL fetch runs - not during idle core startup (localhost backend/local engine), unless you confirm the embedded engine download.

This website
The marketing site is static and does not create accounts. Hosting may keep access logs.

Your controls
Disable web search/research in extension Settings, clear local data via Reflexor commands, or uninstall the extension (downloaded models are not removed automatically).

Contact
contato@reflexor.com.br

This document is for product transparency. It is not legal advice.
