Company Settings: Danger Zone¶

The Danger Zone is exactly what it sounds like. The actions on this tab are destructive and irreversible. They exist for situations where you're closing your business, leaving the platform, or recovering from a serious account compromise — not for everyday cleanup.

If you've landed here by accident, just close the tab. Nothing on this page does anything until you click a button and confirm.

Who can use this section¶

Only users with the Owner role see the Danger Zone tab. Admins, Dispatchers, and Technicians on the same company don't have access — they won't see the tab at all when they open Company Settings.

Even with the Owner role, you can't delete the platform-wide system company; that's blocked at the server, not just hidden in the UI.

See Roles and Permissions for the full role breakdown.

What the Danger Zone does¶

Today, the Danger Zone tab exposes one operation: deleting your company. That single action wipes out everything tied to the company in one transaction:

• All user accounts on the company (Owners, Admins, Dispatchers, Technicians)
• The company record itself
• All jobs, work orders, customers, assets, inventory, and invoices
• All uploaded files (photos, attachments, documents)
• Active subscriptions are cancelled with Stripe immediately after deletion
• Any connected QuickBooks tokens are revoked

Once the deletion completes, signing back in is impossible — the user accounts no longer exist.

How deletion works¶

What happens when you click Delete Company depends on how many active Owners your company has.

One Owner (just you)¶

If you're the only active Owner, deletion happens immediately when you confirm. There's no waiting period, no second approver, and no reversal window:

1. You click Delete Company on the Danger Zone tab.
2. A confirmation dialog explains what's about to happen.
3. You click Request Deletion in the dialog.
4. The company and all its data are deleted in a single database transaction.
5. Your Stripe subscription is cancelled.
6. QuickBooks tokens (if any) are revoked.
7. Your uploaded files are removed from storage.
8. You're redirected to the login page. Your account no longer exists.

Two or more Owners (two-person approval)¶

If your company has more than one active Owner, deletion is a two-step process by design — one Owner can't unilaterally delete the company:

1. You click Delete Company and confirm.
2. The company enters a pending deletion state. Nothing is deleted yet.
3. Every other active Owner receives an email titled "Company Deletion Requested — Action Required".
4. The other Owners open the Danger Zone tab and see the pending request, with the requester's name and timestamp.
5. A different Owner (not the one who requested it) clicks Approve & Delete Company.
6. Once approved, the deletion runs immediately — same transaction, same Stripe and QuickBooks cleanup as the single-Owner path.

If no other Owner approves, the request stays pending until someone — including the original requester — clicks Cancel Deletion Request to clear it.

The pending-deletion state¶

Between the time deletion is requested and the time it's approved (or cancelled), the company is in a pending deletion state. While in this state:

• The company keeps working normally — jobs, dispatch, invoicing all continue.
• The Danger Zone tab shows a red banner naming the requester and the request time.
• Any Owner can click Cancel Deletion Request to clear it. This is the safe escape hatch if someone clicks Delete Company by mistake.
• Any Owner other than the requester sees an additional Approve & Delete Company button.
• Each Owner receives one email per request. There is no nag schedule.

If the request was a mistake, just cancel it — the company is unchanged.

Cancelling a pending deletion request¶

If a deletion was requested in error, any active Owner can cancel it:

1. Open Settings → Company Settings → Danger Zone.
2. The pending-request banner appears at the top with Cancel Deletion Request and (for non-requester Owners) Approve & Delete Company buttons.
3. Click Cancel Deletion Request.
4. Confirm in the dialog.

The pending state clears immediately. The company is unchanged — no data was touched while the request was pending.

Approving a pending deletion request¶

Approval is the irreversible step. Only do this if you've coordinated with the requester and you're certain.

1. Open Settings → Company Settings → Danger Zone.
2. Verify the request banner names the Owner you expect, at a time that makes sense.
3. Click Approve & Delete Company.
4. The confirmation dialog uses the strongest wording on the platform. Read it.
5. Click Delete Permanently to commit.

After commit, you're redirected to the login page. Your own account no longer exists at this point.

What gets deleted¶

Once deletion runs, the following is removed:

• Your company record
• All Owner, Dispatcher, and Technician accounts on the company
• All jobs and work orders, including their history and notes
• All customers, sites, and assets
• All invoices, payments, and quote records
• All inventory items and stock locations
• All uploaded files (job photos, customer attachments, invoice PDFs)
• The active Stripe subscription (cancelled at Stripe immediately after the database commit)
• Any connected QuickBooks OAuth tokens (revoked immediately after the database commit)

What may persist after deletion¶

A small number of things outlive the deletion, and that's intentional:

• Audit log entries for the deletion itself are written to the platform-level audit log so the operation is accountable. These records do not contain the data that was deleted; they record that a deletion occurred, who requested it, and who approved it.
• Stripe-side billing history — invoices and payment records remain in your Stripe account independent of FSM Navigator. If you also want those purged, do it in your Stripe dashboard.
• QuickBooks data — anything you previously synced to QuickBooks lives in your QuickBooks company file and is unaffected by the FSM Navigator deletion.
• Email backups — emails the platform already sent (notifications, invoices, magic links) sit in the recipients' inboxes and aren't recallable.

If you have a regulatory data-removal request that requires going beyond the above, contact support before initiating the deletion so the request can be coordinated.

Before you click anything in this section¶

A short checklist for Owners who are actually leaving the platform:

1. Export your data first. Open the Company Information tab and run Export Your Company Data. Save the export somewhere you control. After deletion, this export is the only copy.
2. Settle your billing. Open invoices charge through to the end of the current cycle. Cancelling the subscription early doesn't refund the current cycle. See Managing your subscription.
3. Notify customers with open jobs. Anyone with an in-progress job will not be able to reach you through the platform after deletion. Customer Portal links stop working too.
4. Stop your recurring jobs. Anything scheduled to repeat will simply not run after the company is gone. Cancel or hand off any obligations on the customer side.
5. Disconnect Stripe Connect, if used. Once the company is gone you lose access to the in-app management. See Stripe Connect for what happens to the connected account.
6. Save anything in QuickBooks you want to keep. The OAuth link is severed, but your QuickBooks data isn't touched.

If you can't tick the first item — export your data — don't proceed yet.

Common questions¶

Related¶

• Company Settings overview
• Company Information — where the data export lives
• Roles and Permissions
• Managing your subscription
• Stripe Connect
• Audit Logs