Rejoin BI
The complete local platform for centralizing, governing and scaling Python analytics ecosystems.
The Concept
Rejoin BI was designed to change how companies manage analytical assets. Instead of isolated scripts and scattered dashboards, the system provides a unified hub where every Python project lives under one operational layer.
Centralization
Group multiple Python applications in a single standardized environment.
Governance
Control access, audit actions and manage permissions with granular rules.
Efficiency
Reduce the operational burden of maintaining separate servers and URLs for each project.
Privacy and Local Infrastructure
Running in a local environment keeps business intelligence and sensitive data inside your own infrastructure.
1. Installation and Environment Validation (Installed Platform)
The Rejoin BI installation already includes the required operational components. After installation, the launcher runs an automatic integrity validation.
Required Initial Validation
When RejoinBI.exe starts, the launcher validates the embedded installation components. This check confirms:
- Installed package integrity for stable platform operation.
- Availability of internal modules for core features.
Readiness Confirmation
After validation, the system releases the login screen and the initial configuration journey.
- Environment validated: continue with authentication and initial setup.
- Issue detected: repair or reinstall using the official installer before using the platform.
Important: if package validation fails, access remains blocked until the installation is repaired.
2. Configuration Journey (Installed Platform)
The Configuration Journey is the operational starting point. It guides the administrator through data folder selection, SMTP email setup, tunnel and domain, local server control, automatic backup and SQLite/JDBC connection.
Follow the steps in order to release access to the system.
Data Folder
Choose a safe folder to store the database and uploaded files. Tip: use a location covered by regular backup.
SMTP Communication and Alias
Configure the outgoing email server. This step is required for recovery emails, notifications and authentication PIN (2FA). If you use a shared mailbox, also fill the Alias field according to your manager's guidance.
Gmail SMTP Guide
Use the link below to open Gmail security settings and generate the app password required by the platform SMTP.
Requirement: App Password
Gmail does not accept your normal personal password in external systems. Enable two-step verification and generate a dedicated 16-character app password.
The platform uses Gmail with smtp.gmail.com, port 587 and STARTTLS enabled.
Tunnel, Network and Domain
Validate local access and, when your plan allows it, enable the secure tunnel to publish the organization's external domain.
Server Control
The server control is released only after required settings are validated, especially SMTP. After startup, the controls allow you to pause and restart the system. The panel also displays the active subscription duration; when it expires, the program closes automatically.
Automatic Backup
Configure a backup destination, choose the frequency and keep one incremental backup folder for local data. Only modified files are copied on each run. Manual backup is also available at any time.
SQLite (JDBC)
After the server starts, the database panel appears in the launcher. Use the generated URLs to connect DBeaver or other analysis tools directly to the local database.
3. Connectivity (Installed Platform)
The Connectivity section details the ways to reach the platform. Access on the local network (LAN) remains available for every installed environment. External access with a domain and secure tunnel depends on the subscribed plan.
Local Network
http://MACHINE_IP:8080
Access from any computer on the same Wi-Fi/LAN network.
External Network
https://yourcompany.rejoinbi.com.br
Secure access through Cloudflare Tunnel (Internet), available for Premium accounts. On the first setup, creating the tunnel and propagating external access can take 5 to 10 minutes.
Availability by plan: on the
Free plan, the platform runs only on the local network, through the address
http://MACHINE_IP:8080. Enabling the Cloudflare Tunnel and using
the domain yourcompany.rejoinbi.com.br is available only on the
Premium plan.
4. Permission Levels
Manual scope: sections 1 to 3 describe the installed platform. From section 4 onward, the instructions refer to the Rejoin BI web platform.
The Permission Levels model uses RBAC to make sure each person accesses only the tools and data authorized for their role.
The platform uses profile-based permissions to keep data secure and organized. Access levels are divided as follows:
5. Authentication and Token
Authentication and Token documents the full access path: credential validation, central subscription check, PIN delivery, password recovery and operational blocks. This section is intentionally more complete than the tour because it defines what must happen before the user reaches the platform.
Credentials
Email and password start the access request.
Central check
Plan, account status and operating window are validated.
PIN
Eligible profiles receive and confirm the temporary code.
Recovery
Password reset uses the registered email flow.
Access
The platform opens only after every required check passes.
Credentials
Users start with email and password. No internal fallback or cached status can release access.
Central validation
The desktop and web flows must confirm the account, active plan, subscription status and expiration before continuing.
PIN token
Master, Administrator and User profiles continue to PIN only after credentials and policy checks are accepted.
Fail closed
Unavailable API, invalid token, incomplete subscription data or operational block must stop the login with a clear message.
Credential validation and central policy
Enter the registered email and password, then submit. The platform checks identity, account state, subscription, plan and operating window before deciding whether the PIN step is allowed.
Must match an active account registered in the platform.
Password
Must be validated before any restricted page or PIN request.
Policy
Plan and subscription must come from the trusted central source.
Expected result: invalid credentials, blocked users or inactive plans stop here with an explicit message.
PIN confirmation
When the account requires PIN, type the code received by email. The PIN belongs only to the current login attempt and should appear only after credentials and central checks are valid.
Code field
Receives the temporary six-digit code sent to the account email.
Resend
Use only when the first code was not received or has expired.
No bypass
If policy validation fails, this screen must not be shown.
The PIN is temporary and must be validated only for the current login attempt.
Password recovery
Use Forgot your password to request a reset link for the registered email. The new password screen must confirm both fields before saving.
Registered email
The reset message is sent only to the account address.
Confirmation
The new password and confirmation fields must match before saving.
Operational blocks
If the system is outside the allowed operating window, users without the required management permission must be blocked immediately after credentials, before any PIN request.
System unavailable
The message appears after credentials and before PIN.
Invalid subscription
Expired, canceled or incomplete plans stop access.
Central API failure
If validation cannot be confirmed, the platform blocks the login.
6. Home Screen
A Tela Inicial é o centro de comando do usuário. Com uma interface limpa e moderna, ela integra a barra de ferramentas superior, o menu lateral de navegação e controles de sessão inteligentes para uma experiência produtiva.
Interface Principal
Após o login, você terá acesso à Dashboard principal. O design limpo prioriza a visualização de dados, mantendo as ferramentas essenciais acessíveis na barra superior.
Barra de Ferramentas (Topo): No canto superior direito, acesse rapidamente Tela Cheia, Captura de Tela, Perfil e Configurações.
Menu Lateral (Sidebar)
O ícone de menu no canto superior esquerdo expande/recolhe a navegação lateral.
Estrutura de Navegação
A sidebar organiza verticalmente todos os módulos disponíveis para o seu nível de permissão.
- ● Topo: Logo e Identidade Visual.
- ● Centro: Links de Navegação (Módulos).
- ● Base: Ações de Conta.
Gestão de Conta e Segurança
Fixado no rodapé do menu lateral, você encontra os botões de controle de sessão.
Ao clicar em Alterar Senha, um formulário seguro será exibido. É obrigatório o fornecimento da senha atual para autorizar a mudança.
Barra de Ferramentas (Toolbar)
Localizada no topo direito, oferece utilitários rápidos para melhorar sua experiência de uso.
Captura Inteligente e Perfil
Opções de Exportação
Ao clicar no ícone de câmera, você pode baixar a tela atual como PDF, Imagem (PNG) ou solicitar uma Análise via IA.
Perfil do Usuário
Visualize rapidamente seus dados cadastrais e status da conta no modal de perfil.
Temporizador de Sessão
No rodapé da página, um cronômetro exibe o tempo restante da sua sessão (inicialmente 30 minutos). Se o contador chegar a zero, você será desconectado automaticamente por segurança.
Modo Apresentação: Ao clicar no cronômetro, você pode Pausar a contagem. Isso evita que o sistema faça logout durante reuniões ou apresentações importantes.
Painel de Configurações
Ao clicar no ícone de engrenagem, no canto superior direito, a plataforma abre um painel lateral com os módulos administrativos e de configuração. Esse painel permite navegar rapidamente entre cadastros, permissões, comunicação, personalização da plataforma e demais recursos de gestão.
Nota: As opções exibidas podem variar conforme o seu Nível de Permissão e os recursos habilitados para a conta.
7. Register User
Guided user creation
Create access records with identity data, department, contact details and profile level.
8. Edit Users
Guided user maintenance
Search, filter, edit, reset passwords and monitor online users.
9. Manage Permissions
Guided permission map
Allow or block pages per user while preserving access hierarchy.
10. Manage Groups
Guided group management
Group users, apply shared permissions and review linked accounts.
11. File Upload
Guided file publishing
Send files to virtual environments and monitor gateway status.
12. Internal Announcements
Guided internal communication
Publish targeted notices with attachments and reading history.
13. WhatsApp Settings
Guided WhatsApp operations
Connect sessions, organize groups and send scheduled messages.
14. Email Management
Guided email operations
Configure accounts, recipients, attachments and email campaigns.
15. Platform Settings
The Platform Settings module centralizes the visual identity of the solution, including logos, browser icon, browser title and previews for both the login page and authenticated area.
Guided platform branding
Customize logos, browser title, colors, previews and visual identity.
16. Workspace
Workspace centralizes isolated virtual environments, project publishing, current files, version history, terminal access and local notification rules for each app.
Guided Workspace flow
Create environments, publish apps, manage versions and notifications.
17. Manage Pages
Manage Pages defines the visible navigation per virtual environment, including parent, child and nested items, icons, route or HTML target, RLS readiness and sidebar order.
Guided Manage Pages flow
Build navigation with parent, child and nested pages, routes, icons and RLS.
18. Manage RLS
Manage RLS centralizes row-level security rules by user, validated page, virtual environment, allowed dimension and template columns.
Guided Manage RLS flow
Create manual or batch rules to restrict data by user.
19. AI Settings
AI Settings connects Rejoin BI engines, page-specific training and the rules used by AI Analysis when generating reports.
Guided AI Settings flow
Connect agents, link pages and train analysis by context.
20. Audit System
Audit System centralizes access events, blocks, filters, exports and technical details for operational review.
Guided Audit System flow
Review access, blocks, actions and technical details.
21. System Management
System Management controls operating windows, current status and actions to activate, deactivate, edit and delete schedules.
Guided System Management flow
Create availability schedules and validate operational blocks.
22. ESP32 IoT Monitor
The Rejoin BI IoT Monitor uses an ESP32 to periodically validate Wi-Fi, the session and platform availability. The operating state is shown by the board LED.
Download and flash
Download the official ZIP, extract the project, open it in PlatformIO and flash the firmware to the ESP32 connected over USB.
Open the local configuration
The password is RJ + the same 6 characters shown at the end of the network name, always uppercase. Example: for RejoinBI-IOT-34E3EC, use RJ34E3EC. Then open http://192.168.4.1.
Connect and authenticate
Select a 2.4 GHz network, enter the password, the platform HTTPS address, the interval and the LED pins. Then sign in with the Rejoin BI account and confirm the PIN when prompted. The session identified as IoT does not expire from inactivity, but it can be revoked by disabling or removing the account.
Read the LED
Steady on means normal operation; slow blinking means configuration or connection; fast blinking means a network, session or platform failure.
Change a setting
With the board already on, hold BOOT for 3 seconds to reopen the temporary network without erasing current settings.