Privacy policy

How Reflectiv handles your information.

Effective September 24, 2026 · Source Labs LLC

Reflectiv is a desktop AI workspace operated by Source Labs LLC. This policy covers the Reflectiv app, reflectiv.to, and our sign-in service at auth.reflectiv.to.

Information on your device

The desktop app stores conversations, bot instructions, settings, and original uploaded files on your Mac. Connection credentials and API keys saved by the app are encrypted using the operating system’s secure storage. Conversation and workspace files are not separately encrypted by Reflectiv; protect your Mac and its backups accordingly.

AI providers and connected apps

When you send a message, relevant conversation content, instructions, attachments, and tool results may be sent to your selected AI provider, such as OpenAI or Anthropic. When you use a connected app, Reflectiv sends the information needed for the requested operation to that service. Retrieved information may become part of your conversation and subsequent AI requests. These providers process information under their own terms and privacy policies.

File Analysis copies relevant conversation files to an E2B cloud sandbox for processing. Browser tools contact the sites you ask them to use. Image generation sends prompts and relevant inputs to the image provider. Local storage does not mean these features work offline.

Sign-in service

Some connections use our hosted authentication service. It processes temporary sign-in sessions, browser cookies, authorization codes, and, where required, access and refresh tokens to complete authorization or token renewal. Pending sign-in sessions expire after ten minutes or on service restart. Some token-refresh results are retained briefly to make retries safe. The desktop stores the resulting connection credentials.

Website and early access

If you request early access or contact us by email, we receive the contact details and message you choose to send. We use them to respond, manage access, and support the product. Our hosting providers may process technical request information, such as IP addresses and access logs, to deliver and secure the website and authentication service. This website does not include advertising trackers or third-party analytics scripts.

Early-access forms send your email address and optional message to Formspree, which stores submissions for us and helps filter spam. Formspree may process technical information to deliver and protect this service. We use these submissions to manage early access and contact you about your request. You can ask us to remove your request by emailing us.

How information is used and shared

We use information to provide requested features, manage connections, respond to support requests, and maintain service security. We share data with the service providers necessary for those purposes, with connected services you choose to use, and where required by law. We do not sell personal information or use your conversations for advertising.

Retention and your choices

You can delete conversations and disconnect integrations in Reflectiv. Disconnecting removes the app’s local connection access; you can also revoke authorization in the provider’s account settings. Files, backups, and copies held by external providers may need to be deleted separately. Uninstalling the app may leave its application data on your Mac. Contact us for help locating or removing it.

We retain support and early-access correspondence for as long as needed to respond and manage the relationship, subject to applicable recordkeeping requirements. You may request access, correction, or deletion of personal information we hold by contacting us. Depending on where you live, additional privacy rights may apply.

International processing and security

Our service providers and connected apps may process information in countries other than your own. We use encrypted connections and access controls, but no system can guarantee absolute security. Do not provide credentials or confidential information that you are not authorized to share.

Children and policy changes

Reflectiv is intended for adults using it for business or professional work. It is not directed to children under 13. We may update this policy as the product changes and will update the effective date on this page.

Contact

For privacy requests, email andrei@sourcelabs.io. Reflectiv is a product of Source Labs LLC.