Organization settings
Profile, brand color, timezone, API keys, audit log, webhooks.
The settings area at /dashboard/settings uses a grouped left sidebar:
- Account: Profile, Team, Billing, Payouts
- Email: Sending domain, Notifications
- Tracking: Website snippet, Custom domain, Attribution, Import
- Developers: API Keys, AI assistant (MCP), Connected apps, Webhooks
- Security: Audit Log

This page covers the most-used sections. Payouts has its own guide (Payouts), notifications are covered in Notifications, the sending domain in Sending domain, and attribution params in Tracking and attribution.
Profile
/dashboard/settings/profile
Edit your organization profile. Fields:
- Organization name: shown to affiliates on the public application page and in transactional emails.
- Description: shown on your landing page and the creator network.
- Industry: your business category.
- Billing email: where Stripe invoices go.
- Timezone: IANA timezone (UTC by default). Affects timestamps shown across the dashboard and email sends.
- Primary brand color: hex like
#0E7C7B. Used in transactional email templates and (in future) the public application page accent. - Logo: drag and drop or choose a file to upload. Used in transactional email templates.
- Favicon: optional; falls back to the logo.
- About text, founded year, website: power your portal's About page at
{your-subdomain}.rekomi.com/about, alongside your discoverable campaigns and their real terms, and a payout trust line.
Save. Changes apply immediately.
Team
/dashboard/settings/team
Invite, manage, and remove team members. Four roles (Owner, Admin, Manager, Viewer). See Team management.
Billing
/dashboard/settings/billing
Shows your current plan, billing period, trial status, and renewal date. The Manage billing button calls POST /api/billing/portal and one-clicks you into the Stripe Customer Portal where you can change plan, update payment method, view invoices, or cancel. Stripe handles proration on its side.
New brands hit /sign-up/plan first (after Clerk auth) to pick a tier and complete Stripe Checkout before they can reach /dashboard. The onboarding gate redirects a brand without an active subscription or trial back to /sign-up/plan, except invited team members, who join through the invite flow and are never asked to pick a plan or enter a card (the account they join already carries the subscription). See Plans and trials for the full lifecycle.
API Keys
/dashboard/settings/api-keys
Create, rotate, and revoke API keys. Each key has:
- Name: human-readable label.
- Prefix: the first characters of the key (
rk_live_...), shown in the list so you can tell keys apart. - Plaintext bearer: shown EXACTLY ONCE at creation. Copy it now or you regenerate. Stored as SHA-256 hash on our side.
- Plaintext signing secret: also shown EXACTLY ONCE. Used for S2S tracking signatures. Encrypted at rest.

See Developer authentication for usage.
Webhooks
/dashboard/settings/webhooks
Subscribe to outbound webhook events. Per endpoint:
- URL (HTTPS)
- Event types (
*,conversion.created,conversion.approved,payout.created,payout.paid,affiliate.created,affiliate.approved) - Signing secret (HMAC-SHA256, shown once at creation/rotation)
Subscribing to * also delivers additional event types (refunds, denials, payout failures, coupon events); see Developer webhooks for the full catalog.
A background delivery service sends events to your URL. Failed deliveries retry with exponential backoff up to 5 attempts. Per-endpoint success rate is visible in the list (last 100 deliveries). Click any endpoint to expand its delivery history.

See Developer webhooks for verification code.
Audit Log
/dashboard/settings/audit-log
Read-only log of every admin action in your organization. Filter by:
- Action type (
program.created,affiliate.approved,payout.batch.created,webhook.endpoint.created, etc.) - Entity type (program, affiliate, payout, webhook_endpoint, organization)
- Date range
- Actor (which team member did it)
Expand any row to see the JSON diff (before / after).

Click "Export CSV" with filters applied to get a CSV. Exported cells are guarded against spreadsheet formula injection.
Retention is currently indefinite. Per-tier retention windows are on the deferred list.
Migration
/dashboard/settings/migrate

If you are coming from another affiliate platform, this tab is where you bring your existing affiliate roster across. Importers ship for 20 sources: API pulls for Rewardful, FirstPromoter, Tolt, Lemon Squeezy, impact.com, PromoteKit, LeadDyno, Trackdesk, Partnero, UpPromote, GoAffPro, Refersion, and Everflow (most also bring leads, lifetime click counts, and commission history in the same run), and CSV uploads for Tapfiliate, PartnerStack, Dub Partners, Gumroad (whose sales history comes from a follow-up API pull), ReferralCandy, BixGrow, and Shopify Collabs, all provisioning affiliates plus their default tracking links in one pass. Optional auto-notify (Growth tier or higher) batch-emails every imported affiliate a brand-customized invite so they can claim their new Rekomi account.
Plan tier requirements:
- Starter or higher to run the importer (trial-eligible)
- Growth or higher with an Active subscription to fan out auto-notify emails (trial users can compose and preview but cannot send)
See the full step-by-step guide on Migrations from other platforms.
Custom affiliate-portal subdomain
Every brand gets a free branded affiliate portal at {your-brand}.rekomi.com on every plan, including Starter. Affiliates sign up there: your primary campaign at the root, each campaign at {your-brand}.rekomi.com/{campaign}. On every plan, you can serve those same pages from a domain you control (e.g. affiliates.yourbrand.com) instead. Affiliates see your own domain in the URL bar; Rekomi handles the routing transparently.
Configure the custom domain in Settings → Custom domain (the campaign detail page links there). One domain covers your whole program across every campaign. The flow:
- Enter the subdomain you want (
affiliates.yourbrand.com). - Rekomi shows you a CNAME target (
cname.rekomi.com). - Add the CNAME at your DNS provider.
- Click Verify. Rekomi runs a DNS chain resolution to confirm the CNAME points at the right host; if DNS has propagated (usually a few minutes) verification completes right away. The domain is then auto-attached to our edge and an SSL certificate provisions automatically (usually within a few minutes).

Once verified, your primary campaign's public application URL is https://{your-domain}/ and each campaign lives at https://{your-domain}/{campaign}. These are clean paths, one per campaign, serving the same landing page renderer that powers your free {your-brand}.rekomi.com portal.
Plan gate: none. The unified "Custom domain" feature (portal plus first-party tracking on one host) is included on every plan; most affiliate platforms reserve first-party tracking for their most expensive plans. The free {your-brand}.rekomi.com portal also stays available on every tier.