Settings/Overview
Settings
Configure your business and how VantageIQ works — profile, team, payments, integrations, security and data.
Each section below opens its own setup surface — pick one to configure; changes take effect once you save inside that section.
Business
Money
Connections
Security & Data
What needs your attention
—Nothing needs your attention yet — required setup, expiring credentials, provider re-authorisation and unverified sender identity appear here as your configuration progresses.
Setup nudges · comingOutbound messaging
Sender onboarding is an explicit step
Messaging capabilities (email, campaigns, transactional sends) stay off until you complete sender identity and mailing address in Business Profile. VantageIQ does not enable outbound sends automatically — that decision is yours.
CASL & consent
Canada’s Anti-Spam Legislation requires a valid mailing address and sender identity on every commercial message. Setup lives in Business Profile; consent records live in Data & Privacy.
Every card opens its own setup surface. Nothing here changes your account, sends a message, or enables a provider until you save inside that section.
Settings/Coming to Settings
Coming to Settings
This section will live here.
Not built yet
Settings / Business Profile
Business Profile
Owner & Contact
The person VantageIQ reports to
Settings/Security
Security
How you sign in and what’s protected — password, account email, two-factor authentication, active sessions, sign-in history and API tokens.
Two-factor authentication is not enabled. A password alone can be reused or leaked in a third-party breach; a second factor blocks that path even if your password is known.
Password & email
Used to sign in from a new device or when your session expires. Change either any time; a strong, unique password is your first line of defence.
Account password
The password you use to sign in to VantageIQ. Changing it asks you to confirm the current one first.
Account email
The address you sign in with and receive alerts at. Changing it asks you to confirm your current password first.
Email signature
How you sign off. Yours alone — each staff member sets their own, and it is added to the bottom of every draft you generate or compose, where you can still edit it before sending.
Your sign-off
Plain text — your name, role, and any contact line you want under it. Leave it empty and nothing is added to your drafts; nothing is ever invented from your business details.
Two-factor authentication
Not enabledA second factor at sign-in — a code from an authenticator app (or, in future, a hardware key) — blocks account takeover even when your password is known.
Authenticator app
Time-based one-time code from an app on your phone (Google Authenticator, 1Password, Authy). Recommended for owners. Disabling 2FA or regenerating your recovery codes both require your current password.
Hardware security key
A physical key (YubiKey, Titan) that plugs into your device. Strongest option; requires you to have the key on hand at sign-in.
Recovery codes
Single-use codes to recover access if you lose your device. Print them; store them where a break-in cannot reach.
Active sessions
— activeEvery device currently signed in to your account. If you see something you don’t recognise, revoke it — the session ends immediately and that device is signed out.
| Device | IP address | Location | Last active | Actions |
|---|---|---|---|---|
| Loading your sessions… | ||||
Sign out everywhere else
Ends every session except this one. Use this if you’ve lost a device or suspect an account share.
Sign-in history
Not recorded yetEvery attempt to sign in — successful or not. A failed attempt from a place you’ve never been is your earliest signal that a password may have leaked.
| When | Device | IP address | Location | Result |
|---|---|---|---|---|
|
Sign-in history isn’t being recorded yet
Nothing is missing from this table — the engine that would record sign-in attempts hasn’t been built. When it lands, the 20 most recent attempts will appear here with time, device, IP and whether each one succeeded.
|
||||
API tokens
Not available yetLong-lived credentials for your bookkeeper, accountant, or an integration to read data on your behalf. Scope each token to only what it needs; revoke any you no longer use.
| Name | Scope | Created | Last used | Actions |
|---|---|---|---|---|
|
Token issuance hasn’t been built yet
This table is empty because the feature doesn’t exist, not because you have no tokens. When it lands you’ll be able to issue a scoped, revocable credential — for example, a read-only token for your bookkeeper.
|
||||
Create a new token
Choose a name and the smallest scope that does the job. Tokens can be revoked at any time.
Enable 2FA
A second factor at sign-in blocks account takeover from password reuse and third-party leaks — the single most common way small-business accounts are compromised.
Use a unique password
A password reused on another site puts this account at risk the moment that site is breached. A password manager makes unique passwords easy.
Review sessions monthly
Skim your active sessions and sign-in history when payroll runs or you review the books. An unfamiliar device is the earliest signal something is wrong — revoke first, ask second.
Security actions on this page never fire automatically. Revoke, delete, and token operations always require an explicit click and, where destructive, a second confirmation.
Settings/Team & Access
Team & Access
Who can sign in and what they can do — owners, staff, and any external accountant or bookkeeper you grant access to.
Roles are enforced end-to-end; each role only sees what its permissions allow.
Total members
—
not loaded yet
Active this month
—
signed in within 30 days
Owners
—
full account control
External grants
—
accountant / bookkeeper access
Members
—
| Member | Role | Last active | Actions |
|---|
Invite a team member
Send an invitation
roles are enforced end-to-endThe invited person receives an email with a one-time sign-up link. They set their own password — you never see or type it.
— · invites you’ve sent that haven’t been accepted yet appear in the members table above
expiry · 14 days
Role defaults
A role is a starting point, not the final answer. What a specific person can actually do is set per person under Access & Permissions, and it can differ from the defaults below — so check the person, not the role. The Access column in the members table above shows each person’s real, current reach.
Owner
Full control of the account — including money movement, billing, member roles, and account deletion.
Staff
Day-to-day operators. Their sub-permissions decide which specialists (Bookings, POS, Inventory, etc.) they see.
External Accountant
A grant-based lens for your accountant or bookkeeper. Sees ledger + reports; never customer records, staff pay grids, or operational surfaces.
Invited (pending)
A person you’ve invited but who hasn’t yet accepted. No sign-in access until they set a password from the invitation email.
External accountant & bookkeeper access
Give temporary read/write access to an accountant
Grants a scoped, revocable lens into your books — ledger, reports, categorization only. The accountant does not see customer records, staff pay, or operational surfaces. Revoke anytime; expiry is required.
Invitations comply with CASL
Invitation emails are sent from your business’s verified sender identity + mailing address in Business Profile. If either is missing, invites are held until sender setup is complete — Canada’s Anti-Spam Legislation requires both on every outbound commercial message.
Roles are enforced on the server — not just in the UI. Changes to a member’s role take effect the next time they load a page or perform an action.
Advanced configuration
Your own mail server + AI image models
Your mail server and the mailboxes that use it
Settings//Bank connection setup
Bank connection setup
Settings/AI & Automation
AI & Automation
How VantageIQ’s AI works for you — what it does, and what it waits for you to approve. Autonomy, hard guardrails, model costs and background scopes all live here.
Autonomy is set to Draft & recommend — the safe default. Nothing acts without your explicit approval; auto-execute is not available in this build.
Autonomy
How much should VantageIQ act on its own?
Guardrails always onThe same recommend-then-act control used everywhere in VantageIQ. Pick how far the AI runs before you sign off — the hard guardrails below never switch off, whatever you choose here.
1 Recommend
Recommend only
The AI surfaces suggestions with reasoning and impact. Nothing happens until you click apply. You stay fully in the seat.
2 Draft & recommend
Draft & recommend
The AI prepares each move end-to-end — the email, the PO, the reply — and queues it. You get a one-tap approve or skip on each one.
DEFAULT
3 Autonomous
Auto-execute
Not available yet — every action currently waits for your approval. This mode will unlock once VantageIQ has an audited automation engine you configure.
Locked
Draft & recommend is on — the safe default. Every move waits for your apply; nothing reaches a customer, vendor or the ledger until you say so.
Guardrails
Hard limits the AI cannot cross
Two of these are locked on by platform policy — they enforce Canadian anti-spam law (CASL) and the append-only ledger rule. The rest are yours to tune, but the caps you set here override any autonomy mode above.
CASL send-gate check Locked on
Every outbound email or SMS is checked for a valid mailing address, sender identity and recorded consent before it can leave. If any check fails, the send is blocked and surfaced to you. Required by Canadian law and cannot be disabled.
Ledger writes require your approval Locked on
Anything that posts to the financial ledger — a receipt, an invoice, a reconciliation match, a reversal — waits in your review queue. The ledger is append-only and correctness-first; the AI drafts, you post.
External API cost cap You set this
The AI stops making paid model calls once it has spent this much in a single session. Leave blank if you do not want a per-session cap — the monthly cap below still applies.
Non-owner action guardrails
When enabled, invited team members using the AI cannot trigger actions that touch money, contracts or outbound messaging — those still require an owner approval, even in Draft & recommend mode. Off by default until you invite team members.
Monthly session-cost alert You set this
Send you an in-app alert once the AI’s cumulative model spend for the month crosses this threshold. This is a warning, not a cap — the cap above is the hard limit.
Allowed models & costs
Which models the AI is allowed to call
The AI picks the cheapest model that can do the job. You can raise or lower the ceiling here. Leave a cell blank to fall back to the platform default for that tier.
Model tier
Max $ / session
Monthly cap
Fast Short replies, extraction, categorisation
—
—
Balanced Drafting, summarising, most agent work
—
—
Deep reasoning Complex analysis, multi-step planning
—
—
No caps set yet — each tier falls back to the platform default. Set a cap above to override for this account.
Background scopes
What the AI runs unattended
These read your data and surface findings in the background — they never act on their own. Nothing here sends a message or writes to the ledger; findings appear in the relevant surface for you to review.
Intelligence
Reads public signals about your business, market and competitors. Surfaces findings on the Intelligence tab.
Last run—
Always on
Financial auditor
Watches the ledger for duplicates, out-of-band figures, missing counterparties. Findings surface in Reconciliation.
Last run—
Always on
Document ingestion
Watches your inbox and uploads for invoices, statements and receipts. Extracts and queues them for your review.
Last run—
Always on
Opportunity engine
Watches your data for money left on the table — unbilled work, overdue invoices, expiring contracts. Findings surface on the dashboard.
Last run—
Always on
Assistant thread retention
How long do we keep your Assistant chats?
Assistant threads — the back-and-forth with VantageIQ’s AI — are kept for this long, then permanently deleted. Findings the AI produced from those threads (ledger flags, opportunity cards, drafts) are kept separately and are not deleted by this setting.
Model provider
Powered by Anthropic Claude models.
VantageIQ’s AI is built on Anthropic’s Claude family. Your data is used only to serve your requests — it is not used to train Anthropic’s models.
Settings persistence ships with the automation engine — for now, values reset on reload.
Every setting on this page is display-only in this build — the underlying automation engine is not yet shipped, so nothing here changes runtime behaviour. Your defaults (Draft & recommend, CASL send-gate on, ledger writes gated, 90-day retention) will carry over the moment it ships.
Settings/Data & Privacy
Data & Privacy
What data you hold, what leaves your workspace, what your customers see. Everything on this page is honest — nothing here changes until you save it.
Your workspace is honest-empty — category rows, backup timestamps and match figures fill in as your account ingests real data. No fabricated counts appear on this page.
Your data at rest
Categories held in your workspace
— total rowsEvery category VantageIQ stores for you, with row counts, most-recent backup and how long each retention policy keeps it. Row counts read from your own account; a dash means there is no count to show yet, not a zero.
| Category | Rows | Last backup | Retention policy |
|---|---|---|---|
Customers |
— | — | Kept while your account is active |
Purchase orders |
— | — | 7 years · accounting standard |
Documents & receipts |
— | — | 7 years · accounting standard |
Ledger entries |
— | — | Permanent · append-only book of record |
Messages & notes |
— | — | 90 days · platform default |
Ingest & audit log |
— | — | 13 months · rolling window |
Deleted items (trash) |
— | — | 30 days in trash · platform default |
Backups run daily via Cloudflare’s managed replication. A restore is a support request — there is no self-service rewind today.
What leaves your workspace
Egress disclosure
Read-onlyThe only ways your data crosses the workspace boundary. Nothing outside this list happens without you connecting it.
AI model inference — Anthropic
When you use Assistant, Intelligence, or automated categorisation, the data required for that request is sent to Anthropic for inference. Anthropic’s API terms apply and their default posture does not use commercial API traffic to train models.
Third-party integrations you connect
Accounting, banking, booking and file-storage integrations receive only the data scoped to their integration — per-provider scope is listed on the Integrations page. Nothing is shared until you connect and grant scope.
Outbound messages you send
Email and message traffic you compose goes to your recipient through your configured sender identity. Sender onboarding must be complete before any send goes out — see the CASL section below.
Aggregated, non-identifying product telemetry
Anonymous product-usage counts (which surfaces are opened, error rates, feature adoption) reach VantageIQ so we can improve the platform. No customer records, ledger figures or message content leave your workspace in telemetry.
CASL sender onboarding
Outbound compliance status
Setup neededCanada’s Anti-Spam Legislation requires a valid mailing address and identifiable sender on every commercial message. VantageIQ blocks outbound sends until these three items are complete.
Mailing address
— not set
Set in Business Profile
Required
Sender identity
— not verified
DNS records · DKIM/SPF
Required
Unsubscribe handling
Auto-appended
One-click unsubscribe on every send
On by default
Data retention policies
How long each category is kept
How long each category is kept. All values below are current platform defaults; configurability will arrive with the retention scheduler engine.
Documents & receiptsVendor invoices, receipts, statements — accounting standard
7 years
Standard-locked
Default (fixed)
Messages & notesIn-app messages, notes and outbound message copies
90 days
Platform default
Default (fixed)
Ledger entriesAppend-only book of record — entries never overwrite prior entries
Permanent
Append-only
Default (fixed)
Ingest & audit logFile upload history and sensitive-action audit trail — rolling window
13 months
Platform default
Default (fixed)
Deleted items (trash)Anything you delete sits recoverable in trash before final purge
30 days
Platform default
Default (fixed)
These are the current platform defaults, the same values every workspace runs on. Choosing your own retention periods needs a scheduler that does not exist yet — when it ships, the fixed chips above become editable here.
Export & deletion
Your data rights
Take a full copy of everything in your workspace, or delete it entirely. Deletion happens as soon as you type the confirmation phrase — there is no waiting period and no way to undo it.
Export all my data
A full JSON bundle of every record VantageIQ holds for you — business profile, customers, purchase orders, ledger entries, documents, messages, audit log, plans, drafts and conversation history. It downloads straight to your device; nothing is emailed and no link expires. Required for PIPEDA right-to-export compliance.
Delete my account
Permanently delete your VantageIQ account and everything the platform holds for you. Confirmation is a typed phrase, and the deletion runs immediately once you type it — there is no cooling-off period and no way to cancel or restore afterwards. Two things are kept: a minimal record that an account once existed at this email address, and one copy of the files you uploaded, held in a restricted archive. You cannot reach that archive from the app and it is not a way to get your files back. Nothing else survives — no business data, plans, content or profile information. Export your data first.
Activity log
Every action taken on your behalf
A record of the notable things VantageIQ did for you — audits, document ingestion, plan drafts, published content and security events. Filter it, open any entry for detail, delete entries you would rather not keep, or export the current view.
Third-party data (your customers)
What your customers can request
Under PIPEDA (Canada) and comparable privacy laws elsewhere, individuals whose personal information you hold have a right to see, correct or delete that data.
Your customers reach you, not VantageIQ, for their data requests.
You are the data controller for the records you enter. Customers can request access, correction or deletion via the CASL contact address on your outbound messages. VantageIQ provides the tools (per-customer export, correction on the customer card, deletion into trash) but does not respond to your customers directly.
Legal & regulatory posture
Policies and reference materials
Links to the current VantageIQ policies and the regulations most commonly relevant to Canadian small businesses. These are references — not legal advice.
Privacy Policy
Terms of Service
Data Processing Addendum
CASL (Government of Canada)
PIPEDA (OPC)
GDPR reference
Not legal advice. The links above are provided as references so you can locate the authoritative text. VantageIQ does not act as your lawyer — if you need advice about how a regulation applies to your specific business, consult a licensed practitioner in your jurisdiction.
Nothing on this page changes your account, exports your data, or begins deletion until you confirm each action inside its own surface.
Settings / Operator Tools
Operator Tools Internal
Platform / dev diagnostics — not part of owner settings. Reached via #ops/<tool> or __opsSettings('<tool>').