Tour the Settings hub
7 min read
All four Settings tabs — General, Invoices, Security, Billing — and every card inside: account info, business entity, MFA, password, API keys, plan usage, and the email forwarding alias.
Opening Settings
Settings is the last item in the top nav. The page is organised into four tabs — General, Invoices, Security, Billing — selectable along the top of the page. Each tab loads its own set of cards.
General tab
The first tab covers identity and integrations: • Account card — your display name and login email. Edits to email require re-verification before they take effect. • Display currency — what the Dashboard, Income, and Profit pages convert to. • ITA Integration card — admin only, links to /settings/ita-integration for the Israeli SHAAM OAuth flow. • API Keys card — links to /settings/api-keys for managing programmatic access. Note: business details (legal name, tax ID, address, bank info) live in the Studio at /creator/business-details, not in Settings.
Invoices tab
Manages global extraction behavior: • Vendor extraction rules — list of global and vendor-scoped rules with priority, an active toggle, and edit/delete actions. Use this to teach the AI patterns that apply across all your suppliers (e.g. "VAT is always a separate line", "date is DD/MM/YYYY"). • Default category — applied to invoices when neither the vendor nor a rule sets one. • Locked periods — close a calendar period so historical reports don't drift; reopen later if you need to amend.
Security tab
All identity and account-deletion controls live here: • Password card — set or change your password (required even on Google-linked accounts if you want to use email/password as a fallback). • MFA card — enable time-based one-time passwords (TOTP). After enrolling, you can view and regenerate backup codes; print or store them — they're the only way back in if you lose your authenticator. • Active sessions — list of devices currently signed in; revoke any of them. • Danger Zone — request a full data export (GDPR), or schedule account deletion. Deletion is irreversible; the app double-confirms.
Billing tab
Hidden on self-hosted/unlimited deployments. When billing is enabled, you'll see: • Plan Usage card — current tier, monthly invoice count vs. quota, upgrade CTA. • API Key card — generate, rotate, or revoke the key used for the public REST API. Only the freshly created key is shown in full; copy it before closing the dialog. • Invoice Alias card — your personal forward-to email address. Forwarded supplier emails are ingested as uploads. Click Regenerate to rotate the alias if it leaks.
Business Details (in the Studio)
Business details now live in the Studio at /creator/business-details, not under Settings. Saving the form for the first time is what registers your business with Involoops; until then you can browse the studio but cannot issue documents. Required fields: • Legal name and trade name. • Tax ID (and second tax ID for jurisdictions that need both). • Registered address and contact details. • Bank details for payment instructions on receipts. Changes take effect immediately on the next invoice you issue; previously issued PDFs are not regenerated.
API Keys sub-page
/settings/api-keys is the management page reached from the General and Billing cards. The header explains scopes, rate limits, and the difference between test keys (sandbox data) and live keys (real records). Click New API key to mint one. The key is shown only once — copy it into your secret store before closing the dialog. The list below shows each key's scopes, creation date, last-used date, and a Revoke button.
Ready to see it in action?
Explore InvoLoops Insights