Settings & Control Center

System Overview

Live status across your Zukro platform.

Service Health

Connection status of the services your platform relies on.

Loyalty & Seeds

Free-delivery threshold, Zukro Seeds earn rate and cashback. Applied live at storefront checkout and when orders are paid.

Loyalty Enabled

Free Delivery Above (₹)

Delivery Fee (₹)

Seeds per ₹1 spent

e.g. 0.1 = 1 seed per ₹10

Cashback as seeds (% of order)

Logistics & Delivery

Cold-chain & serviceability rules enforced server-side at checkout. Per-product cold-chain settings live in the Product Master.

Cold Chain

Controls how perishable (cold-chain) products are gated during checkout. Per-product temperature & max-transit windows are set in Product Master → Logistics.

Cold-chain items are always prepaid-only (COD is blocked). This policy controls the additional transit-window compliance check, audit evidence, and fallback behavior.

Cold-chain policy mode

Current behavior

Organization

Company, tax and registration details used across invoices, GST and compliance.

Legal Company Name

Brand / Trading Name

GSTIN

PAN

CIN

Contact Email

Contact Phone

Registered Address

Branches & Warehouses

Locations used by Logistics, Inventory and HR.

User Profile

Your personal admin profile and preferences.

Display Name

Email (sign-in)

Language

Timezone

Date Format

Account Actions

Password changes, email changes and sign-out are handled by Firebase Authentication for security. Use the buttons below.

Authentication & Security

Sign-in methods and session policy. Enforced at the Firebase Auth + Firestore Rules level.

These are configuration intents. Toggling a sign-in method here records your policy; you must also enable the matching provider in Firebase Console - Authentication. MFA, SSO and password policy are enforced by Firebase / Identity Platform, not by this page.

Sign-in Methods

Session & Password Policy

Roles & Permissions

Detailed RBAC lives in the Security module.

Open Security & RBAC

Payment Gateways

Connect and switch payment providers. Keys are stored server-side, never here.

Security: a public web page must never hold payment secret keys - anyone could read them and drain your account. This page records which gateway is active and its mode (test/live). The actual API keys go in your Cloud Functions config (server-side). The "Connected" badge reflects whether you've set them there.

Communication Providers

Email, SMS, WhatsApp and push providers that the Communication Hub uses.

Same rule as payments - provider keys live server-side in Cloud Functions. This selects the active provider per channel; the queue drainer Cloud Function reads it to know who to send through.

Active Provider per Channel

Marketplace Integrations

Enable the marketplaces you sell on. Sync runs via per-marketplace Cloud Function connectors.

Toggling a marketplace on records that you sell there (the Marketplace Hub reads this). Live order/inventory sync needs that marketplace's API connector as a Cloud Function with its credentials stored server-side.

AI Configuration

Choose the AI provider the AI Command Center uses, and set usage guardrails.

AI API keys are billable secrets - they belong in Cloud Functions config, never in this page. Select the active provider and set a monthly spend cap; the AI endpoint function enforces it server-side.

Active AI Provider

Monthly Spend Cap (Rs)

Database & Storage

Live Firestore usage estimated from your collections.

Collections

Document counts read live from Firestore.

Collection	Documents	Used By

Localization & Tax

Currency, GST and regional defaults used across Finance and Compliance.

Currency

Default GST Rate (%)

Home State (GST)

Financial Year Start

Default Language

These values mirror the constants in your Finance, GST and Compliance modules. Keep them in sync (or migrate those modules to read this config).

Branding & Theme

Visual identity for your admin and storefront.

Primary Brand Colour

Used for buttons, highlights and the sidebar.

Logo URL

Default Theme

Notifications & Alerts

Which internal alerts go out, and how.

Infrastructure & Feature Flags

Environment, feature toggles and maintenance mode.

Environment

Active Environment

Feature Flags

Turn features on/off across the platform without redeploying.

Maintenance Mode

Enable maintenance mode

Shows a maintenance notice to customers on the storefront. Your storefront must check this flag.

Checkout Kill-Switch (payment incidents)

Stops new checkout attempts immediately, without a code deploy. Use during a payment-correctness incident (e.g. suspected order/payment mismatch) — see ROLLBACK_PLAN.md. Enforced server-side in createRazorpayOrder; also shown as a banner to storefront visitors.

Disable checkout

No new Razorpay orders can be created while this is on. In-progress/already-captured payments are unaffected.

Reason shown to customers (optional)

Backup & Recovery

Protect your Firestore data from loss or bad writes.

Automated backups run as a scheduled Cloud Function exporting Firestore to Cloud Storage - they can't run from this page. This shows your configured schedule and last status (set by that function). I can write the backup function when you're ready.

Backup Schedule

Frequency

Retention (days)

Audit Center

Recent platform activity from the shared audit log.

Activity Log

Full audit in Security

Event	User	Module	When

Compliance

GST, privacy, and cold-chain compliance evidence.

Cold-Chain Audit Trail

Recent compliance checks, holds, overrides, and shipment-stage outcomes.

Order	Source	Outcome	Reason	Item	When

Cold-Chain SKU Gaps

Products marked as cold-chain that still have incomplete shipment profiles.

Product	Pickup	Transit	Storage	Issues

Full compliance tooling (GST prep, DPDP privacy, SOC2 readiness) lives in the Compliance Center.

Open Compliance Center

Advanced

Developer and system-level controls. Handle with care.

Secrets vault: environment variables and API secrets are managed in Firebase Functions config / Google Secret Manager, never in this page. There is intentionally no field here to paste a secret - that's the secure design, not a missing feature.

Developer Mode

Verbose console logging

Extra debug output in the browser console.

Reset Local Settings

Clears unsaved local changes and reloads from Firestore.