The links you send clients
Proposal and invoice links are short, expire and can be revoked, and every client link is protected in proportion to what it can actually do.
Every link this product sends your client is a credential: whoever holds it is treated as that client. Those links look alike and carry very different risk — one is meant to be posted publicly, another can execute a legally binding signature — so they are not all protected the same way.
Why the links are short
The links to your proposals, invoices, change orders and service agreements, your clients’ referral links, visit tracking links and the client hub’s link are short. Short is not cosmetic: a referral link written out in full is 166 characters, which pushes a share-prompt text into a second billed segment. The short one keeps it to one, halving what each prompt costs to send.
It also means expiry, revocation and usage are properties of a record rather than facts baked into the link itself — which is what makes the rest of this page possible.
Each link is protected for what it can do
The security level is decided per link, according to what holding it actually lets somebody do:
- A referral link grants nothing and is designed to be shared. It is not hardened, because hardening a link meant for a public post would break the thing it is for.
- An invoice link shows a bill and offers payment. Paying never needs a code.
- A proposal link can sign a contract, so accepting or declining it requires a verification code sent to the contact already on the client’s record.
The same code guards signing, declining or canceling a service agreement, accepting a change order, canceling or moving a visit from its tracking page, and opening the client hub. Reading and downloading never need one.
The important half is that the link meant to be shared is not locked down, and the one that signs contracts is not under-protected.
Links expire
A proposal, invoice or change order link keeps working while the document is still open. An unpaid invoice’s link stays live right up to the 12-month limit below, because chasing payment is the point.
Once the invoice is paid in full or voided — or the proposal is accepted (by your client, or by you with They already accepted), declined, expires, is voided or is replaced by a revision, or the change order is accepted, declined or voided — the link works for 30 more days, so your client can still look at what they paid or agreed to. And none works more than 12 months after your client first opened it (a change order’s, after you sent it), so a forwarded email, a shared laptop or a phone that was later sold does not keep a way into their paperwork. A part payment does not start the 30 days.
A payment reminder, an invoice’s automatic reminders and a proposal’s automatic follow-up never send a link that has stopped working: like Send again, they issue a fresh one first.
A referral link never expires: it is meant to be passed around, and a dead one is a lost lead. Regenerate Link, on the client’s Communication tab, is how to stop one.
A client who opens a link that has stopped working is told it is no longer available and to ask you for a new one — never whether it expired or you revoked it.
Revoke a link
A link that went to the wrong person can be revoked, which stops it immediately. On a proposal or an invoice that is the Revoke link button in the Send to client panel — see Invoices. On a change order it is Revoke link on its card on the job; a change order is sent once, so a revoked one is shared from then on as its PDF.
Revoking does not affect the invoice or the proposal itself. It stops that particular link — the long form in any older email too — and while the document is still waiting on your client, Send again issues a fresh one. While a link still works, Send again emails that same link rather than replacing it, so a client part-way through paying is not cut off. A document that is settled offers no Send again, and the panel says so: download its PDF to share it.
This page describes Secure Links & Client Verification. It is written from that feature’s record and covers what has shipped, never what is planned.