Informar sobre problemas de seguridad

Security

Last updated: July 2026

Pedal Eléctrico takes the security of our website and customer data seriously. If you've discovered a potential vulnerability, we want to know about it — responsibly and privately, before it's disclosed publicly.

1. Scope

This policy covers security issues affecting:

• pedaleléctrico.shop and its checkout/payment flow
• Customer account systems and stored data
• Any subdomains or services operated directly by Pedal Eléctrico

It does not cover third-party services we integrate with (e.g., payment processors, shipping carriers) — please report issues with those directly to the relevant provider.

2. What to Include in Your Report

• A clear description of the vulnerability and its potential impact
• Steps to reproduce the issue
• Any relevant screenshots, logs, or proof-of-concept code
• Your contact information, if you'd like a response

3. Responsible Disclosure Guidelines

When testing or reporting, please:

• Avoid accessing, modifying, or deleting data that isn't your own
• Do not perform testing that could degrade Site performance for other users (e.g., denial-of-service testing)
• Give us a reasonable opportunity to investigate and address the issue before any public disclosure
• Do not attempt to exploit the vulnerability beyond what's necessary to demonstrate it

4. Our Commitment

If you report a vulnerability in good faith and follow these guidelines, we will not pursue legal action against you for your research. We will:

• Acknowledge receipt of your report within 3 business days
• Investigate and validate the issue
• Keep you reasonably informed of our progress toward a fix
• Credit you (if you'd like) once the issue is resolved, at our discretion

5. What Not to Report Here

This channel is for security vulnerabilities only. For general customer support, order issues, or billing questions, please use info@pedalelectrico.shop instead.

6. Contact