Privacy Policy

Effective date: October 5, 2026

This Privacy Policy (this "Policy") is issued by Quad IO ("Quad IO," "we," "us," or "our") and applies to the Burton brand of operating systems, applications, and hardware, including Burton OS and Burton Circle (collectively, the "Products"), any on-premises or managed-hardware services we provide in connection with the Products (the "Services"), and the public website located at burton.work (the "Site").

This Policy is intended to state, in operational terms, the commitments described on About Burton. It is not a substitute for a customer agreement, and it does not grant any license to the Products.

If you do not agree with this Policy, do not use the Site, the Products, or the Services.

1. Who we are

Quad IO designs, deploys, and, where engaged to do so, manages secure systems for businesses, families, and individuals. Our commercial model is self-hosted use at no product license fee, or managed deployment for a fee. In either case, the arrangement concerns who provisions and maintains the hardware, not who owns the data processed on that hardware.

Questions about this Policy may be directed to hello@quad.io.

2. Scope; defined terms

"Customer Data" means information that is stored, processed, or generated on systems you operate or that we operate on your premises or at your direction, including knowledge bases, files, household or circle application data, credentials you control, and cryptographic keys.

"Personal Information" means information that identifies, relates to, describes, or could reasonably be linked to an identifiable individual.

This Policy distinguishes between (a) Customer Data residing in the Products and Services, and (b) limited Personal Information you elect to send us through the Site.

3. Customer Data in the Products and Services

The Products are designed so that Quad IO does not need a dossier, account graph, or copy of your records in order for the software to function. Privacy is the default operating condition of the system, not an optional configuration.

With respect to Customer Data:

We do not store Customer Data for our own independent purposes, and we do not sell Customer Data.
We do not use Customer Data to train our models.
We do not require a Quad IO cloud account as a condition of using the Products.
Cryptographic keys and the corpus remain under your control. We do not retain a copy of the corpus, address book, or household applications for our own use.
Authentication is designed on a zero-trust basis: sessions and devices must prove themselves. Presence on a local network is not, by itself, authorization.
The Products are written to operate locally. We do not impose an advertising-supported runtime, and we do not include undisclosed background functions whose purpose is to construct a marketing or training profile.

Self-hosted deployments run on hardware you supply. Managed deployments may involve hardware we place and look after in your home or office. Managed deployment does not transfer ownership of Customer Data to Quad IO. Physical or operational access undertaken to perform the Services is for the purpose of maintaining the system at your direction, not for appropriating, monetizing, or training on Customer Data.

Where Burton Circle or similar household software is deployed, circle and family data is intended to remain on the host you operate or on an appliance we manage for you. We do not collect Personal Information from you in order to "set up" a circle in a Quad IO-hosted identity directory.

4. The Site

The Site is a company information property. It is not an account portal, identity provider, or consumer cloud service. Merely browsing the Site does not create a Burton or Quad IO account and does not enroll you in the Products.

We do not use the Site to assemble address books, advertising segments, or personal dossiers. We do not sell Site data.

4.1 Information you submit

If you use the Contact Us facility on the Site, you choose to transmit the name, email address, and message you enter, together with any other content you include, to hello@quad.io so that we may read the message and, where appropriate, respond. We do not sell those communications, and we do not use them to provision a Product account.

Submission is voluntary. If you do not wish to provide that information, do not use the form; you may instead write to hello@quad.io by your own mail client.

Delivery of form submissions is effected by a third-party transmission service that emails the contents to us. That service processes the submission solely to complete delivery. We do not authorize it to sell your message or to use it for advertising.

4.2 Technical data

Hosting and web-server infrastructure may record ordinary request metadata in the course of operating, securing, and diagnosing the Site. Such metadata may include Internet protocol address, date and time, requested URL, referrer, and user-agent. We do not sell that data and we do not use it to build advertising or training profiles.

Appearance preferences (for example, color scheme) may be stored locally in your browser. That information remains on your device and is not transmitted to us as a condition of browsing.

We do not use the Site to serve third-party advertising, and we do not require you to accept advertising cookies in order to read the Site.

5. Purposes of processing

We process Personal Information only as follows:

Customer Data, if at all, solely to provide, maintain, or restore the Products or Services at your direction, and not for sale, advertising, or model training.
Correspondence you send, including Contact Us submissions, to understand your inquiry and to reply.
Technical Site logs, to operate, secure, and diagnose the Site.

We do not process Personal Information to sell it, to license it for advertising, or to train models.

We do not sell Personal Information or Customer Data.

We may disclose information if we believe in good faith that disclosure is required by law, lawful process, or to protect the rights, property, or safety of Quad IO, our customers, or the public. We may also share information with service providers who process it solely on our behalf and under instructions consistent with this Policy (including the email-delivery service described in Section 4.1).

If we are involved in a reorganization, sale of assets, or similar transaction, this Policy would continue to apply to Customer Data and Personal Information to the extent those assets include either, subject to any successor's lawful obligations.

7. Retention

Customer Data is retained on systems you control, or on managed hardware deployed for you, according to your own retention practices. We do not operate a separate Quad IO archive of that Customer Data for our own purposes.

Correspondence sent to hello@quad.io is retained only as long as needed to handle the inquiry and for ordinary business, security, and legal-hold records. Technical logs are retained only as long as reasonably necessary for operation, security, and diagnosis.

8. Security

We design the Products around local operation, encryption of valuable data on systems you control, and zero-trust session and device authentication. No method of transmission or storage is perfectly secure. You remain responsible for controlling keys, access, and physical security of hardware you own; where we manage hardware, we do so as a service provider, not as owner of the data on that hardware.

9. Children

The Products may be used in a household or trusted circle. We do not knowingly collect Personal Information from children through the Site. The Products are designed so that household and circle data remains on the customer's systems rather than in a Quad IO cloud directory.

10. Your choices and requests

Because we do not require a cloud account to use the Products, there is no Quad IO consumer account from which to "download" Product Customer Data; that data remains on your systems.

For Personal Information we hold because you wrote to us, you may request access, correction, or deletion by emailing hello@quad.io. We will consider such requests in accordance with applicable law. You may also refrain from using the Contact Us form.

Depending on your jurisdiction, you may have additional rights with respect to Personal Information. We will not discriminate against you for exercising rights that the law affords you.

11. International visitors

The Site is operated from the United States. If you submit information through the Site, it will be processed in the United States and may be handled by the transmission service described in Section 4.1. Customer Data in self-hosted or on-premises managed deployments remains on the systems where you (or we, at your direction) have placed the hardware.

12. Changes

We may revise this Policy from time to time. The effective date at the top of this page will change when we do. Material changes will be reflected on this page. Continued use of the Site after a revision constitutes acceptance of the revised Policy. Product and Service commitments concerning Customer Data will not be narrowed through a Site-only posting where a separate written customer agreement applies; in the event of conflict, the customer agreement controls as to that engagement.

13. Contact

Quad IO
Email: hello@quad.io
Site: burton.work

For Product descriptions, see Burton OS and About Burton.