Spaces
A space owns a payment account, its wallets, its recipients, and the people allowed to act on it. One person can belong to several company spaces and own one personal space, and move between them without signing out.
Switching space changes what every screen refers to. You always act on the space you are currently in.
Opening a personal space is a single action, and it is idempotent: if you already own one, you are given the one you have rather than a second. Opening it does not move you into it — you switch when you choose to.
Members and roles
A company space has members, each holding one role.
A member is either
ACTIVE or REMOVED. Removing someone ends their access to the space; it does not touch their Buburuza account or the other spaces they belong to.
Invitations
Bringing someone in is a two-sided flow, so nobody is added to a space without acting themselves.1
Invite
An owner invites a person by email and picks the role they will hold.
2
Accept
The invited person signs in — or signs up, if they are new — and accepts. They then appear as a member.
3
Revoke, if needed
An unaccepted invitation can be revoked at any time. A member who has already joined is removed instead.