User and Membership Agreement

Service provider and data controller

1. Parties, subject matter and scope

This User and Membership Agreement governs the terms of use of the account, customer portal and related services between Kuzgun Yazılım Bilişim ve Danışmanlık Limited Şirketi, whose details appear above (“KuzgunHost”), and the authorized user acting on behalf of the natural or legal person that creates the customer account (“User”).

For the purchase of a particular product, the preliminary information form, distance sales agreement, service-specific terms, acceptable use policy and order summary separately presented to the User apply together with this agreement to the relevant transaction. Mandatory statutory provisions and rights in favor of consumers are reserved.

2. Formation of the agreement and membership requirements

The agreement is concluded electronically when the User completes the registration form, is able to view the mandatory documents, and completes an express confirmation action such as “Create account.” Membership alone does not create any fee or purchase obligation. Consent to receive commercial electronic communications is not a condition of membership or the purchase of services.

If the User is a natural person, the User must have legal capacity and be at least eighteen years old. A user acting on behalf of a legal entity represents that they are authorized to represent the company or carry out the relevant transaction.

3. Accuracy of account information and corporate accounts

The User must ensure that their name, contact details, billing information and service-specific information are accurate, current and belong to the User or the person they represent. Corporate accounts must include complete business name, tax office, tax identification number and authorized representative details. Changes must be updated promptly through the customer portal.

The account owner manages the roles and permissions of sub-users invited by the account owner. The principle of least privilege must be applied to operations such as payment, domain name, server, invoice and user administration. Access may be restricted for corporate users found to lack authorization.

4. Authentication and account security

Passwords, verification links, recovery codes and two-factor authentication devices are personal and must not be shared. The User must report suspected access without delay, sign out on shared devices, and secure the registered email account. KuzgunHost cannot view passwords in plain text.

When sign-in with Google is selected, Google acts solely as the authentication provider. A first-time Google user cannot create a customer account without completing the account type, contact information and mandatory agreement steps. Re-entry of a password or two-factor authentication may be required for critical operations.

Proportionate security controls such as IP checks, device cookies, rate limits, verification and bot protection may be applied to prevent automated registrations and spam. A short-term restriction on new registrations from the same device may apply after successful registration; legitimate users retain the right to request a review through support.

5. Catalog, cart, order and pricing

Prices, features, availability and delivery times on product pages constitute pre-order information. On the cart and final confirmation screens, the User sees the product, term, configuration, setup fee, discount, VAT, initial payment, renewal fee and, where applicable, automatic renewal status. A paid order is placed by confirming the button that expressly states that the order entails an obligation to pay.

A price or discount value submitted by the browser is not binding; amounts are recalculated on the server when the order is created, using the current catalog, promotion, capacity and tax rules. The User is informed before payment if the price or availability has changed.

6. Promotional wheel and discounts

The promotional wheel may be offered only to users who receive a dedicated link. Unless expressly stated otherwise, one promotional opportunity is granted per account and device. The result is generated and recorded on the server; the interface animation does not alter the result.

An earned discount is automatically applied, within its validity period, to the cart calculation for eligible plans in the account and is shown as a separate line in the order summary. The discount cannot be redeemed for cash, transferred or, unless otherwise stated, combined with another coupon. Blank results do not create a reward. A technical error cannot create duplicate discounts or entitlements; the verifiable record controls.

7. Payment, card security and billing

Card payments are collected through the secure component of the authorized payment institution. KuzgunHost does not store the full card number or CVV; a payment result is finalized only through a verified server-to-server notification or authorized integration. A repeated notification of the same payment event does not create a second order or service.

A bank transfer/EFT is matched using the order number, and the service may remain in “awaiting payment” status until it is confirmed. Billing details must be verified before ordering. To the extent permitted by law, a support request may be opened to correct inaccurate billing information.

8. Delivery, activation and service management

The activation time is shown on the final confirmation screen according to the product and configuration. After payment is verified, the service may be provisioned automatically or submitted for authorized approval for a risk or capacity check. An “Active” notification is not sent until setup has been completed successfully.

A server access password is not sent in a plain-text email; a time-limited link, password setup at first sign-in, or reset through the portal is used. Scheduled work may be carried out for maintenance, security and capacity requirements; advance notice is provided where practicable.

9. Domain name registration and transfer

The User must ensure that registrant and contact details are accurate, documents required by registrar rules are provided, and third-party rights are not infringed. For “.tr” extensions, registrant details and, where required, supporting documents may be mandatory.

A transfer requires the domain name to satisfy the transfer conditions, the transfer lock to be removed, and a valid EPP code. Eligibility is checked again before payment. If the domain name is registered by another person in the interim, the amount collected will be refunded or credited to the User's balance under the applicable payment and refund rules.

10. Renewal, expiry and plan changes

The service term, renewal fee, payment due date and automatic renewal preference are shown in the customer portal. A stored card or balance is used for automatic renewal only where the User has a valid preference in place. After a failed collection attempt, payment status is verified before another charge is made.

The schedule for late payment, suspension and data deletion may vary by product and is clearly communicated to the User. An upgrade fee may be calculated pro rata for the remaining days; for technical reasons, a downgrade may take effect on the next renewal date. The applicable price and effective time are shown before the transaction.

11. Acceptable use

The User must use the services in compliance with applicable law, third-party rights and service-specific terms of use. Spam, phishing, malware, unauthorized access, attacks or preparation for attacks, deceptive traffic, unlawful content, infringement of intellectual property rights, consumption of resources in a manner that adversely affects others, and use that jeopardizes infrastructure security are prohibited.

Where there is an urgent and serious security threat, the affected service may be restricted immediately. In other cases, notice, an explanation and an opportunity to remedy are provided as appropriate to the nature of the breach. Abuse reports are recorded and objections are reviewed proportionately.

12. User content, backups and responsibilities

Rights in content uploaded by the User belong to the User or the relevant rights holder. The User acknowledges that they have the authority required to host and technically process the content and must ensure the security of applications, passwords and access credentials.

Backups are provided only within the ordered scope and retention policy. A single backup copy must not be relied upon; an independent copy should be kept for critical data. If KuzgunHost detects a failure in a committed backup service, it informs the User and applies the service-specific remedy or SLA terms.

13. Intellectual property

Rights in the KuzgunHost brand, software, interface, images and documentation belong to their respective rights holders. The User is granted only a limited, non-transferable right of use for the purpose of benefiting from the service. Reverse engineering, circumvention of security measures and unauthorized reproduction are prohibited, subject to cases permitted by law.

14. Personal data, privacy and third-party services

Personal data is processed in accordance with the Personal Data Privacy Notice and the relevant preference records. Third parties such as the payment institution, domain registrar, Google authentication provider, e-invoice provider or virtualization infrastructure provider may have separate terms and privacy notices for their respective functions.

KuzgunHost does not guarantee that a third-party integration will remain uninterrupted, but applies reasonable technical measures, error logging and retry procedures to support service continuity. Appropriate notice is given if a third-party change materially affects User rights.

15. Suspension, termination, cancellation and withdrawal

In the event of late payment, a serious security risk or unlawful use, the service may be restricted in proportion to the severity of the event. Reasonable notice is given to the User except in emergencies. Closing an account does not extinguish outstanding debts, domain name responsibilities or statutory retention obligations.

The consumer's withdrawal and refund rights are explained in the order-specific preliminary information and distance sales agreement according to the type of service, when performance begins, any express request for early activation, and statutory exceptions. This agreement does not restrict the consumer's mandatory rights.

16. Scope of liability and force majeure

Each party is liable for direct losses arising from its own fault within the framework of applicable mandatory provisions. In consumer transactions, no interpretation may create an unfair term or exclude KuzgunHost's liability for gross negligence or willful misconduct.

In the event of a natural disaster, war, widespread communications or power outage, order of a competent authority, or similar event beyond a party's reasonable control, the affected obligation may be suspended for the duration of the event's impact. Reasonable efforts will be made to mitigate the impact and restore the service.

17. Notices, records and amendments

Order, agreement, security, invoice and service notices may be sent to the registered email address and customer portal. The User must keep the email address current. System and transaction records are subject to the statutory rules of evidence to the extent of their reliability and integrity; the consumer's statutory evidentiary rights are not restricted.

This agreement may be updated with a version number and effective date following a change in law or service. Material changes adverse to the User are communicated through an appropriate channel before taking effect; the immutable agreement record for a previous order is preserved.

18. Governing law and disputes

The laws of the Republic of Türkiye apply. Consumers may apply to a Consumer Arbitration Committee or Consumer Court within the applicable monetary thresholds and territorial rules; mediation and other mandatory procedural provisions are reserved. General rules on subject-matter and territorial jurisdiction apply to commercial users.

Effective date: July 30, 2026