Client Flow

What the client sees, step by step, all inside native WHMCS modals.

Entry points

• Sidebar link (Close/Delete My Account) in the configured Account / Your Profile panels.
• Deep link: any client-area URL ending in #deleteaccount (e.g. clientarea.php#deleteaccount) — for sidebar-less templates and custom menus. A copy button lives in Settings.

Modal steps

1. Password — account password (+ reCAPTCHA when configured).
2. Verification code (optional) — a 6-digit code is emailed automatically when the step opens; 10-minute expiry, resend throttled to one per minute, five wrong attempts burns the code.
3. Exit survey (off/optional/required) — reason + free text; required mode blocks continuing without it.
4. Save offer — shown only when the reason matches an admin-configured offer; claiming keeps the account and ends the flow.
5. Confirm — shows safeguard warnings, finance balances and the blocked notice when applicable; the request button is disabled while blockers stand.
6. Done — end date, client + admin emails sent, client logged out.

While a request pends

• Every login re-opens a locked, undismissable notice (end date + text). Owners choose Confirm (acknowledge + logout), Cancel (revoke), or a one-time Extension (+N days).
• Review-held requests show a locked under review notice with Cancel only — no countdown runs until approval.
• Sub-users without permission get Logout only. Owners flag users on the core /account/users/<id>/permissions page.