Your account, sign-in & security

Sign in with the email address you registered and the password you chose — that's the whole point of a password, and it's the one thing to keep safe. If you ever forget it, the "Forgot password?" link on the sign-in screen emails you a reset link; ask for a new one if the first expires. Your session then stays active on that device until you sign out or it expires, so you don't repeat this every visit.

One practical note: sign-in and the reset link return you to the address you started from. If you start at the login screen you'll end up on your dashboard; if you start from a team invitation page, you come right back there to accept.

To sign out, use the sign-out control at the bottom of the left sidebar, next to your email address. Signing out ends your session on that device.

The app also tidies up after you on the way out: when you sign out it clears the cached data it was holding and forgets which workspace you were viewing. That matters on a shared or public computer, because the next person who opens the app won't see anything from your account. If your session ever expires on its own, the same cleanup happens automatically.

Each business you run in the app lives in its own workspace (also called an organization). A workspace holds its own clients, quotes, invoices, payments, branding, and settings, and that data is scoped to that workspace alone. The app enforces this on the server, not just in the browser, so one workspace can never read or change another workspace's records, even though many businesses share the same app.

If you belong to more than one workspace, an organization switcher appears in the sidebar so you can move between them. You only ever see and act within the workspace you currently have selected. Switching is just a view change; nothing is shared across the boundary.

Inside a workspace, every person has one of three roles, and the role decides what they're allowed to do. Roles are managed under Settings in the Team section, and the boundaries are enforced on the server, so they can't be worked around from the browser.

In short: members get on with day-to-day client and document work; owners and admins additionally handle money, workspace settings, and the team; and owners sit at the top, with the extra responsibility of never being able to leave the workspace without a successor. You can see your own role anytime under Settings in the Account section.

Everything between your browser and Platybooks travels over encrypted HTTPS connections — the app, the public invoice pages your clients open, and the hosted payment checkouts. Records at rest in our database are encrypted by the database platform, and backups inherit that protection.

Two honest boundaries. First, to run the service we must be able to read your workspace data: that is how invoices get emailed, reminders go out on schedule, receipts fire on payment, and your dashboard adds up. Anyone with your password can read it too, so the password is the thing to guard, and signing out on a shared computer clears the cached data and the remembered workspace. Second, we do not offer customer-held-key encryption — there is no private key you hold that locks us out. That kind of lock would also lock out the scheduled sends, reminders, and public links that make the service useful, since those run on our servers while you are offline. If an auditor asks, the short checklist (encrypted in transit: yes; encrypted at rest: yes; workspace isolation: yes; team roles enforced: yes; card numbers stored: no; private-key mode: no) is on the Security & encryption page linked from the Privacy Policy.

Card payments deserve their own note: card numbers never touch our systems. Your client pays on your connected Paystack account's hosted checkout and we keep only its payment reference. Until you connect a payout account, invoice pages show no Pay option at all.

These are two different actions. Leaving a workspace removes only you from that one workspace; the workspace and everyone else in it carry on. Deleting your account removes you everywhere.

Leaving is in the Team section of Settings, via the "Leave" button. You'll be asked to confirm, and once you leave you immediately lose access to that workspace's clients, documents, and payments; you can only return if an owner or admin invites you again. If you're the only owner, the app blocks you from leaving and prompts you to make someone else an owner first, so the workspace is never left without an owner.

Deleting your account is permanent and can't be undone. You'll find it under Settings in the "Danger zone", and because it's irreversible you have to type DELETE to confirm before the "Delete account" button activates. Once it completes, you're signed out automatically.

What happens to your workspaces depends on whether you share them. For any workspace where you're the only owner but teammates remain, ownership automatically passes to a teammate (an existing admin where possible, otherwise the longest-standing member) so the team keeps the workspace and its data. For any workspace where you're the sole owner and the only member, that workspace is deleted entirely, including all of its clients, documents, and payments. Workspaces where someone else is already an owner are simply left intact without you.