Your account, sign-in & security

There are no passwords to remember. When you sign in, the app emails you a one-time sign-in link. You click the link in your inbox, and you land back in the app already signed in. Your session then stays active on that device until you sign out or it expires, so you don't repeat this every visit.

One practical note: the sign-in link always returns you to the address you started from. If you start at the login screen you'll end up on your dashboard; if you start from a team invitation page, the link brings you right back there to accept.

To sign out, use the sign-out control at the bottom of the left sidebar, next to your email address. Signing out ends your session on that device.

The app also tidies up after you on the way out: when you sign out it clears the cached data it was holding and forgets which workspace you were viewing. That matters on a shared or public computer, because the next person who opens the app won't see anything from your account. If your session ever expires on its own, the same cleanup happens automatically.

Each business you run in the app lives in its own workspace (also called an organization). A workspace holds its own clients, quotes, invoices, payments, branding, and settings, and that data is scoped to that workspace alone. The app enforces this on the server, not just in the browser, so one workspace can never read or change another workspace's records, even though many businesses share the same app.

If you belong to more than one workspace, an organization switcher appears in the sidebar so you can move between them. You only ever see and act within the workspace you currently have selected. Switching is just a view change; nothing is shared across the boundary.

Inside a workspace, every person has one of three roles, and the role decides what they're allowed to do. Roles are managed under Settings in the Team section, and the boundaries are enforced on the server, so they can't be worked around from the browser.

In short: members get on with day-to-day client and document work; owners and admins additionally handle money, workspace settings, and the team; and owners sit at the top, with the extra responsibility of never being able to leave the workspace without a successor. You can see your own role anytime under Settings in the Account section.

These are two different actions. Leaving a workspace removes only you from that one workspace; the workspace and everyone else in it carry on. Deleting your account removes you everywhere.

Leaving is in the Team section of Settings, via the "Leave" button. You'll be asked to confirm, and once you leave you immediately lose access to that workspace's clients, documents, and payments; you can only return if an owner or admin invites you again. If you're the only owner, the app blocks you from leaving and prompts you to make someone else an owner first, so the workspace is never left without an owner.

Deleting your account is permanent and can't be undone. You'll find it under Settings in the "Danger zone", and because it's irreversible you have to type DELETE to confirm before the "Delete account" button activates. Once it completes, you're signed out automatically.

What happens to your workspaces depends on whether you share them. For any workspace where you're the only owner but teammates remain, ownership automatically passes to a teammate (an existing admin where possible, otherwise the longest-standing member) so the team keeps the workspace and its data. For any workspace where you're the sole owner and the only member, that workspace is deleted entirely, including all of its clients, documents, and payments. Workspaces where someone else is already an owner are simply left intact without you.