Settings

The hosted product exposes personal, organization, brand, integration, and commercial settings according to the signed-in user’s role and the deployed release.

Do not rely on a settings page documented here unless it is visible in the current product. In particular, these docs do not promise two-factor authentication, account-wide export, session revocation, or a specific account deletion workflow without a corresponding shipped UI.

Provider and social credentials are backend secrets. Never place them in NEXT_PUBLIC_* variables, screenshots, issues, or client-side code.

Suspected security problems must follow the Security Policy .