Connection availability, 24 October 2026: new Shopify connections are coming soon. Shopify setup instructions apply to existing connected stores. For new onboarding, choose WooCommerce or Custom API on Pro or above.
Create your account
Before you can connect a store, you need a Zubby account. This is a five-minute job and only the first person at your company does it - everyone else gets invited as a team member.
Sign up
Head to /register. You can authenticate two ways: email + password (name, work email, and a password of at least 10 characters), or Google sign-in where the workspace has it enabled. Google skips the email verification step; email + password adds one quick verification before the dashboard unlocks.
Choose how to authenticate
Google sign-in is fastest. Email + password also works and adds a one-time verification to your inbox. SAML / OIDC single sign-on for your whole team is on the Enterprise roadmap.Verify your email
The verification email carries both a link and a 6-digit code - click the link or type the code on the verification screen, whichever is easier on the device you’re on. The code expires after 15 minutes (the link lasts 24 hours); if nothing arrives, check spam and request a fresh email from the same screen.Fill in your business profile
The first onboarding step asks for your business name, country, and phone. The business name appears on the dashboard and outbound email; it’s editable later underStore Details, so don’t stress about getting it perfect.Set up 2FA (strongly recommended)
FromSettings → Securityenable TOTP-based two-factor authentication. You’ll get single-use backup codes at setup - store them somewhere safe; they’re the recovery path if you lose your authenticator device.
Team roles
Zubby uses role-based access with per-member overrides. Assign the least powerful role that lets someone do their job - it limits blast radius if a credential leaks.
| Role | Can do | Typical user |
|---|---|---|
| Owner | Full access to everything, including billing and team. | Founder, account creator. |
| Admin | Full access - settings, billing, team, integrations. | Head of growth, ecom manager. |
| Marketer | Recovery & campaigns, growth tools, widget designer, analytics, catalog, AI training. | Marketer, growth lead. |
| Support | Inbox & conversations, analytics, catalog, AI training. | CX agent, support lead. |
| Analyst | Analytics, orders, and customers only. | Founder check-ins, exec dashboards. |
| Developer | Integrations & webhooks, catalog, store settings, widget, recovery plumbing. | Implementer, agency engineer. |
Invite teammates
From Settings → Team, use the Invite a teammate card: drop an email and pick a role. Invites expire after seven days; revoke a pending invite and re-send from the same screen. Access is only granted once the invite is accepted.
Per-member capability overrides
Settings → Team you can tick individual capabilities on or off - grant a support agent the widget designer, or revoke recovery access from a contractor - without changing their role.Recovery + audit logs
Sensitive changes - team invites, role changes, settings and AI config edits - are recorded for investigation by authorized Zubby platform administrators. Detailed audit records and exports are not available in customer dashboards. Review your billing activity in Settings → Billingor contact support about another account change.
If you lose access to your 2FA device, sign in with one of the single-use backup codes you saved at setup. Out of backup codes too? Contact hello@zubbyai.com from the email address on the account and we’ll verify ownership.
Next
With your account live, head to Connect your first store to install Shopify, pair WooCommerce, or configure a custom/API store. Setup time depends on connector authorization, catalog size, and whether a custom integration is required.
After verification
Open Team settings when you need store-specific access for a colleague. Use account security to enable an authenticator and save backup codes privately. These are separate controls: inviting a teammate does not secure their account for them. Confirm your own sign-in and recovery method before inviting a wider team.