Affiliate Program, Selective Clear & Account Hardening

GroupGPT opens up an affiliate program with its own dashboard and admin tooling, gives users fine-grained control over what they clear from a room, and quietly tightens the account-settings endpoint.

An affiliate program

GroupGPT now has an affiliate program. There's a dedicated dashboard where affiliates can track their standing, and an admin surface for managing the program on the back end. The whole flow is wired into the product end to end — backend routes, a schema to record affiliates, and admin controls to oversee it.

It also slots into the login flow: when someone arrives from the affiliate page and signs in, they're routed straight back to /affiliate afterward instead of being dropped on the generic landing screen. Small touches like that keep the path from "interested" to "signed up" short.

Selective clear

"Clear" used to be all-or-nothing. Now a selective clear menu lets you choose exactly what goes:

  • Messages — wipe the visible conversation.
  • History — clear the stored record the AI draws on for context.
  • Neurons — reset the room's knowledge nodes.

Separating these matters because they do different jobs. You might want a fresh-looking chat without forgetting the room's accumulated knowledge, or reset the AI's working context while keeping the neurons that define how the room thinks. The menu makes each of those a deliberate, one-action choice.

Account endpoint hardening

The endpoint that updates your account settings was hardened against mass assignment — the class of bug where a request can quietly set fields it was never meant to touch by including them in the payload. The update now only accepts the specific fields a user is allowed to change, and ignores anything else. No user-facing change; just a smaller attack surface on a sensitive route.

Why it matters

The affiliate program is GroupGPT's first real growth lever — a way for the people who already love the product to bring others in, with the tracking and admin tooling to support it properly. Selective clear answers a recurring request for control over what persists in a room. And the account-endpoint fix is the kind of work that never shows up in the UI but is exactly what you want a team to be doing on the routes that handle your data.