Settings

The Settings section holds what belongs to the company as a whole, group by group: Company (Branding, Domains, Website profile), Email (Sender domains, Outbound email), Connections (Storage, Payment connectors), Embeddings and Security. This page covers the first three groups. Embeddings are explained in Guest space, and the Security group in Security.

Branding and email settings are edited by Administrators and by any role that includes managing branding. Every change is recorded in the audit log.

Branding

Open Settings > Company > Branding. Your staff see your company in the back office, never Majali: the name in the header, your colours on buttons and charts, your logo beside the name. An empty value falls back to a neutral default, never to another company’s.

Setting	What it does
Name (English and Arabic)	Shown at the top of the menu and in the emails your company sends. A long name is shortened in the menu.
Logo, and logo on the dark theme	PNG, JPEG, WebP or SVG. Shown beside the name; the dark one replaces it when a person uses the dark theme.
Icon	A square image for the browser tab and for the installed apps’ home-screen icons.
Sign-in page image	A photo shown beside the sign-in form. Its location and other metadata are removed.
Primary colour	Picked with a colour picker. Buttons show white text on it, so a colour too light for white text is refused.
Secondary colour	Used by the dashboard’s charts and map. The picker suggests colours that go with the primary; leave it empty to follow the primary.
Display name and reply-to address	The name and the reply-to address on the emails your company sends to guests, owners and contractors.

The owner space, the operations app and the guest space use the same branding. The owner space and operations app draw their home-screen icons from your icon, or from your initials and colour when there is none.

Domains

Your back office answers at <company>.cloud.majali.app, the owner space at <company>.owners.majali.app, the operations app at <company>.operations.majali.app and the guest space at <company>.guests.majali.app. Open Settings > Company > Domains to use addresses on your own domain instead, such as admin.yourcompany.ae. This needs the custom domain feature and a role that includes managing domains (Administrators by default).

To add a host:

Choose Add, enter the host and what it serves: the back office with the website API, the operations app, the owner space or the guest space. Saving asks for a fresh code.
The host’s page shows the DNS records to create at your domain provider: a CNAME to the address shown (A and AAAA records instead, for a bare domain such as yourcompany.ae), and a TXT record named _domain-verification.<host> holding the token shown.
Create both records, then press Check now, or wait: a pending host is checked every 10 minutes on its first day, then every hour. Pointing the host at Majali is not enough on its own; the TXT record proves the domain is yours.
Once both records are found the host is Verified and its certificate is issued. Open it over HTTPS.

The rules the product enforces:

A verified back-office host can be made the primary one with Make primary (a fresh code). Links in emails then use it. Only a back-office host can be primary.
Verified hosts are checked again every day. After two failed checks in a row the host is Disabled; it comes back by itself once the records do. A host still pending after 14 days is released.
Administrators are told by email when a host goes live, fails a check, is disabled or is released.
A company can have at most five own hosts. An IP address is not a host, and the default hosts under majali.app are never removed.
Removing a host asks for a fresh code, and you cannot remove the host you are currently using.

Website profile

Settings > Company > Website profile is where you manage the team as your website shows it: photos, bios, public contacts, order and the person’s consent. The rules are explained on the Team page, under “The team on the website”.

Email

What is sent, and from where

Majali never emails your staff about individual leads: new enquiries, first-answer targets, escalations and overdue tasks show inside the back office. Email goes to people outside your team:

Message	Sent from
Invitations, password resets, security notices and domain notices to your staff	Majali’s own sender, with your company’s name in the message.
Guests’ booking emails (requested, confirmed, paid, declined, expired, cancelled, refunded) and their sign-in links to the guest space	Your company’s identity: your display name and reply-to, and your own sender domain once it is active.
Owners’ sign-in links to the owner space and requests to approve a repair	Your company’s identity.
A job sheet sent to a contractor	Your company’s identity.

A message sent in your company’s name needs a display name and a reply-to address on the Branding screen. While either is missing it is not sent, and the back office shows a warning. Every email leaves through a queue that retries a failed delivery up to five times. A recipient receives at most 30 notification emails an hour; anything beyond that is collapsed into one digest.

Sender domains

By default your company’s messages go from Majali’s sender with your display name. Open Settings > Email > Sender domains to send them from an address on your own domain instead, such as bookings@yourcompany.ae. This needs the sender domain feature.

Enter the address. The domain is checked first, because every company shares Majali’s sending reputation. Free-mail providers and reserved names are refused. A domain registered less than 30 days ago, one that receives no mail, or one listed on a spam blocklist is deferred: the page says why and when to try again, and your mail keeps going from Majali’s sender.
Once accepted, the page lists the DNS records to create: two CNAME records (one signs your email, one handles bounces) and an SPF entry to add to your domain. Create them at your domain provider and press Check now.
When the records are found the domain is Active, and your company’s messages go from your address. Until then, and whenever the domain is suspended, they go from Majali’s sender with your display name and reply-to.

Active domains are checked again every day. A domain that becomes listed on a blocklist is suspended and your messages fall back to Majali’s sender. A domain belongs to one company only. Removing it removes everything set up for it. A deferred domain can be approved by Majali support after a manual review: contact them if you believe the check was wrong.

Outbound email

Open Settings > Email > Outbound email to see every message your company sent or tried to send: its kind, status, recipient, the number of attempts, the last error, which identity it went from and when. Filter by kind, status and date. Use it when a guest or owner says they received nothing. The log keeps 30 days of messages.

Storage

Open Settings > Connections > Storage. Your full-size photos live in your own Google Drive, not on Majali: the originals of listing photos and their private sizes, area and team pictures, the original of the sign-in image, and the photos and signatures taken at check-in, check-out, jobs and inspections. Majali keeps only the web copies of published items. Connecting needs a role that includes managing storage (Administrators by default).

Connect opens Google’s sign-in in a dialog. Any Google account works, and Majali asks only for access to the files it creates itself, never your other files. Connecting and disconnecting ask for a fresh code.
Check now reads the account’s storage used and its limit, and makes any missing folder again. The same check runs every hour.
If Google refuses access, the connection is marked for reconnecting and Administrators are told once. Reconnect with the same account keeps every photo reachable.
Disconnect stops Majali using the account. Nothing is revoked at Google and nothing in your Drive is deleted.

While no storage works, uploads are refused and every admin page warns the people who can connect it. A photo already uploaded that could not be stored waits and is stored once the connection works again, or asks to be uploaded again after 14 days. When your account closes, files in your Drive are never touched.

Payment connectors

Open Settings > Connections > Payment connectors to choose how guests pay for their stays. A connector is one way of taking money, shown as a card:

Stripe: your company’s own Stripe account. Enter its publishable key and secret key, then add the webhook address the page shows in your Stripe dashboard and paste its signing secret back. Without the secret, bookings paid by card are never marked paid, and the page warns until it is there. Check now proves the keys and shows which account they belong to.
Bank payment link: a link you give guests to pay by bank. Staff then mark the booking paid with the bank’s reference.

Only people whose role includes setting up and checking payment connectors (Administrators by default) add or change one, and saving asks for a fresh code. A connector with payment history keeps its credentials: add a new connector to change them. Recording a payment, releasing a deposit or confirming a bank repayment is a separate permission, held by Managers by default.

Staff pick the payment method on each booking from the company’s ready connectors; a default connector can prefill it. A payment is marked paid only on a settlement confirmed with the provider, never on a redirect back from a payment page.