Manage my account (profile, security, privacy)

Update your profile and language, change your password, set up two-factor authentication, and exercise your privacy rights.

Who this is for: every staff member. This page is yours regardless of role.

Before you start

• You need to be signed in. Settings opens on your profile.

Steps

Profile and language

1. Open Settings → Profile. Update your name (2 to 100 characters), your email, and your interface language (French or English).
2. Save. If you changed your email, the new address may need confirmation; your profile is saved either way.

Password

1. In the password section, enter your current password, then the new one twice. The new password needs at least 8 characters with an uppercase letter, a lowercase letter, and a digit, and must differ from your current one.

Two-factor authentication (MFA)

1. Open Settings → Security to enroll an authenticator app: scan the code, then confirm with the 6-digit code from the app. MFA is optional; once enrolled, sign-ins require the code. You can disable it later after a confirmation.

Your privacy rights

1. Consent: you can withdraw your consent to data processing at any time from your profile. While withdrawn, the rest of the app is restricted, but settings stay usable so you can re-give consent, export your data, or delete your account.
2. Export my data: one click downloads your own data (profile, time entries, comments, AI conversations, and more) in JSON and CSV. Document attachments are listed as metadata, not re-sent as files. Each export is recorded in the audit log.
3. Delete my account: type the word SUPPRIMER exactly to enable the button. Deletion is scheduled 30 days out; you can cancel any time before then. After the grace period your account is anonymized: your name and email are removed, and your past contributions remain without your identity.

What can go wrong

• If your current password is refused: you have 5 verification attempts per 30 minutes; after that, wait for the window to pass and try again.
• If you regret a deletion request: cancel it from the same section any time within the 30 days. Nothing is removed before the scheduled date.
• If the app looks disabled after withdrawing consent: that is the withdrawn state. Go to settings to re-give consent or exercise your other rights.

Limits

• Interface language is French or English.
• Your name must be 2 to 100 characters.
• One authenticator-app factor can be enrolled at a time.
• Account deletion anonymizes rather than erases: firm records you contributed to (time, comments) are kept without your identity.