Most ad platform integrations assume one account per website. Real agencies manage dozens. We rebuilt the AffordX backend to invert the website-to-credential foreign key relationship, support multi-account OAuth flows without token leakage, and isolate credentials per account with dedicated encryption keys. This post covers the architecture decisions, the migration strategy, and the patterns that made it work across three ad platforms simultaneously.