Manage your account security and privacy
Organiko.ai provides comprehensive security features to protect your account and data. From encrypted tokens to session management and activity monitoring, we ensure your information stays secure.
All passwords are encrypted using bcrypt hashing with salt rounds. Your password is never stored in plain text and cannot be recovered by our team or anyone else.
After login, you receive two secure tokens: an access token (60 minutes) and a refresh token (30 days). Both are cryptographically signed and tamper-proof.
When you create an account or change your email, we send a verification link to confirm ownership. Links expire after 24 hours for security.
Password reset links expire after 1 hour and can only be used once. We send email notifications whenever your password changes.
All data transmitted between your browser and our servers is encrypted using industry-standard TLS/SSL encryption (HTTPS). This prevents man-in-the-middle attacks and eavesdropping.
Failed login attempts are monitored and limited to prevent brute-force attacks. After multiple failed attempts, your account is temporarily locked for your protection.
You can be logged in from multiple devices simultaneously. Each device has its own session with independent tokens.
When you log out, both your access and refresh tokens are invalidated. You can log out from:
Sessions automatically expire after periods of inactivity for security:
Note: As long as you use the platform within 30 days, your session automatically renews without requiring re-login.
Two-factor authentication adds an extra layer of security by requiring a second form of verification beyond your password. When enabled, you'll need both:
Planned 2FA Methods:
Your account activity is tracked for security purposes. You can view recent activity in Settings → Security → Activity Log.
We automatically send email alerts for important security events:
For security purposes, we track the location and device information for each login:
You can delete your account at any time from Settings → Security → Delete Account. This action is permanent and cannot be undone.
If you believe your account has been compromised or you notice suspicious activity: