Teams, workspaces, recovery, and data control

Roles

• Owner: workspace settings, administrators, members, credentials, export, and deletion.
• Admin: workspace settings, non-admin invitations and members, credentials, reports, and export.
• Member: products, analysis, reports, and report delivery.
• Viewer: read-only product intelligence.

An invitation is valid for seven days, stored as a SHA-256 token hash, bound to one normalized email address, and usable once. Dashloom displays the invitation URL once so self-hosters can deliver it through their preferred communication system.

Password recovery email

Dashloom uses Better Auth's one-hour reset tokens and revokes existing sessions after a successful reset. Password reset messages are sent asynchronously through Cloudflare Email Service using the EMAIL Workers binding. Onboard the sender domain under Email Service > Email Sending and set EMAIL_FROM_ADDRESS to a plain email address on that domain. Test delivery and the reset link before relying on password recovery. Invitations remain links delivered through your preferred communication system.

Email verification is disabled for sign-up and sign-in. A new password account signs in immediately, and existing accounts can sign in without verifying their address. Email/password sign-up does not mark an address as verified; administrator access still requires a verified identity, such as Google sign-in.

Export and deletion

Owners and administrators can download a versioned JSON export from Settings. Version 6 includes workspace data, Agent actions and their post-completion outcome cycles, Growth Missions, versioned Agent comparison history, and audit events but excludes API keys, OAuth tokens, connector credentials, and delivery secrets.

The same Settings page provides a Community-to-Cloud migration flow for portable Dashloom JSON exports. A server-side preview validates schema compatibility, references, file limits, destination plan capacity, and the number of products that will be created or matched without writing data. After approval, import is a merge operation scoped to the active workspace: products match by slug, metric identities are upserted, and competitor evidence is remapped to new local identifiers. Only products, product goals, normalized metric points, competitors, and competitor metric points are accepted. Credentials, users, roles, invitations, subscriptions, tokens, reports, Agent runs, actions, outcome cycles and comparison history, delivery channels, and audit history are stripped during validation and never imported.

Only the owner can delete a workspace, and the request must include the exact workspace slug. Deletion cascades through workspace-owned tables. Export first if the data may be needed later.

Audit trail

Workspace creation and updates, invitations, membership changes, and exports append audit events. Audit metadata must never contain secrets. The API returns the newest 200 events to owners and administrators.