How to revoke our access later

At Chykalophia, we believe a true strategic partnership means putting your security first. When our project engagement concludes—and if you are not moving into an ongoing Growth Partnership or Website Care plan—it is best practice to revoke our access to your systems.

Quick summary

Because we request delegate access (where you invite support@chykalophia.com as a user), removing us is incredibly easy. You maintain complete ownership of your accounts and can simply click "Remove User" or "Delete" next to our name in your various dashboards.

The offboarding access checklist

Beginner 5 minutes

When our work is complete, our team securely deletes any stored project credentials from our encrypted internal password manager.

However, it is always the account owner's (your) responsibility to revoke the active invitations. Use this checklist to ensure you've closed all the doors:

1. Your Website Backend

WordPress: Go to Users → All Users. Hover over the Chykalophia account and click Delete. (If prompted, attribute any content we created to your own admin account).
Webflow / Squarespace / Shopify: Go to your Workspace or Settings, find the Users/Permissions tab, and remove our collaborator seat.

2. Your Hosting Environment

WP Engine, Flywheel, Kinsta, etc.: Log in to your hosting dashboard, navigate to Company Settings or Users, and delete the support@chykalophia.com user.

3. Your Domain & DNS

GoDaddy, Namecheap, Cloudflare: Go to your account settings or "Delegate Access" area and remove our authorization to manage your DNS records.

4. Google Tools & Analytics

Google Analytics: Go to Admin → Property Access Management, select our email, and remove access.
Google Search Console & Tag Manager: Go to User Management in both tools and remove our permissions.

5. Third-Party Integrations

Did you invite us to your Stripe, Mailchimp, or CRM? Check the user settings in those platforms and revoke the permissions.

What if I shared a raw password with you?

If a platform didn't support delegate access and you had to share a raw password securely with us, we will delete that password from our secure vault at the end of the project.

However, as a matter of standard digital security hygiene, you should log into that platform and change your password once the project is over.

Staying on for Website Care?

If you are transitioning into our Website Care plan or a Growth Partnership retainer, do not revoke our access! We will need continued access to your WordPress dashboard, hosting, and DNS to run proactive updates, monitor security, and execute ongoing strategic improvements.