Invite teammates to your Zippy workspace, or hand a client a read-only seat that sees every number and can change nothing. Read-only is enforced server-side, not by hiding buttons.

Team seats

A Zippy workspace can hold more than one person. Legend includes 3 seats; Sidekick and Hero are single-seat plans.

Each seat has a role:

Role	Can read	Can create & edit	Can manage billing, team, workspace
Owner	✅	✅	✅
Teammate (`member`)	✅	✅	—
Read-only (`viewer`)	✅	—	—

What is the read-only seat for?

You run links for someone else — a client, a label, a brand you manage — and they want to watch their own numbers. Historically that meant one of two bad options: send them screenshots forever, or hand them a login that can also delete a live campaign at 2am.

Read-only is the third option. They see every screen: links, Link Pulse, app-open rates, audience, the lot. They can change nothing.

How do I invite someone as read-only?

Go to Team.
Enter their email.
Set Seat type to Read-only (client).
Send the invite.

The default is Teammate (can edit), so nothing changes if you don't touch the picker. A read-only seat counts against your seat cap the same as any other.

It's enforced on the server, not in the UI

This matters, so it's worth being blunt about: read-only is not implemented by graying out buttons. Every request that would change something — creating a link, editing a destination, deleting a folder, connecting an Instagram account, adding a webhook, inviting another person, changing the workspace name — is refused by the API for a read-only seat, with a read_only error. There is one gate, in front of the entire dashboard API, so a feature we ship next month is covered the day it exists rather than the day someone remembers.

Disabled buttons are a courtesy to the person using the app. They are not a permission model, and we don't treat them as one.

What a read-only seat can still do

Read everything, on web and mobile.
Download QR codes, share cards and CSV exports their plan includes.
Unsubscribe themselves from emails — withdrawing consent is never gated by role, plan, or anything else.

Changing someone's role

Roles are set when you invite. To change one, remove the member and re-invite them with the role you want. An owner can't be created by invite — ownership isn't handed over through the invite flow.

Docs: Custom domains · Audience
Changelog: The read-only client seat
Blog: Give Your Client a Login That Can't Break Anything

Team seats & the read-only client seat