Everyone gets in only where they should.
Roles are checked on the server, not just on screen. Everyone sees only their own stores and their own pay, and Íris never sees more than the person using her.
- Everyone sees their own.
- Every request has an owner.
- Every number says where it came from.
Who gets in, and in which role
Whoever opens Karsi for their company creates their own account. Whoever joins a team comes in by invitation, with a code that works once, and gets an account of their own.
There are six roles: owner, finance, customer support, editing, UGC and influencers. Each one sees what is theirs.
Hiding a button is not a permission. Roles are checked on the server, not just on screen, and the server decides what each person can see and change.
Your stores, your pay, no one else's
Everyone sees only the stores they were given. The others never show up.
Each person's pay belongs to them and to whoever manages: the owner and finance. The server sends it only to them, so a colleague never receives it.
Access rules that live with the data
Beneath the roles sits a second wall. Every request for data goes through per-store access rules written into the database itself, and it only returns what belongs to the stores you were given.
The rule does not live in the app. It lives next to the data, and holds for every person, on every Mac.
Íris drafts. You send.
Íris runs on your own Claude Code, on your Mac, and works with your permissions. The same rules hold for her: she never sees or does more than you can.
On the support desk she writes the draft and stops there. A person sends it, with Aprovar e enviar (approve and send). In her words: “I drafted this — you send it.”
Actions that touch money come switched off for Íris, and always ask for an explicit yes. Íris never deletes anything.
To use her, you need Claude Code installed on that Mac. The rest is on the Íris page.
Every figure says where it comes from
In Karsi, every figure carries a label: DADOS REAIS (real data), ESTIMATIVA (estimate) or PRÉ-VISUALIZAÇÃO (preview). You always know what you are reading before you decide.
Decisions are written down
Every money request is written down: who asked, how much and when. Only the owner approves money going out, with Aprovar (approve).
An expense carries its proof: a receipt, a contract or a link. Change the amount on a request and it needs proof again.
Every decision is recorded in the Archive, and only the owner can open it.
Credentials stay in a vault
When a store connects its Instagram, Messenger and WhatsApp accounts1, their credentials are kept in a vault, Supabase Vault, outside the app.
Where the data lives
Karsi runs on a single server, on Supabase. Everyone signs in with their own account on any of the team's Macs and finds the same Karsi.
Each store's orders, customers and products arrive there through a Shopify app installed in the store itself. See how a store connects.
This website
This website sets no cookies and runs no analytics or advertising tools. The pages that present Karsi ask you for no data. When you create your account, its data — your name, your company, your email and the stores you link — is kept on Karsi's server, with the rest of the app's data. The details are in Privacy.