> ## Documentation Index
> Fetch the complete documentation index at: https://help.casaconect.ai/llms.txt
> Use this file to discover all available pages before exploring further.
# Share links
> Give someone outside Casa Conect secure, limited access to part of a Shared Space, to view, answer questions, upload documents or vote on a date, without creating an account.
Not everyone in a transaction needs an account. A seller has three questions to answer and two documents to upload. A notary needs to see the summary. A **share link** gives them exactly that: a secure page showing only what you chose, where they can do only what you allowed.
## What you can share
| Item | Recipient can |
| :----------------- | :--------------------------------------------------------------------------------------------------------- |
| **Summary fields** | **View** them, or **Edit** them. With Edit, the fields become a questionnaire that the recipient fills in. |
| **Document types** | **View** the documents, or **Edit**, which lets them upload or replace documents |
| **Appointments** | Vote on proposed times: *Yes* or *Maybe* |
| **Matters** | See status and progress. View only. |
Alternatively, choose **Share entire space** for an overview link: the whole space on one page, with *Summary*, *Documents* and *Matters* tabs. This requires that you have view access to the whole space yourself.
A link can never exceed **your own access**. **Edit** applies only where you can edit. Everything else stays view-only, and the preview shows the result. Any accepted member of a Shared Space can create links.
## Create a link
In a Shared Space, choose **Share → Generate new link**. The space enters selection mode.
Move between the tabs and select summary fields, documents, appointments or matters. Chips show what is selected, for example *"4 summary fields selected"*. Then choose **Proceed**.
The dialog shows the form alongside a live preview. *The preview is exactly what the recipient will see.*
*"Your link is ready. Copy it now — it is shown only once."* The [Security](#security) section explains why.
### Options
| Option | Detail |
| :---------------------------------- | :---------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Name** | For your own reference. The recipient sees it as the page heading. |
| **Recipient name** and **Email** | Optional. The name personalizes the greeting. The email address is where the link is sent. |
| **Message** | An optional note, shown to the recipient |
| **Capabilities** | **View** or **Edit** |
| **Expiry** | 1, 3, 7, **14** (the default), 30 or 90 days |
| **Automatic resend on expiry** | Never, or up to 10 times. *Only resends if something is still unfinished when the link expires.* |
| **Design** | **Clean**, a white page with your logo, or **Branded**, your organization shown over a photo background. Branded needs a Casa Conect OS subscription. |
| **Require an access code** | *A six-digit code generated for you, shown once after creating the link.* |
| **Email the link to the recipient** | Sends the link for you. Needs a recipient email address. You can still copy the link afterwards. |
For anything sensitive, turn on **Require an access code** and send the code through a **different channel** from the link. If the link goes by email, send the code by text message or give it by phone.
## What the recipient sees
The recipient opens the link and lands on a page greeting them by name, showing only what you selected. **They need no account.**
* **Questionnaire.** Fields you shared with Edit. Answers **save automatically** as the recipient moves from field to field. If a value cannot be saved, it stays in the form so that they can try again.
* **Documents.** *View* opens a document in a new tab. With Edit, **Upload** and **Replace** accept the same file types as the vault, up to 50 MB, and every upload is scanned for malware. **Download all** delivers everything as one zip file.
* **Vote on appointment.** *Yes* or *Maybe* for each proposed time, then **Submit votes**.
* **Progress.** The status of any matters you shared.
The page is available in **English and Spanish**.
If a link is no longer valid, whether it expired, was replaced or was revoked, the recipient always sees the same message: *"This link is not available. It may have expired, been replaced or been revoked. Ask the person who shared it for a new link."* The page never reveals which of these happened.
## Manage your links
**Share** opens your **Active links** and **Expired links**, with each link's name, recipient, permission, expiry and when it was **last opened**.
| Action | Effect |
| :------------- | :----------------------------------------------------------------------------------------------------------- |
| **Copy URL** | Available only straight after the link is created or regenerated |
| **Preview** | Opens the link as the recipient sees it, with a banner that only you see. Logged as *Previewed by you*. |
| **Edit** | Changes apply immediately. **Changing the recipient email issues a new URL**, and the old one stops working. |
| **Resend** | Emails a **fresh** link. Any earlier link stops working. |
| **Regenerate** | Issues a new URL and restarts the expiry period |
| **Revoke** | Ends access immediately |
| **Activity** | The link's history |
You see and manage the links **you** created.
### Activity
Each link keeps a record of what happened: *Link opened*, *Access code entered*, *Summary submitted*, *Document uploaded*, *Document viewed*, *Votes submitted*, *Previewed by you* and *Invalid link attempt*. Changes made through a link are attributed to the link, not to a member of the space.
### Links that revoke themselves
| State | Cause |
| :------------------------------ | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Expired** | The expiry date passed. The recipient is emailed a reminder within the final 24 hours. |
| **Revoked — permission change** | **Your** access to a shared item was reduced, or you left the space. The link can no longer offer what you cannot reach yourself. Remove or downgrade the affected items before regenerating. |
| **Revoked — PIN lockout** | Too many wrong access codes were entered |
## Security
Share links are built to be safe to send by email, which is not a safe channel.
Casa Conect **does not store the link**. It stores only a one-way hash of the link's secret, so that even someone with access to the database could not reconstruct a working URL. We cannot show it to you again either. **Regenerate** issues a new one. The same applies to the access code.
When the link is opened, the secret is exchanged on the server for a session held in a secure, HTTP-only cookie, and the browser is redirected to an address that contains no secret. The secret does not linger in browser history, and the page's own scripts never see the session.
Codes are six digits, generated by Casa Conect (obvious patterns such as `111111` and `123456` are never issued), and stored only as a strong, slow one-way hash. Repeated wrong attempts from one network address lock that address out for a while, and too many wrong attempts in total revoke the link.
A recipient's session lasts an hour from their last activity, and twelve hours at most. Revoking, regenerating, resending, or changing the recipient's email address ends every open session at once.
Opening, validating, code entry, changes, uploads and bulk downloads each have their own limit. For code entry, changes and uploads, if the limiter itself is unavailable the request is **refused**, not allowed through.
Documents open through links that are valid for five minutes. Uploads go directly to encrypted storage with a single-purpose ticket bound to that link and that document type, and they are verified and malware-scanned before they are accepted.
Share pages carry a strict content security policy, cannot be embedded in other sites, send no referrer, and are hidden from search engines. Their content is excluded from our analytics and session replay.
Every access is logged with its time and network address. After 365 days addresses are replaced by a keyed hash, and the key is rotated, so old entries can no longer be tied to an address.
A share link is a **bearer** link. Anyone who has the URL, and the access code if you set one, can use it. Casa Conect does not verify the recipient's email address when the link is opened. Use short expiry periods and access codes for anything sensitive, and revoke links you no longer need.
## Send everything by email instead
**Email everything** prepares an email in your own mail program containing the summary, appointments and matters, and downloads the documents as a zip file for you to attach. Use it when the recipient needs the material itself and not a link to it.