Payment Methods and Portal Access

The Payment Methods on File section lives at the bottom of the Overview tab on the customer detail page. It lists every saved card with the card brand, last four digits, expiry date, and a Default badge on the primary card. If no cards are saved, the section shows an empty state prompting you to send a card-setup link. Click 'Send setup link' to email the customer a secure Stripe-hosted page where they can add a card without sharing their full details with your team.

Once cards are saved, you can interact with each one: click 'Set default' on any non-default card to make it the primary card for future charges (cancellation fees, saved-card checkout orders); click 'Remove' to detach a card, which opens a confirmation dialog (AlertDialog) showing the card label before deleting. Removing a card is permanent — the customer will need to add a new one before their next saved-card charge. Only COMPANY (Owner) and PROJECT_MANAGER roles can access the customer detail page; there is no separate permissions gate on the payment-methods actions beyond the page-level guard.

Cards on file serve two purposes in the Vremly money model: they enable cancellation fee collection (if the customer cancels within your policy window, the fee can be charged to their default card automatically) and they allow operators to book orders on behalf of customers using a saved card at checkout. The 'Outstanding' stat card at the top of the detail page signals when there are unpaid SENT or OVERDUE invoices — this is the companion signal to payment methods when assessing a customer's financial standing.

The Settings tab manages portal access separately from payment. For customers without a linked Vremly account ('Stub records'), you see an 'Invite to customer portal' button and an explanation that the customer doesn't have a platform account yet. Clicking it dispatches a branded invite email. If an invite is already pending, the button is still available but the toast will tell you the invite is already outstanding. For customers who already have an account, the button changes to 'Send password reset', which dispatches a branded reset email to their address. Both actions require an email address to be populated on the Overview tab — if none exists, a warning note appears below.