Secure your Tartol account

Security basics

• Use a unique account password and protect the email account used to sign in.
• Review active sessions and sign out devices you no longer recognize.
• Use individual teammate accounts instead of sharing one login.
• Give each integration its own expiring credential and minimum scopes.
• Revoke credentials immediately when a client, device, or teammate is no longer trusted.

Where to manage security

Open Settings > Security for account and session controls. Open Settings > Integrations for API keys and OAuth connections. Workspace owners should also review Team roles and pending invitations. Tartol verifies a healthy browser session with a read-only check and refreshes the rotating token only when the server explicitly reports that it has expired. Temporary database or authentication-provider outages keep the current session recoverable instead of repeatedly rotating tokens or silently signing the user out.

Exports and account lifecycle

Data export, account deletion, workspace deletion, billing changes, and similar sensitive controls may require a direct authenticated UI flow or extra verification. Complete them only when you understand the impact. To delete your account, open Settings > Security, scroll to Delete account, enter DELETE MY ACCOUNT, request the confirmation email, and follow its link. Nothing is disabled until you confirm. To request deletion only of data received through a Meta connection, follow the public instructions at /data-deletion or email privacy@tartol.com from your Tartol account email.