Team & workspace

Invite teammates, manage members and roles, seats per plan, and account security.

Your workspace#

Everything in Harpoon — analyses, monitors, projects, billing — belongs to a workspace (an organization), not to an individual account. Every member of a workspace sees the same data. Owners and admins can rename the workspace from Settings → Workspace; members see the name read-only.

Members & the three roles#

Each member has one of three roles:

Owner — the workspace's creator role. Owners can do everything: manage billing, rename or delete the workspace, invite or remove anyone (including admins), and promote members.
Admin — manages the team and the product: invite and remove members, cancel invitations, rename the workspace, and run everything day-to-day. Admins cannot remove owners or other admins, and billing stays with the owner.
Member — uses the product: analyses, captures, monitors, comparisons, projects. Members can't manage the team, and can leave the workspace at any time from Settings.

Owners and admins remove a member from the list in Settings → Members; removal revokes their access to the workspace's data immediately.

Invitations#

Invite a teammate by email from Settings → Invite a teammate. They get an email with a link to /accept-invite/… — accepting (signed in as the invited address) converts the invitation into a membership. Until then it sits in the Pending invitations list, where you can resend the email or cancel (revoke) it. Invitations expire after 48 hours; a resend extends the expiry.

Seats#

A seat is one accepted membership in your workspace — pending invitations don't hold one. Seats are set by your plan: Drop-in (free) has 1 seat, Patrol has 5, and Fleet is unlimited.

At the seat limit, the invite form points you at the upgrade path instead of failing silently. The server enforces the cap when an invitation is accepted, so an over-seat invitation can be sent but can never convert to a membership until a seat frees up or the plan changes.

Account security#

Forgot password — use the link on the sign-in page. We email a time-limited reset link; the response is the same whether or not the address has an account.
Change password — from Settings → Account, with your current password. All your other sessions are signed out when it changes.
Change email — from Settings → Account. Two confirmations: first an email to your current address (so a hijacked session can't silently move the account), then a verification to the new address — the change only applies after both.
Email verification — signing in works without it, but some notifications need a confirmed address. Resend the verification email from Settings or the banner.

Still stuck? Email us or browse all guides.