❓ Help & FAQ

Files in PennaComm are locked until the linked invoice is paid. This is by design — it protects your work.

To unlock files for your client: make sure the conversation has a linked invoice, and the invoice must be marked as paid (either via Stripe or manually).

Once paid, the client will see a download button and the conversation will automatically show a "Payment received — your files are now available" message.

Yes. Files are stored in Cloudflare R2 and download links are time-limited (typically 1 hour). PennaPay is not a backup service.

When the client clicks "Download", a fresh link is generated on the spot — so they can always download again by returning to the conversation. But if you delete the file from PennaPay, it is gone permanently.

We recommend that both you and your client save important files to your own storage (Google Drive, Dropbox, etc.) after delivery.

When creating a new conversation in Messages, select the invoice from the "Link invoice" dropdown. The file gate is then automatically tied to that invoice's payment status.

You can also link an invoice after creation by editing the conversation settings.

They can see that a file exists (filename and size) but cannot download it. They'll see a lock icon with a message explaining that payment unlocks the files.

Image files show a lock message rather than a preview to prevent clients from screenshotting your work before paying.

A Quote is sent to the client before work begins. It shows the proposed price and scope but is not yet a payment request. The client can accept the quote from their portal link.

When accepted, the quote automatically becomes an Invoice (status changes to "sent") and the client can pay it.

Open the invoice in the builder, click the status dropdown, and change it to "Paid". You can also record a payment date. This is useful when the client pays by bank transfer outside of Stripe.

Yes. Each invoice has its own currency field. PennaPay supports all major currencies including DKK, EUR, GBP, USD, and more.

If you use multiple currencies, your dashboard will show totals grouped by currency to avoid misleading combined totals.

Reverse charge applies when selling B2B services to clients in other EU countries. Instead of you charging VAT, the client self-reports it in their own country.

Select "Reverse charge" in the Tax field when creating an invoice. The invoice will show "Reverse charge" on the tax line with no amount — this is the legally correct notation.

Consult your accountant or Skat.dk if you're unsure whether reverse charge applies to your situation.

In most countries (including Denmark and the EU), electronic signatures are legally recognised under eIDAS Regulation for standard contracts.

PennaPay's e-signature records the signer's full name, email address, timestamp (UTC), and IP address. This constitutes a simple electronic signature (SES) under eIDAS.

Note: For high-value contracts or specific legal requirements, consult a lawyer about whether a qualified e-signature (QES) is needed. We recommend professional legal review before going live with client contracts.

No. Once a contract is sent (status: "Sent"), it becomes read-only to preserve its integrity. If you need changes, void the current contract and create a new one.

This prevents disputes about what the client actually agreed to.

Go to Contracts and look for contracts with a ✅ "Signed" badge. The signing details (name, email, timestamp) are shown on the contract page.

We recommend downloading or screenshotting the signed confirmation for your records, especially for larger engagements.

Go to Settings → Billing and click "Manage subscription". This opens the Stripe customer portal where you can cancel, change plan, or update payment details.

Cancellation takes effect at the end of your current billing period — you keep access until then.

Your data remains accessible for the remainder of your paid period. After that, your account is downgraded — invoices and clients remain visible but some features are restricted.

You can export all your data at any time from Settings → Data export (GDPR Art. 20).

If you delete your account, data is scheduled for permanent deletion after 30 days (GDPR Art. 17). You can restore within that window.

Go to Settings → Security and click "Set up 2FA". Scan the QR code with an authenticator app (Google Authenticator, Authy, 1Password, etc.), enter the 6-digit code to confirm, and 2FA is enabled.

After enabling, you'll need your authenticator code every time you log in from a new device.

Data is stored on Railway (PostgreSQL database, EU region) and Cloudflare R2 (file storage, EU). Emails are sent via Resend.

All three providers have GDPR-compliant Data Processing Agreements (DPAs).

PennaPay sends a notification when you log in from a new IP address. This is a security feature — if it was you, no action is needed.

If you didn't log in, change your password immediately from Settings → Change password and consider enabling 2FA.