Five things we don't do.

Credentials are stored through your OS keychain, not in Zolt plaintext config.

Remote access is designed around SSH and TLS, with no plaintext remote database sessions in production builds.

Team sharing uses age encryption to X25519 recipients. The sync server cannot decrypt shared payloads.

Desktop telemetry is off. License checks carry status only, not database content.

AI is BYOK on every tier. Zolt does not proxy or store your prompts, responses, or provider keys.