Goafreet
HomePortfolioSupport
Client Engagement & Commercial
Version 1.0

Client Access, Credentials & Account Security Policy

Mandates secure access delegation over master password sharing to protect client marketplace and ad accounts.

Effective: 9 September 2026
Last updated: 9 September 2026
Table of Contents (5)
    1. Delegated Access Principle
    2. Credential Security
    3. Multi-Factor Authentication (MFA)
    4. Account Ownership & Recovery Responsibility
    5. Access Revocation upon Engagement Conclusion
Legal Questions?

Need commercial clarification on our terms or standard contracts?

    1. Delegated Access Principle
    2. Credential Security
    3. Multi-Factor Authentication (MFA)
    4. Account Ownership & Recovery Responsibility
    5. Access Revocation upon Engagement Conclusion
Scope & Contractual Summary

Protocols governing role-based delegated access, password hygiene, multi-factor authentication, and account ownership protections.

1
Delegated Access Principle

Goafreet’s operating model prioritizes delegated permissions, user invitations, and partner access over master password transfers. Clients should grant access through official enterprise features (such as Google Ads Manager Link, Meta Business Manager Partner access, Amazon Seller Central User Permissions, and Shopify Collaborator Accounts).


2
Credential Security

Clients and personnel must not transmit plain-text passwords or secret credentials through ordinary unencrypted channels. Where credential sharing is necessary, clients must utilize encrypted password vaults with access controls.


3
Multi-Factor Authentication (MFA)

Goafreet enforces Multi-Factor Authentication (MFA) across its administrative infrastructure and recommends clients maintain MFA on primary account custodians.


4
Account Ownership & Recovery Responsibility

Client remains the sole owner and administrative custodian of all client-owned ad accounts, marketplace stores, domain registrations, and analytics properties. Client must maintain control of primary administrative recovery contacts.


5
Access Revocation upon Engagement Conclusion

Upon the conclusion or termination of an engagement, Client agrees to promptly revoke Goafreet’s delegated user permissions and collaborator invitations.

Contractual Hierarchy & Precedence

This document forms part of Goafreet’s operational legal architecture and is intended to be read in conjunction with our Master Service Terms and specific engagement proposals. Where a mutually signed Master Service Agreement (MSA), Statement of Work (SOW), or bilateral Non-Disclosure Agreement (NDA) contains more specific or differing terms, the signed agreement shall strictly prevail for that engagement.


Public Corporate Identification & Contact

Goafreet is an India-based brand management, digital marketing, ecommerce operations, technology engineering, and creative consulting firm operating from Vadodara, Gujarat, India.
Official Communications: info@goafreet.com | Telephone: +91 9106981512

View All 40 Legal PoliciesDocument Version: 1.0 | Updated: 9 September 2026