Team, roles and security

#Roles

Role	Can
Owner	Everything, including payment settings, team and billing.
Manager	Runs the business day to day: locations, plans, customers, promotions, announcements.
Operator	Floor staff: sees everything, records cash sales, vouchers and sessions. Can't change setup.
Viewer	Read-only access to every page.
Agent	Their own voucher area only. See agents.

Invite people under Settings → Team. They get an email to set their name and password.

#Verification

Every account confirms its email (by link) and phone number (by SMS code). Until both are verified you can explore and set up, but you can't connect payments, invite people or message customers.

#Two-factor sign-in

Owners must turn on two-factor sign-in with an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password and others) before connecting payments or inviting people. We recommend it for everyone.

When you turn it on, you get 10 recovery codes. Save them somewhere safe (a password manager, or printed and locked away). If you lose your phone, choose Lost your phone? Use a recovery code at sign-in. Each code works once, and we email you whenever one is used. You can make a fresh set under Profile & security; the old ones stop working.

Each authenticator code can only be used once, and after 10 wrong codes sign-in pauses for 15 minutes. Turning two-factor sign-in off needs your password and a code.

#Passwords

Use at least 10 characters. If you forget yours, use Forgot password on the sign-in page. Resetting or changing a password emails you a notice, so you'll know if it wasn't you.

#Audit log

Sensitive actions, such as refunds, access given, payment settings and role changes, are recorded with who did it and when. The records can't be edited.

#Closing your workspace

The owner can close the workspace under Settings → Close workspace. You'll need your password and the workspace name, and any open invoices must be paid first.

Closing stops new Wi-Fi sign-ins at your routers, disconnects anyone online, signs out your whole team and stops billing. Your records are kept for the period in our privacy policy, so if you change your mind, contact us and we'll reopen it with the same team.