Terms and Conditions

Version 1.0 · Effective 2026-05-08

By using firmar.ec you accept these terms. If you disagree, please do not use the service.

1. Nature of the service

firmar.ec is a free, open-source tool operated by IDK Manager as a contribution to Ecuador’s digital ecosystem. It is not a commercial service: there is no premium plan, we receive no payments, and we do not collect personal data on our servers.

Cryptographic processing (signing and verification) occurs entirely in your browser. We do not act as custodians of your certificate or your documents.

2. User responsibility

You are solely responsible for:

• Your digital certificate and its private key. You lose control if you share it or leave it on a compromised device.
• The legal validity of your signatures. Ensure your certificate is current, issued by an Ecuadorian ECI accredited by ARCOTEL, and that the document you are signing is eligible for electronic signature under your jurisdiction and use case.
• The content of the document. firmar.ec does not inspect, validate, or store content. Cryptographic verification only confirms who signed and that the document was not altered afterwards.

3. No warranty

The service is provided “as is” (GNU AGPL v3, sections 15 and 16). IDK Manager provides no express or implied warranty regarding fitness for a particular purpose, merchantability, or freedom from defects. We also do not guarantee continuous availability: the service may undergo maintenance, experience failures, or be discontinued.

4. Acceptable use

You may not use firmar.ec to:

• Sign documents on behalf of another person without their authorisation (impersonation)
• Produce forged certificates, signatures, or documents
• Attack service availability (DoS, abusive scraping, intrusive automated scanning)
• Any activity unlawful under Ecuadorian law

5. Intellectual property

The source code is under the GNU Affero General Public License v3.0 (AGPL-3.0) (full text). You may use, study, modify and redistribute the software; but the AGPL requires that, if you modify it or integrate it into a system you offer to third parties (including as a network service), you publish the complete source code of that system under the same license. For uses the AGPL does not allow — for example, integrating firmar.ec into a proprietary/closed-source commercial product or service for profit without releasing your code — a commercial license is available (see LICENSE-COMMERCIAL.md or email [email protected]). The “firmar.ec” and “IDK Manager” trademarks and logos are owned by IDK Manager; unauthorised forks must rebrand.

6. Limitation of liability

To the maximum extent permitted by Ecuadorian law, IDK Manager shall not be liable for direct, indirect, incidental or consequential damages arising from the use or inability to use the service, including data loss, lost profits, or reputational harm. Your sole remedy upon a failure is to stop using the service.

7. Changes

We may modify these terms at any time. Substantive changes are announced 30 days in advance at /en/terms and via the repository RSS feed. Continued use after the effective date constitutes acceptance.

8. Governing law and jurisdiction

These terms are governed by Ecuadorian law. Any dispute shall be submitted to the ordinary courts of Quito, Pichincha, Ecuador, except as mandatory law may otherwise require.

9. Contact

• General / support: GitHub Issues
• Personal data (LOPDP): controller IDK Manager — channels at idkmanager.com/contacto
• Security: GitHub Security Advisories