Team access, roles and sign-in security for your pricing data

01Seats and free viewers by plan

A seat is a person who works in the account: the owner, an admin or a member. Open invitations for those roles hold a seat too, until they are accepted or revoked. Viewers are free: they read everything but change nothing, and an account on a paid plan can have up to 100 of them.

There are no seat packs: more seats come with a larger plan, as the pricing page shows. If a downgrade leaves more teammates than seats, the newest are suspended, not removed, and regain access oldest first when seats free up. Viewers over the cap are treated the same way.

02What each role can do

Roles are checked on every change a teammate makes in the team's account. A change the role doesn't allow is refused with a message saying who can make it.

Nobody working in someone else's account can touch its billing. Members can also edit MAP monitoring policies and the ad monitoring watch list on the plans that include them. For repricing, the owner decides whether members may apply prices or only approve them.

03Invitations and switching accounts

Owners and admins invite people by email with a role. The link lasts 7 days and can be resent or revoked. It only works for a signed-in person whose verified email matches the invitation, so a forwarded link is useless to anyone else.

Teammates keep their own login and their own Pricebeeper account. The account switcher in the header moves them into the team's account, where they work on the owner's catalog, alerts and settings. Their profile, security settings and team list always stay their own, and one person can belong to several teams, which suits agencies with several clients.

Anything a teammate creates in the team's account belongs to that account. The owner or an admin can give a teammate copies of the account's alert emails, sent under the teammate's own preferences and unsubscribe link. Rate limits, such as imports and API requests, are shared across the team.

04Two-factor sign-in

Two-factor authentication uses any authenticator app that produces 6-digit codes (TOTP). A code can't be used twice. Setup also gives you 10 single-use recovery codes, shown once and stored only as digests; you can generate a new set at any time.

• Every way in asks for the code: password, password reset link, email verification link, Google and company SSO. A password reset never turns two-factor off.
• Lockout: 10 wrong codes within 15 minutes lock code entry for 15 minutes, doubling with each lockout in a row up to 24 hours. You get an email each time.
• Teams can require it: when the owner switches this on, teammates without two-factor lose access to the team's account until they turn it on.
• Log out other sessions ends every other session at once, and changing your password does the same.

05Google sign-in and company SSO

Sign in with Google works on every plan. It links to an existing Pricebeeper account only when Google reports the email address verified. If that account had never verified its own email, its password is removed, its sessions end and its keys and integrations are switched off, since whoever registered it may not own the address.

Company single sign-on is on Business and Custom. The owner connects the team's identity provider over OpenID Connect (issuer, client ID and secret) or SAML 2.0 (entity ID, sign-in URL and signing certificates, typed in or read from the provider's metadata). Teammates sign in by entering the team's SSO name on the login page.

• SSO never creates accounts or memberships. Invite people first; each member then links their company identity from a signed-in session. The identity provider's email claim is never used to find or create a Pricebeeper account.
• Require SSO: members may then work in the team's account only from a session started through its SSO. The owner is never locked out.
• SAML details: sign-in starts at Pricebeeper, responses must be signed with SHA-2 by one of up to two configured certificates (so you can rotate), and each assertion works once.
• On a plan below Business, a saved SSO setup is kept but switched off.

06Audit log, encryption and support access

Pricebeeper keeps an audit log of account events: sign-ins and failures, password changes and resets, two-factor changes and lockouts, SSO links, account switches, team invitations and role changes, pinned competitor pages, repricing rules and every price written to a store. Entries made in a team account record the person and the account. The log is part of your data export.

Credentials Pricebeeper has to use later are encrypted at rest: marketplace and MCP server credentials, authenticator secrets, SSO client secrets, Shopify tokens and WooCommerce keys. API keys and recovery codes are kept only as SHA-256 digests, so nobody can read them back.

When our support staff open your account to help, they can't create API keys, integrations or other credentials, approve or apply prices, or delete the account. Staff accounts sign in with two-factor.

07When a teammate leaves

Leaving a team, or being removed from it, cuts off what that person set up. The same happens if they delete their own Pricebeeper account.

1. 1

   Keys revoked

   API keys they created in the account stop working at once.

2. 2

   Destinations paused

   Slack and webhook destinations, custom MCP servers and WooCommerce store connections they added are switched off, with a note saying why.

3. 3

   Access closed

   Their company SSO link for the team is removed, and any open session in the team's account is closed.

4. 4

   Owner told

   The owner gets an email listing everything that was switched off, to review and turn back on if still needed.

Products, slots, rules and history they created stay: the data always belonged to the owner's account.

08Your data: export and deletion

The GDPR data export builds in the background and emails you when it has finished; you download it from your settings. It holds your catalog, slots and matches, pinned pages, MAP and repricing data, Shopify store details, ad watches and the audit log. It never contains passwords, tokens, keys or secrets. Each list holds up to 100,000 rows, and the file says where it was cut short. A teammate's export covers their own account only, never the team accounts they work in.

Deleting your account needs your password, or your email address typed out for accounts that sign in only through Google or SSO. Pricebeeper cancels your card billing with Stripe first, and if Stripe can't confirm, nothing is deleted. Then the account and all its data are deleted, and a confirmation email goes to the address you used.

09Limits

• Company SSO is only on Business and Custom; Growth and below use passwords, two-factor and Google sign-in.
• No SCIM or automatic user provisioning. People are invited, then link their SSO identity themselves.
• SAML is sign-in started from Pricebeeper only: no sign-in started from the identity provider, no encrypted assertions, no single logout.
• The audit log has no screen in the app yet; you read it in the data export.
• Inside the Shopify admin, the Shopify app relies on Shopify's own sign-in.

Seats, viewers and SSO are part of the plan price. See slot-based pricing for what each plan includes, and API and integrations for what keys can reach.

Questions people ask