Access security

Two kinds of access

• Admin: dashboard access with email and password (complexity rules). An email alert is sent on sign-in from an unknown device.
• Member (seller): no password; access to their own portal only, through the personal link in their invitation.

Seller device verification

The first time the portal is opened on a device, YourClub emails an activation link, valid for a few minutes. The device is then remembered (about 13 months). A portal link forwarded to someone else is therefore not enough to get in.

Support seller links

To help a seller, an admin can enable seller links for a campaign (Active campaigns > ⚙): they open the portals without verification. Disable them as soon as the help is done.

Good practice

• Do not forward invitation or confirmation emails.
• Remove or deactivate members who leave the club; give the admin role only to people who manage sales.
• Disable support seller links after use.