Account

Your name and password are edited under Settings. The account email remains the billing identity used to match a Lemon Squeezy license. Passwords require at least 8 characters; use a password manager and a unique password, since your account holds your client research.

Passwords are stored as modern hashes, never plain text. Your own API keys and license data use authenticated AES-256-GCM encryption at rest. The extension authenticates with a personal bearer token that is stored server-side only as a keyed hash and can be rotated anytime. API keys never leave the server.

Saved businesses can be deleted from the businesses page, which removes their captured data. Whole-account deletion is a support request; the data deletion page lists exactly what gets removed.

Licenses are per person. Sharing one account across a team breaks the terms and also mixes everyone's saved businesses into one pile. If you need team seats before they exist as a feature, contact us and we will find something workable.