Your account, email verification & security

Your account

You sign in with your email and password. Sessions last 30 days on a device; signing out ends the session immediately.

Email verification

After signup we send a confirmation link. You can use the whole product before confirming, but verify when you can — Settings shows your status and a resend button. A verified address is what makes password recovery and share notifications reliable.

Forgot your password?

Use "Forgot password" on the sign-in page. The reset link arrives by email and works once. Resetting your password also signs out every other device — so if you ever suspect someone else had access, a reset locks them out everywhere.

How your data is protected

• Isolation — your documents, extracted records, and search index are scoped to your business. No other account can query them.
• Sharing is opt-in, always — nothing is visible outside your account until you create a share link, and every link is tiered, expirable, revocable, and logged. See Share links.
• Transport & storage — everything moves over HTTPS and lives in Cloudflare's infrastructure (database and file storage).
• The demo can't touch your data — the public demo runs on fictional seeded businesses and is read-only, enforced server-side.

Your team

You can have advisors or family members with their own logins under your business. Everyone sees the same business record; the access log and share controls remain yours.

Deleting your data

Contact us via the contact page and we'll remove your account, documents, and extracted records. (In-app self-service deletion is coming.)