Operations

Support and billing operations

Dashloom separates product support records from payment mutations. Workspace owners submit billing questions, cancellation feedback, and refund-review requests in Settings. Each request receives a reference ID and starts

Dashloom separates product support records from payment mutations. Workspace owners submit billing questions, cancellation feedback, and refund-review requests in Settings. Each request receives a reference ID and starts in new status.

Configure operators

Set a comma-separated allowlist in the hosted deployment:

DASHLOOM_OPERATOR_EMAILS=wang382476218@gmail.com

Only the authenticated and verified wang382476218@gmail.com account can open the hidden /admin route or call /api/operator/*. Unauthorized requests receive a generic not-found response. The server rejects a configuration containing more than one administrator.

Use Google sign-in for a verified administrator identity. Password registration no longer sends verification emails or marks email ownership as verified; previously verified accounts retain their status.

Operators can mark a request reviewed or closed and add a resolution note visible to the workspace owner. Every update records the operator user ID and a workspace audit event. Dashloom does not issue a refund, cancel a subscription, or alter an invoice from this queue; those actions remain explicit, authorized work in the subscription's Waffo or Anyway account.

The same console includes an automation ledger for scheduled and authenticated manual maintenance. Use it to spot an incomplete quarter-hourly or daily batch before investigating the corresponding domain-specific sync, report, billing, or retention records. Stored task summaries use stable codes and exclude raw provider errors and payloads.

Public response levels

  • Active service incident: publish current reachability at /status; acknowledge confirmed critical hosted incidents as soon as operationally possible.
  • Billing, cancellation, and refund review: target an initial human review within two business days.
  • Security vulnerability: use the private process in SECURITY.md, not product feedback.
  • Community setup and feature requests: best effort through the public repository.

These are operating targets, not contractual service-level guarantees. A hosted operator must publish its legal entity, business hours, refund policy, support contact, incident history, and any contracted SLA before accepting production payments.

Never paste card data, credentials, private connector payloads, or authentication tokens into a support note.