Security Policy

Coterien Collective is committed to maintaining the security and integrity of the service we provide.

Security Practices

We implement reasonable technical safeguards designed to protect the Service and its users, which may include:

• Secure password storage using industry-standard hashing
• Secure HTTPS communications
• Access controls for administrative functions
• Monitoring and logging for suspicious activity
• Abuse prevention and rate limiting mechanisms
• Infrastructure and database security practices

Admin security

Administrative areas are protected by authentication, role-based access controls, rate limiting, and permission checks. Administrative activity may be logged for security and audit purposes. Additional controls such as two-factor authentication and IP restrictions may be used for privileged accounts.

Password Reset and Email Verification

Account security features may include email verification, secure password reset flows, password hashing, session protection, and abuse-prevention controls.

Breach Handling

If we become aware of a security incident involving personal information, we will investigate and take reasonable steps to contain and remediate the issue. Where legally required, we will notify affected individuals and relevant authorities.

User Responsibilities

Users are responsible for maintaining the confidentiality of their login credentials.

• Users should:
• Use strong and unique passwords
• Protect access to their account
• Report any suspected unauthorised access immediately

Vulnerability Reporting

Individuals who identify a potential security vulnerability are encouraged to report it responsibly.

Security reports should be submitted to:

• support@coterien-collective.com

Reports should include sufficient information to allow investigation and verification of the issue.

Users must not exploit vulnerabilities, access another user’s account or data, disrupt the Service, perform denial-of-service testing, introduce malware, or publicly disclose vulnerabilities before we have had a reasonable opportunity to investigate.

Security Limitations

While reasonable safeguards are implemented, no digital service can guarantee complete protection against all potential security threats.