Last updated October 20, 2026.
- Who we are
- VizTopo is a service of zbackroom LLC. Questions or requests about your data: contact@zbackroom.com.
- Your account
- Your name, email address and a password hash (Argon2). We never store your password itself. Codes we email to confirm your address or reset your password are stored only as a hash, and expire in 10 minutes.
- Email
- We send account emails (sign-up and password-reset codes) through Resend. No newsletters unless you ask.
- Sign-in
- One session cookie, needed to keep you signed in. No advertising or tracking cookies, and no third-party analytics.
- Provider credentials
- AWS access keys and Proxmox API tokens you add are encrypted with AES-256-GCM before they're stored. They're used only by VizTopo's server to talk to your provider, are never sent to your browser, and never appear in logs.
- Inventory
- What VizTopo reads from your providers (resources, their settings, metrics, prices and costs), so it can draw and price them.
- Audit log
- A record of what was done in your workspace, by whom and when. It never contains what you type in a console or your credentials.
- Consoles
- When you open a console inside VizTopo, what you type and see passes through VizTopo's server to your box and isn't stored. A password or key you type to sign in over SSH is used for that connection only, and is never stored or logged. We keep the SSH host key fingerprints you choose to trust.
- Payments
- Paid plans are billed through Square. You type your card into Square's own form, so the number goes to Square directly; we keep only the identifiers Square gives back and the card's brand, last four digits and expiry. Square emails your receipts.
- Hosting
- The service runs on Amazon Web Services in the United States (Oregon).
- Sharing
- We don't sell your data or share it with anyone, except the providers that run the service (hosting, email and payments).
- Leaving
- Remove a connection and its credentials are deleted. Ask us at contact@zbackroom.com to close your account and we delete it and its workspaces.