Strongroom is a product of Zyntlow, a software development company (“Zyntlow”, “we”, “us”). This policy explains what we collect when you use strongroom.zyntlow.com and the workspaces under it, why, and what choices you have. If anything here is unclear, ask us through zyntlow.com/contact.
The short version
- We cannot read your vault. Passwords, 2FA secrets and vault notes are encrypted in your browser before they reach us.
- We keep the rest of your workspace (clients, statuses, pages, transcripts) so your team can use it.
- Each workspace has its own separate database.
- We do not sell your data, and we do not use it to advertise to you.
What we can never see
Your master password never leaves your browser. It is used there to create the keys that lock your vault, and only encrypted data is sent to us. That means we cannot see your passwords, 2FA secrets or vault notes, and we cannot recover them if you forget your master password.
What we collect
Account details
Your name, work email address, role, and a hashed sign-in proof derived from your master password (not the password itself). If you turn on two-factor sign-in, we store what is needed to check your codes.
Workspace content
The workspace name and address, your clients and their status updates, notebook pages, uploaded files and call transcripts, comments and @mentions, and encrypted vault items we cannot open.
Activity
An activity and access log inside your workspace (for example, who revealed or copied a vault item, and when), so your admins can see what happened. We also keep standard server logs, such as IP address, browser and time of request, to keep the service secure and working.
Billing
Payments are handled by Paystack. We receive the plan, the amount, the payment status and a reference. We do not receive or store your full card number or mobile money PIN.
Connections and Adams
If you connect Google Drive, Strongroom reads the files in the folder you choose (such as “Client Calls”) to file transcripts under the right client. If you set up an any-app webhook, we receive what your tool sends us.
Adams, the AI assistant, answers with either its built-in model, hosted by NVIDIA, or the provider you choose (for example Anthropic, OpenAI or Google) with your own API key. When you ask Adams a question, the workspace content it needs to answer is sent to that provider: NVIDIA for the built-in model, or your own provider under your agreement with them. Adams never sees vault contents.
Why we use it
- To run Strongroom for you and your team.
- To send the emails and notifications the product needs, such as your workspace address, invitations and alerts you have turned on.
- To bill paid plans.
- To keep the service secure, prevent abuse and fix problems.
Where it is stored
Your workspace is stored on servers we operate or rent, in a database that belongs to your workspace alone. The people and providers who help us run the service (hosting, email delivery and Paystack for payments) only receive what they need to do that job.
How long we keep it
We keep your workspace for as long as it exists. Items you delete go to the trash first and can be restored until they are removed from it. If you ask us to close your workspace, we delete its database, apart from records we must keep for legal or accounting reasons.
Your choices and rights
You can see and change your details in your workspace, and ask us for a copy of, or to correct or delete, personal data we hold about you. If your workspace belongs to an agency, its admins control most of what is stored, so you may want to speak to them first. Contact us through zyntlow.com/contact for anything else.
Cookies
We use the cookies needed to keep you signed in and secure. We do not use advertising cookies. Your colour theme and last workspace address are remembered in your own browser’s storage.
Changes
If we change this policy in a way that matters, we will update the date at the top and tell workspace admins before it takes effect.