Privacy policy

What reflo is

reflo is a subscription web app you sign in to with your X account. It reads the posts you have bookmarked on X, stores them, and lets you ask questions about them. reflo never posts, likes, follows, or changes anything on your X account. This policy explains what we collect, why, and how you can see it or have it deleted.

What we collect

• Your X profile: your account id, handle, name, avatar, bio, follower counts, and verified status.
• Your email address, if X provides one when you sign in, or the one you enter when you pay.
• The posts you have bookmarked on X: their text, images, videos and links, the pages behind those links, and the threads and quoted posts they belong to, plus what reflo reads inside them.
• The questions you ask reflo and the answers it gives you.
• What you send us inside the app, such as feedback notes and requests.
• Billing status: your plan, key dates, and your Dodo Payments customer and subscription ids. We never see or store your card number.
• Standard server logs, such as request times and error traces, for keeping the service running.
• Product analytics: which pages, sections and buttons are used, page speed, errors in the app, and which link first brought you to reflo, linked to your account id once you sign in. Never your saves, your questions or your email.

How we use it

We use your saves, and what reflo reads inside them, to answer the questions you ask. We use your email for account and billing notices, a welcome note, a reading receipt, and occasional product emails you can unsubscribe from. Our email service tells us whether an email was delivered, opened or clicked. We use product analytics to see which parts of reflo work and where it breaks. We don’t use your data for advertising, and we don’t sell it to anyone.

Who processes it for us

We use a short list of third-party services to run reflo. Each one gets only what it needs to do its job.

• Hosting, database and operations services store your data and run the website and the app.
• Dodo Payments is our merchant of record for billing. They process your card and collect and remit any taxes due; we never see or store your card number.
• Third-party AI services read your saves and help write your answers. They receive the content of your saves (text, images, the audio of videos, and the pages behind links) and the questions you ask. We never send them your X credentials.
• An email service sends our emails to you.
• The X API is how we read your bookmarks.

Where it is stored

Your data is stored on servers run by our hosting and database services.

How long we keep it, and how to delete it

Your data stays for as long as your account exists. To delete your account, email support@reflo.tech from the address on your account, and we delete it promptly. Deletion removes your profile, your saves and what reflo read inside them, your questions and answers, your X tokens, the feedback and requests you sent us in the app, and our record of the emails we sent you. Product analytics keep only your account id, which no longer leads to anyone once the account is gone. Billing records are kept as tax law requires.

If reflo ever loses its access to the X API, we delete your X data within 10 business days regardless. You can also stop reflo from syncing at any time by revoking its access in your X settings (Settings > Security and account access > Apps and sessions); that stops all syncing immediately, though it doesn’t delete what we’ve already stored, email us for that.

Your rights

You can ask us to let you access, correct, or delete your data, and you can complain to your local data protection authority. For anything, email support@reflo.tech. We answer within 30 days, usually within a day or two.

Cookies and local storage

reflo keeps you signed in with a session cookie and stores a few preferences in your browser. It also keeps a first-visit note in your browser’s storage that remembers which link brought you here, kept for 90 days, and once you sign in, your account id for product analytics. We don’t use advertising cookies, and we don’t run third-party advertising trackers.

Children

reflo is for people 18 or older, or the age of majority where you live. We don’t knowingly collect data from anyone younger.

Changes

If we change this policy, we post the new version here with a new date. For material changes, we also email you.

Contact

Questions about this policy: support@reflo.tech. reflo is built and operated by Rajat Gulati, based in India. See also the terms of service and the refund policy.