Account management

Everything that touches your account itself, profile, sign-in, data rights, deletion, and (for Marketplace) white-label branding, lives at /dashboard/settings. This page is the reference for what each control does.

What's in your CiteFlow profile?

• Email, your login email. Immutable because authentication is via magic link; changing it would require re-verifying ownership via the new address. If you need to change your login email, email support@citeflow.co.uk from the existing address.
• Name, display name used in the dashboard chrome and on out-going notification emails.
• Notification email override, see scheduling. Set this when the editor who reviews drafts is a different person from the account owner.

How does authentication work?

CiteFlow uses passwordless magic-link sign-in.

• Enter your email at /login. We send a one-time link.
• Click the link within 60 minutes to sign in.
• Sessions persist for 30 days unless you sign out manually.
• Sign out is available from the user menu in the dashboard header. It clears the session on this device only.

No password to remember, no password to leak. If your email is compromised, an attacker could in principle request a magic link, secure your email account with MFA accordingly.

Data subject rights (UK GDPR)

CiteFlow is a UK-based data controller and operates under UK GDPR. You have the following rights, all of which are self-serve from the account settings page where possible:

How do you export your data?

The Download my data button generates a single JSON document containing every row across the customer-facing tables that belongs to your user ID:

• Profile and subscription history.
• Sites, audits, findings, page-level data.
• Knowledge base versions.
• Articles, topics, hero image URLs.
• Tracked keywords and rankings.
• AI citation queries and results.
• Publishing endpoints (credentials redacted, API keys, tokens, passwords are replaced with [REDACTED]).
• Publishing log entries.

The export is synchronous, for typical accounts it completes in a few seconds and downloads directly. Very large Marketplace accounts may take longer; the button stays active until the file is ready.

How do you delete your account?

Click Delete my account to start the deletion flow.

1. A confirmation modal asks you to type DELETE to confirm.
2. On confirmation, your account enters a 30-day grace period.
3. We email you immediately with a cancel link in case the deletion was a mistake.
4. During the grace period:
   • You can sign back in normally, sign-in automatically cancels the pending deletion.
   • You can also click the cancel link in the email at any time.
   • Billing is paused and content generation stops.
5. After 30 days, a daily cron permanently deletes your data. This is irreversible, backups are rotated within the retention window so we can't recover deleted accounts after this point.

Hard delete removes rows from every customer-scoped table and revokes the auth identity. Aggregated, anonymised usage stats may persist for billing reconciliation as permitted under UK GDPR.

How does Marketplace branding work?

If you're on the Marketplace tier, the branding editor is enabled.

• Logo URL, https://... URL to a hosted image. PNG or SVG recommended. Max URL length 1,000 characters.
• Accent colour, accepts either hex (#3b82f6, #3b82f6ff) or oklch(L C H) CSS notation. We validate at the server boundary so arbitrary CSS can't be injected.
• Display name, replaces "CiteFlow" in the dashboard chrome.
• Reset to defaults, restores the CiteFlow visual identity.

Branding is cosmetic only. Transactional emails, system notifications, the legal pages, and the admin tooling stay CiteFlow-branded so end-users always know who the underlying processor is.

On Standard and Enhanced tiers the editor is visible but read-only, upgrading unlocks edit access. See marketplace tier.

Can multiple users share one account?

Currently each CiteFlow account has a single login. Multi-user team accounts with role-based permissions are on the product roadmap. In the interim, teams typically use a shared inbox alias (e.g. content@yourcompany.com) or rotate the notification email override between team members.

Related

• Billing, subscription cancellation versus account deletion
• Auto-scheduling, notification email override
• Marketplace tier, when branding becomes editable