Your account: signing in, billing and receipts

Signing in — there is no password

RowShield does not have passwords. Enter your email on the sign-in page and we email you a single-use link that signs you in and then expires. There is no credential of yours stored on our side, nothing to reset or rotate, and nothing that can be reused if it is intercepted after the fact.

This is a position rather than a missing feature. The product exists because database access rules are easier to get wrong than to get right; minting another reusable secret and asking you to invent, remember and share it would be difficult to defend.

Signing up is the same form. The first time you request a link for an address, the account and its organisation are created when you follow it. There is no separate registration step, which is why the terms and privacy agreement appears on both the sign-in and register pages.

The link did not arrive

Check spam and any plus-address filtering first. The mail comes from our authentication provider rather than from a person, so it is more likely than usual to be filed automatically. If it is genuinely absent after a minute, request another — each new link invalidates the one before it, so always follow the most recent email.

Links expire shortly after they are sent and work only once. An expired or already-used link returns you to the sign-in page rather than into the account. That is the link doing its job, not a fault with your account.

Open the link in the same browser that requested it. Sign-in completes against the browser that started the exchange, so a link forwarded to a phone or opened in a different browser can fail even though the link itself is valid.

Your plan and what it changes

The account page shows your current plan, its billing status, how many projects you have connected against the limit, and the minimum interval between automatic re-audits. Plans change how many projects are watched and how often — never what an audit is allowed to tell you. No finding is withheld behind a plan.

After a payment the plan shown is the one recorded when Stripe confirmed the payment to us, usually within seconds. If it still reads the old plan a minute after checkout, reload the page. The plan is read from that confirmation rather than from the fact that your browser was redirected back, which is precisely why it can be trusted.

Receipts and invoices

Every payment has a downloadable PDF invoice. Open "Manage billing and receipts" on the account or billing page and the full invoice history is listed, each entry downloadable. The button appears only once there is a payment to show; before your first payment there is no history for the portal to display.

If invoices need a company name, billing address or VAT/tax number on them, set those in the same portal under billing details. Invoices issued afterwards carry them. The address you sign in with and the address your invoices are sent to are independent, so changing the billing email does not change how you sign in.

Changing a card, and failed payments

Update the card in the billing portal under payment methods. Adding a new card and making it the default is enough; the next renewal uses it.

If a payment fails, auditing keeps running while Stripe retries over the following days and the account page shows "Payment failed — retrying". Updating the card inside that window resolves it with no interruption in service. Keeping a customer whose card expired under audit is a better failure than quietly stopping the checks on a database that is still live.

Cancelling

Cancel yourself in the billing portal; no email is required and nobody will try to talk you out of it. Cancellation takes effect at the end of the period you have already paid for, so you keep what you bought until then, and the plan reverts to free afterwards.

Cancelling does not delete your projects or their findings. The free plan continues to audit one project on a daily schedule.

Related questions

Can I set a password instead of using email links?

No. RowShield has no password field by design, so there is no reusable credential of yours to store, leak or rotate. Every sign-in is a fresh single-use link.

How do I change the email address on my account?

Sign out and request a link for the new address. An account is its email address, so the new one gets its own organisation. The email your invoices are addressed to is separate and can be changed in the billing portal without affecting sign-in.

Where are my receipts?

In the Stripe billing portal, reached from "Manage billing and receipts" on the account or billing page. Every invoice is downloadable there as a PDF.

Do I lose my findings if I cancel?

No. Projects and findings are kept, and the free plan keeps auditing one project daily.