> ## Documentation Index
> Fetch the complete documentation index at: https://docs.setor.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Account Security: Protect Your Setor AI Account

> How to keep your Setor AI account secure — strong credentials, Instagram connection hygiene, and what to do if you suspect unauthorized access.

Your Setor AI account controls access to your Instagram DM automation, your leads' conversation data, and your calendar bookings. Keeping it secure protects both your business and your contacts. This page covers the steps you should take to maintain a safe, properly configured account.

<Warning>
  Never share your Setor AI dashboard login or Meta API tokens with third parties. Setor AI staff will never ask for your password.
</Warning>

## Account Credentials

Strong credential hygiene is the first line of defence for your account.

<CardGroup cols={2}>
  <Card title="Use a Strong, Unique Password" icon="lock">
    Create a password used only for [app.setor.ai](https://app.setor.ai) — never reuse passwords from other services.
  </Card>

  <Card title="Restrict Access to Trusted Team Members" icon="users">
    Only share account access with people who genuinely need it. Remove access immediately when someone leaves your team.
  </Card>

  <Card title="Update Credentials After Team Changes" icon="rotate">
    If an authorized team member leaves, change your password immediately to prevent unauthorized access.
  </Card>

  <Card title="Report Suspicious Activity" icon="triangle-exclamation">
    Contact [office@setor.ai](mailto:office@setor.ai) immediately if you suspect your account has been accessed without your knowledge.
  </Card>
</CardGroup>

## Instagram Connection

Setor AI connects to your Instagram account through the official Meta OAuth flow. This is the same authentication mechanism used by all Meta Verified Technology Partners.

* **Your Instagram password is never stored.** Authentication happens entirely through Meta's OAuth 2.0 process — Setor AI only receives an access token, not your credentials.
* **Revoking access stops DMs immediately.** If you disconnect Setor AI from Instagram's connected apps settings (or from Meta Business Manager), the service stops receiving and sending DMs at that moment.
* **Only connect accounts you own or legally control.** Connecting an account you do not have authority over violates both Setor AI's Terms of Service and Meta's Platform Policy.

<Tip>
  To review or revoke connected apps on Instagram, go to **Settings → Security → Apps and Websites** in the Instagram app. You can also manage access from Meta Business Manager under **Business Settings → Integrations**.
</Tip>

## Data Access and Encryption

<CardGroup cols={2}>
  <Card title="Encrypted in Transit" icon="shield-halved">
    All data passing between your browser, the Setor AI application, and third-party services is encrypted using TLS.
  </Card>

  <Card title="Encrypted at Rest" icon="database">
    Message content and tokens stored on Setor AI's servers are encrypted at rest using AES-256.
  </Card>

  <Card title="Payment Data via Stripe" icon="credit-card">
    Card details are processed exclusively by Stripe (PCI-DSS Level 1). Setor AI stores only the last 4 digits of your card and your billing address.
  </Card>

  <Card title="Right to Data Deletion" icon="trash">
    You can request deletion of your account data at any time by contacting [office@setor.ai](mailto:office@setor.ai).
  </Card>
</CardGroup>

## Reporting a Security Issue

If you discover a potential security vulnerability or believe your account has been compromised, contact the team immediately.

<Steps>
  <Step title="Email the Security Team">
    Send a message to [office@setor.ai](mailto:office@setor.ai) with **"SECURITY - URGENT"** in the subject line. Include as much detail as possible about what you observed.
  </Step>

  <Step title="Call for Urgent Issues">
    For time-sensitive matters — such as active unauthorized access or a suspected data breach — also call **+48 511 730 724** to reach the team directly.
  </Step>

  <Step title="Change Your Credentials">
    While waiting for a response, change your Setor AI password immediately and, if you suspect your Instagram connection was misused, revoke Setor AI's Meta API access from Instagram settings.
  </Step>
</Steps>

<Note>
  Setor AI commits to acknowledging security reports within five (5) business days and providing a substantive response within thirty (30) calendar days. Confirmed vulnerabilities are remediated as a priority.
</Note>
