Registration and Onboarding

NowToPrint keeps signup short and assigns access on the server. Onboarding asks how you will use the platform; it does not ask you to buy or choose a package.

Flow

Signup
  -> email verification
  -> usage type
  -> optional passkey enrollment
  -> server-assigned membership status
  -> fresh sign-in
  -> profile and activation steps

Signup and identity

Signup collects the person's first name, last name, email, authentication method, and legal consent. Company, tax, team, membership, and pricing questions are not part of signup.

For email/password signup, Firebase creates the credential. The application sends only a verified Firebase ID token and validated display name to the idempotent Better Auth exchange; it never sends the password to that endpoint. An email match does not merge two identities. Signup and recovery responses do not reveal whether an account exists.

Usage type and initial membership

Usage type	Initial state	Available immediately
Individual or corporate print customer	Print Customer	Basic purchasing and account capabilities
Agency / Broker	Review-controlled account	Basic customer capabilities; pilot features remain closed
Print Shop / Producer	Producer Candidate	Basic customer capabilities; producer operations remain closed
Supplier	Supplier Candidate	Basic customer capabilities; supplier operations remain closed

Producer and supplier candidates do not gain quoting, publishing, public listing, invoicing, or other producer/supplier authority merely by registering. The dashboard explains the review state and next profile steps.

Advanced memberships are not purchased or self-applied for. The platform may invite eligible accounts after evaluating operating history, participation, quality, expertise, trust, compliance, and other risk signals. Exact scoring, thresholds, and anti-abuse controls are not public. An invitation never creates authority by itself: independent approval, acceptance, a valid time window, and the current security policy are still required.

Membership access can expire, be revoked, or be reassessed. There is no recurring membership package price at launch, but transaction, service, logistics, payment/financing, and optional service fees may apply.

Passkey security

Onboarding offers an optional device passkey. A passkey is phishing-resistant and can also be used from the sign-in screen. Unsupported browsers can finish onboarding without it, and enrollment remains available in Profile later.

Privileged or sensitive actions may require a recently user-verified passkey even if onboarding enrollment was skipped. TOTP does not replace that critical-action proof.

Completion and fresh sign-in

Completing onboarding revokes the setup session so that the next session is issued with the new membership and policy facts. Select Sign in to continue; a validated callback returns you to the intended local page. External or malformed callback targets are ignored.

Platform roles

Public signup never creates a platform administrator. A normal verified user may receive a separately reviewed platform-role request. A different platform owner must approve it, and phishing-resistant authentication remains mandatory for privileged operations.