Why we ask for access (and why it's safe)
An honest explanation of why Chykalophia needs access to your accounts, what we do with it, and how you stay in control.
At some point during your project, we will ask for access to one or more of your online accounts. This can feel a bit unsettling — handing over access to important systems is a big deal. This guide explains exactly why we ask, what we use it for, and the limits we place on ourselves.
Quick summary
We ask for access only when we genuinely need it to do our work. We use delegate access (an invitation, not your personal password) wherever possible. You stay the owner of every account. We never share your credentials outside our team, and we release access when a project ends.
Why access is necessary
Building and maintaining a website requires working directly inside your systems. There is no way to update your WordPress site, change a DNS record, or configure your hosting plan without being logged in.
We could ask you to make every change yourself, but that would slow your project down significantly and increase the risk of errors. Our job is to handle the technical work so you do not have to.
Here are the most common reasons we ask for access:
| What we need access to | Why |
|---|---|
| WordPress dashboard | To build pages, install plugins, configure settings |
| Hosting control panel | To manage server settings, create staging sites, run backups |
| Domain registrar | To point your domain to the right server |
| Google Analytics / Search Console | To review performance data and set up tracking |
| Email / Google Workspace | To set up DNS records, configure mailboxes |
| E-commerce platforms | To set up products, payments, and shipping |
You stay in control
Granting us access does not transfer ownership of anything. You are always the account owner.
Here is what that means in practice:
- You can remove our access at any time. We will show you how in How to revoke our access later.
- You can see everything we do in most platforms, because actions are logged.
- We will never change your billing details, add payment methods, or transfer ownership of your accounts.
What we never do
Our firm limits
We will never ask for access to your personal bank account, payment card details, or social security number. We will never ask you to transfer account ownership to us. If someone claiming to be from Chykalophia asks for any of these, contact us directly at support@chykalophia.com before doing anything.
Our access policy:
- We only ask for the minimum access needed to complete the work.
- We use invite-based access (a separate login) rather than your personal password whenever the platform supports it.
- We do not share your credentials with third parties. Internally, they are stored in an encrypted password manager accessible only to our team.
- We release access at the end of a project unless you have an ongoing care plan.
How we ask for access
When we need access, we will send you a clear, specific request — usually via ClickUp or email. That request will tell you:
- What platform or account we need access to.
- What role or permission level we need.
- Why we need it and what we plan to do.
If we ever ask for something that is not on this list, or if a request feels unclear, please ask us. We are happy to explain.
The difference between access and ownership
It helps to think of access like a key to your office. A key lets someone in so they can do their job. It does not make them the owner of the building.
We use the key to do the work. The building — your website, your accounts, your data — is always yours.
Common questions
Related guides
- How we keep your logins safe
- Delegate access vs. sharing a password
- Access checklist for a new project
- How to revoke our access later
- Sharing passwords safely
Need a hand?
If you have questions about any access request, email support@chykalophia.com and we will walk you through it. Include your website address and a description of what you are unsure about.
Giving Chykalophia access → start here
A practical guide to granting Chykalophia secure access to your website, hosting, and online accounts — so we can do our best work for you.
How we keep your logins safe
Our strict internal security practices for handling, storing, and eventually removing your sensitive credentials.