Your real FTP login lives in SyncNow's cloud vault, and nothing else holds the full secret.
When you add a project, SyncNow needs your FTP host, username and password so it can watch your site. The authoritative copy of those credentials stays server-side in the vault, where the cloud executor uses them to do the real FTP work. They never leave the vault.
On your own PC, a copy of the password may be kept so the app can reconnect, but it is encrypted with Windows DPAPI and tied to your Windows user account, not saved in plain text.
What about an AI assistant?
An assistant never receives your real FTP password. It works through SyncNow's local proxy using a one-time key, while the vaulted credentials stay in the cloud. So your password is not sitting in a file or pasted into a chat: it is vaulted in the cloud and DPAPI-protected on disk.