Your account
How your partner account is set up, what its status means, and what to do if access ever stops.
Getting started
Your account is created by the FinFactory team. When it is, the first person — your account owner — receives a welcome email with a link to set their password. Follow it, choose a password, and sign in at https://billy.finfactory.dev/partners.
From the dashboard the owner can invite the rest of the team, issue API keys, and fund the float. See The dashboard for everything you can manage there.
Account status
Every partner account is in one of three states. It gates both the API and the dashboard — the same status decides both.
| Status | What it means | API & dashboard |
|---|---|---|
| Active | Normal operation. | Work as usual. |
| Suspended | A temporary hold — e.g. a compliance review or an unpaid invoice. Reversible. | Both stop. Your data is untouched. |
| Closed | The relationship has ended. Terminal, but your records are kept for audit and reconciliation. | Both stop, permanently. |
When you're suspended or closed
- API calls return
401with"Partner account is not active."— including payment creation. - Signing in tells you the account is suspended or closed and to contact FinFactory — it won't pretend your password is wrong.
- Your float and history are safe. Nothing is deleted. Balances, payments, and the ledger are exactly as they were.
- In-flight payments that were already accepted finish settling; you just can't start new ones.
Getting reactivated
Suspension is reversible — resolve whatever prompted it (talk to FinFactory) and your access is restored immediately, with the float and everything else just as you left it. Closure is final; contact FinFactory if you believe an account was closed in error.
Who can do what
Logins carry a role. This is set by whoever invites them, and it decides what they can touch:
| Role | Can |
|---|---|
| Owner | Everything, including transferring ownership. Only an Owner can create another Owner. |
| Admin | Everything except owner-only actions — team, organisation, keys, webhooks, top-ups, refunds. |
| Developer | API keys and webhooks, plus read access to payments. Cannot move money or manage the team. |
| Viewer | Read-only. |
Manage logins and roles under Account → Team in the dashboard.
Keeping the account secure
- Turn on two-factor authentication (Settings → Security) — strongly recommended for anyone who can move money.
- Issue one API key per environment or service, so you can revoke one without taking everything down. Keys are shown once; store them in a secret manager.
- Changing your sign-in email needs your password and confirmation from the new address — your old one keeps working until then.