Your account and your data

Everything about your own sign-in, and everything you own in Clavoz, lives in
one place: Settings, then Account. This guide walks through each card.

Sign-in and security

Change your sign-in email. Type the new address and your password. We send a
link to the new address and a notice to the old one. Nothing changes until you
click the link; the link lasts 24 hours. Once it is clicked, the new address is
your sign-in email, it counts as verified, and every device is signed out so you
sign in again with it.

Change your password. Your current password is required. The meter under the
new one reads Too short, Weak, Fair, Good or Strong as you type; eight characters
is the minimum. When you save, every other device is signed out and you get an
email saying so. This device stays signed in.

Two-step sign-in. Turn it on and signing in asks for a six-digit code from an
authenticator app (Google Authenticator, Authy, 1Password, Microsoft
Authenticator) after your password. Setup shows a QR code to scan, or a key to
type, then asks for the first code. You then get ten backup codes: write them
down. Each one signs you in once if you lose the phone. Turning two-step off
needs your password and a current code.

Where you're signed in. Every phone and computer currently signed in to your
account, with the browser, the address it came from and when it was last
active. Sign out ends one of them; Sign out everywhere else ends all but
the one you are on. A device that is signed out is sent back to the sign-in
screen on its next tap.

Sign-in history. The last 20 attempts on your account, successful or not,
kept for 90 days. A sign-in from a device we have not seen before also emails
you.

Every change here is written to your account history, which comes out in the
download below, and each kind of change has a sensible limit per hour.

Download your data

Download everything builds one ZIP of everything your business owns, in the
background. The card shows a progress line while it builds, then
Ready, download (expires in 7 days), and the owner gets an email with the
same link. The link works for seven days; after that the file is deleted.

Inside, each folder has CSV files (they open in Excel or Google Sheets) and JSON
files where structure matters, plus a README.txt that explains every file:

Folder	What is in it
account/	your business profile and every setting, the team, crew roles, invitations
catalog/	the price list learned from your purchases, assemblies, supplier purchases, crew rates
clients/	every client with phones, addresses, notes, tags and documents
quotes/	every quote with its lines, totals, status history, the signature record, and the PDF of every proposal that was sent
invoices/	invoices and their lines, draws, the payments you recorded
jobs/	projects and photos, the schedule, the crew roster and availability, job expenses
insurance/	claims, what went to the adjuster and what came back, supplements, kept carrier estimates
files/	the uploaded files themselves: logo, contract, proposal attachments, project photos, client documents
recordings/	walkthrough transcripts (the audio stays on your phone)
activity/	follow-ups sent, notifications, every change to a quote and to your account, sign-ins

Choose what to download lets you tick only the groups you want.

Follow-ups happen only after your yes. Reminders are off for a quote until
you turn them on for that quote, and turning them on asks first ("Are you sure?
This cannot be undone"). Clavoz then emails the client a friendly reminder on the
days you set, and you can pause it any time. The workspace switch in Settings can
stop every reminder, but it never turns one on by itself.

Two rules never bend: the archive holds only your business's rows, and it never
holds a password, a password hash, an API key, a sign-in token, a two-step secret
or a backup code. Only the owner or an admin can start a download, one builds at
a time, and the download link opens only that one archive.

Close your account

At the bottom of the Account section, on its own. Closing is for the owner, and
asks you to type the business name and your password. We suggest downloading
your data first.

What closing does. Your account is closed and kept safely for 90 days.
Billing stops (the subscription does not renew). Every member is signed out and
cannot use the app. Your public links (proposals, client pages, draws, bid
requests, invitations) show "This business is no longer using Clavoz". Follow-ups
you turned on stop. Nothing is deleted: every quote, client, file and setting stays
exactly where it is.

Coming back. Sign in with the same email and password within the 90 days,
or sign up again with the same email, and you are asked Welcome back, restore
your account? One tap brings everything back exactly as it was: data,
settings, team, price list, quotes, files; the public links work again. You
choose a plan again. The owner is emailed on the day the account closes, on day
60, and on day 83 ("deleted in 7 days").

After 90 days. The account and its data are permanently deleted and cannot
be recovered.

Where to read next

• Cancelling, closing your workspace and your data, for stopping the subscription without closing the account.
• Privacy policy, for how long each kind of record is kept.