Privacy notice

This notice describes the data paths used by the open beta.

The workflow processes account identity, signed license revisions, source media, prompts, provider outputs, decisions, and release certificates. Account linking uses a verified immutable identity rather than email matching.

Supabase supports web authentication. External clients such as ChatGPT are authorized by Reflections’ own authorization server (Ory Hydra at auth.reflections.ai), which signs you in with the same account. Image and evaluation requests use FAL and OpenRouter; Knowledge uses Zep. Source media, prompts, or documents may be sent to the provider needed for the requested operation.

Licensing storage is private. Temporary download URLs carry access and must not be shared or logged.

Exact abandoned-draft prompts are deleted 30 days after the terminal event; only the prompt digest and non-content metadata remain after that. Exact safety-refusal prompts are deleted after 90 days on the same basis. Released, licensed-refused, held, and withheld prompts remain as licensing evidence and are not deleted on this schedule.

Disconnecting revokes a client connection and its refresh grants. It does not delete issued licenses, approvals, certificates, or unresolved provider records. A deletion request requires a separate reviewed process that identifies what can be erased and what must be retained.

Contact support to request account or data deletion. Signed licenses, releases, certificates, unresolved provider records, and legal holds may require separate handling from removable drafts or source bytes.