Chykalophia Docs
Giving Chykalophia access

Why we ask for access (and why it's safe)

An honest explanation of why Chykalophia needs access to your accounts, what we do with it, and how you stay in control.

accesssecuritygetting-startedbeginner

At some point during your project, we will ask for access to one or more of your online accounts. This can feel a bit unsettling — handing over access to important systems is a big deal. This guide explains exactly why we ask, what we use it for, and the limits we place on ourselves.

Quick summary

We ask for access only when we genuinely need it to do our work. We use delegate access (an invitation, not your personal password) wherever possible. You stay the owner of every account. We never share your credentials outside our team, and we release access when a project ends.

Why access is necessary

Building and maintaining a website requires working directly inside your systems. There is no way to update your WordPress site, change a DNS record, or configure your hosting plan without being logged in.

We could ask you to make every change yourself, but that would slow your project down significantly and increase the risk of errors. Our job is to handle the technical work so you do not have to.

Here are the most common reasons we ask for access:

What we need access toWhy
WordPress dashboardTo build pages, install plugins, configure settings
Hosting control panelTo manage server settings, create staging sites, run backups
Domain registrarTo point your domain to the right server
Google Analytics / Search ConsoleTo review performance data and set up tracking
Email / Google WorkspaceTo set up DNS records, configure mailboxes
E-commerce platformsTo set up products, payments, and shipping

You stay in control

Granting us access does not transfer ownership of anything. You are always the account owner.

Here is what that means in practice:

  • You can remove our access at any time. We will show you how in How to revoke our access later.
  • You can see everything we do in most platforms, because actions are logged.
  • We will never change your billing details, add payment methods, or transfer ownership of your accounts.

What we never do

Our firm limits

We will never ask for access to your personal bank account, payment card details, or social security number. We will never ask you to transfer account ownership to us. If someone claiming to be from Chykalophia asks for any of these, contact us directly at support@chykalophia.com before doing anything.

Our access policy:

  • We only ask for the minimum access needed to complete the work.
  • We use invite-based access (a separate login) rather than your personal password whenever the platform supports it.
  • We do not share your credentials with third parties. Internally, they are stored in an encrypted password manager accessible only to our team.
  • We release access at the end of a project unless you have an ongoing care plan.

How we ask for access

When we need access, we will send you a clear, specific request — usually via ClickUp or email. That request will tell you:

  1. What platform or account we need access to.
  2. What role or permission level we need.
  3. Why we need it and what we plan to do.

If we ever ask for something that is not on this list, or if a request feels unclear, please ask us. We are happy to explain.

The difference between access and ownership

It helps to think of access like a key to your office. A key lets someone in so they can do their job. It does not make them the owner of the building.

We use the key to do the work. The building — your website, your accounts, your data — is always yours.

Common questions

Need a hand?

If you have questions about any access request, email support@chykalophia.com and we will walk you through it. Include your website address and a description of what you are unsure about.