Terms and Conditions

Definitions

• Service: Authentication and login system that facilitates access to our platform through user credentials.
• User: Any person who accesses, registers or uses our authentication system.
• Credentials: Information that allows identifying and verifying the user's identity, mainly email and password.
• Profile data: Minimum information associated with your account, such as email and profile picture.

2. Registration and User Account

2.1 Registration Process

To access our services, you must create an account by providing a valid email address. The registration process is designed to be simple and require only essential information:

• A valid email address that will be your primary identifier.
• A password that meets our minimum security requirements.
• Optionally, a profile picture that you can add or modify later.

By registering, you declare and guarantee that:

• You are at least 18 years old or have the consent of your parents or legal guardians.
• The information provided is accurate, true, current, and complete.
• The email address provided belongs to you legitimately.
• You are not impersonating another person or entity.

2.2 Account Security

The security of your account is fundamental for us, but it also depends to a great extent on your actions. To keep your account secure:

• Use a unique and strong password that you do not use in other services.
• Maintain the confidentiality of your access credentials at all times.
• Do not share your password or login information with third parties.
• Log out after using our services, especially on shared devices.
• Notify us immediately if you detect suspicious activity or unauthorized access to your account.

2.3 Account Responsibility

You are fully responsible for all activities carried out under your account. We reserve the right to:

• Suspend or cancel accounts with suspicious activities or that violate these Terms.
• Request additional information to verify your identity in case of unusual activities.
• Implement additional security measures such as two-factor authentication in the future.

3. Login System

3.1 Authentication Process

Our login system is designed to be secure and simple:

• The login process requires only your email address and password.
• We may implement additional verification methods to protect your account.
• We use secure connections (HTTPS) to transmit your credentials.
• Your login data is processed using modern encryption techniques.

3.2 Active Sessions

For your convenience and security:

• Sessions have an expiration time due to inactivity.
• You can view and manage your active sessions in your user profile.
• You have the ability to remotely close sessions on other devices.

3.3 Access Recovery

If you forget your password or have difficulty accessing it:

• You can request a password reset at any time.
• The recovery process is carried out through a secure link sent to your email address.
• The reset links have a limited validity for security.
• In case you do not have access to your email, contact us for specialized assistance.

4. User Data and Privacy

4.1 Collected Data

Our authentication system collects only the essential information for its operation:

• Email as the main identifier of the account.
• Password (stored securely using hash techniques).
• Profile picture (optional).
• Basic technical data such as IP address, device type, and browser for security and statistics.
• Login records for your account protection.

4.2 Use of Data

The collected data is used exclusively for:

• Facilitating the authentication process and secure access.
• Identifying you within our system.
• Protecting your account from unauthorized access.
• Communicating with you about security matters or important changes.
• Complying with legal obligations when necessary.

4.3 Data Protection

Your privacy is important to us:

• We implement technical and organizational measures to protect your data.
• We do not share your information with third parties without your explicit consent.
• We apply the principles of data minimization, collecting only what is strictly necessary.
• You can request access, correction, or deletion of your personal data at any time.

5. Acceptable Use

When using our authentication system, you commit to:

• Not trying to access accounts that do not belong to you.
• Not performing brute force attacks or other attacks against our system.
• Not using automated tools to create fake accounts or log in.
• Not using our services for illegal or fraudulent activities.
• Not trying to bypass, disable, or interfere with security measures.
• Not performing actions that could compromise the stability or security of our system.
• Not sharing your access credentials publicly.

6. Modifications and Communications

6.1 Modifications to the Terms

We reserve the right to modify these Terms at any time:

• Modifications will take effect upon publication on this page.
• For significant changes, we will notify users via the registered email address.
• Continued use of our services after such changes constitutes your acceptance of them.
• We recommend periodically reviewing these Terms.

6.2 Communications

For important communications:

• We will primarily use your registered email address.
• It is your responsibility to keep your email address updated.
• Important notifications include security alerts, changes to the Terms, or access confirmations.

7. Termination

We reserve the right to:

• Suspend or cancel your account if you violate these Terms.
• Restrict access to users who represent a risk to the platform.
• Delete inactive accounts after a prolonged period of inactivity.

You can request the deletion of your account at any time, which will result in the permanent deletion of your profile data in accordance with our retention policy.

8. Limitation of Liability

To the maximum extent permitted by applicable law:

• We do not guarantee that the service will be uninterrupted or free of errors.
• We are not liable for losses or damages resulting from the use or inability to use the service.
• We do not assume liability for unauthorized access when resulting from negligence in credential protection.
• We implement reasonable security measures, but no security system is infallible.

9. General Dispositions

• These Terms constitute the complete agreement between you and us regarding the use of the authentication system.
• If any provision of these Terms is considered invalid, the remaining provisions will remain valid and enforceable.
• Our authentication system is designed to be simple and collect only essential information.
• The failure to exercise a right does not constitute a waiver of such right.

10. Contact

If you have questions, concerns, or need assistance related to these Terms or our authentication system, you can contact us through:

• Our contact form on the main page.
• Support email: info@handmadeart.store
• Help section within our platform.

We strive to respond to all inquiries within a maximum of 48 business hours.