Skip to content
ModelQuad

Privacy

This page describes what ModelQuad actually does with your data in the current beta. It is written to match the product's behavior, not the other way around.

Local-first boundary

Your code and prompts stay local by default. ModelQuad runs on your machine. In this release, it makes no ModelQuad-owned network calls at all.

Your credentials are never uploaded to ModelQuad — there is no ModelQuad cloud.

Local execution history on your device records worker runs at full fidelity so you can inspect what happened. Because this history captures actual execution traces, it may contain code excerpts and task details. This data never leaves your machine, is stored locally on your device, and you can delete it at any time.

Telemetry

Telemetry is off by default. Even when enabled, it is recorded only to a local file on your device today — no network transmission exists in this product.

Telemetry data categories collected locally versus never collected
Collected (locally only, when enabled)Never collected
Coarse task metadata: task type, provider name, model name, and task durationPrompts and source code
Semantic outcome status of a taskFile contents and full filesystem paths
Coarse quota bucket (for example "high" or "low")Secrets and API tokens
Host identifier, invocation mode, and expected consumption bucketPersonal identity — there is no account to tie data to

ModelQuad vs provider boundary

Work you hand to an AI agent goes through that provider's own tool on your machine, under that provider's terms.

When ModelQuad routes a task to Claude Code, Codex, or Antigravity, the request is executed directly through that provider's CLI or local integration on your system using your existing authentication. ModelQuad does not proxy, inspect, or store your third-party provider traffic on remote servers.

Local-Only mode

For strict environments or air-gapped workflows, ModelQuad offers a Local-Only mode. When enabled, any attempted ModelQuad-owned outbound network call is refused at the network policy gate. Routing decisions and delegation to the AI tools installed on your machine keep working normally.

Contact

A dedicated support address is being set up for the public beta. Beta testers receive a direct contact when they join.

This beta policy is pending legal review and may be updated.