Signing in, two-factor, and who can see what

Signing in

You sign in with your email address and password. Getting the password wrong several times in a row blocks sign-in for a short while — I can't sign in — what should I check? covers what to do when that happens. When two-factor authentication applies, a one-time code is emailed to you after the password step — enter the newest code you received.

How often the code is asked for depends on the account. A dealer or tuner sign-in re-verifies with a code roughly weekly; admin and back-office accounts re-verify far more often — about twice a working day — because those accounts reach more than one organisation's data.

Forgot your password?

Use the reset link on the sign-in page. The email contains a time-limited link; if it expires, request a new one.

Resets are always self-service — no one on the platform will ever ask you for your password.

Roles: dealer, tuner, team members

Your account has one role. Dealers see the ordering side; tuners see the back office. A tuner's company can have several logins on one workspace — team members share the same storefront, with owner/admin/member levels deciding who may change billing, team and other sensitive settings.

Who can see my data?

Everything is scoped to your own organisation. A dealer sees only their own orders, balances and invoices — never another dealer's. A tuner sees their own workspace: their dealers, their orders, their finances — never another tuner's. The same boundaries apply to the help assistant: it answers about your account only.

Signing out and sessions

Sessions expire on their own after inactivity; signing out ends the session immediately on that device. Changing your password does not sign your other devices out on its own, so if you believe an account is compromised: change the password on your Account page, sign out on every device you still have, and contact support — support can deactivate the login while the account is investigated.