Quotations
The pre-sale flow. Send a quote on WhatsApp, the customer clicks one URL, decides yes or no, and you convert to a draft invoice in a single click.
Five states. Two terminal paths.
The 256-bit unguessable share URL.
Every sent quote gets a public URL like this:
No login
The customer doesn't sign up or sign in. They click the URL from WhatsApp / email and see the quote. That's it.
256-bit token
64 hex chars = 32 bytes of crypto-random. Anchored regex at the route, rejected at the HTTP boundary before the DB sees the request. Brute-force is computationally infeasible.
No cookies, no tracking
X-Robots-Tag: noindex, nofollow,
Cache-Control: private, no-store,
Referrer-Policy: same-origin. The share view
never sets a cookie. Mark a quote rejected and the URL
returns 404 — phishing-by-URL-edit doesn't work.
WhatsApp share, baked in.
Indian SMBs share business documents over WhatsApp at roughly
10:1 versus email. We meet you there. Every quote detail page
has a one-tap "Share on WhatsApp" button that opens
wa.me/?text=… with the share URL pre-filled.
It's a deep-link intent — your phone's own WhatsApp sends the message from your number. No WhatsApp Business API integration, no per-message cost, no template approvals. The link uses your existing relationship with your customer.
One-click convert to draft invoice.
Customer says yes. Click Convert. mb creates a draft invoice
with the same lines, the same customer, the same place-of-supply
— atomic with the quote's converted_at stamp inside
a single tx, audit-logged.
The draft is yours to tweak (last-minute price changes, line edits) before clicking Finalize. The quote-to-invoice link is preserved in the database so the converted invoice's detail page shows a "Created from quote QT-…" banner — full audit trail without any of the rigidity of an accounting system.