Terms of Service

This English text is a convenience translation. The Turkish version, Kullanım Koşulları ve Hizmet Sözleşmesi, is the binding text and prevails in case of any difference.

1. Parties and formation#

These Terms of Service and Service Agreement (the “Agreement”) are made between Erelsis Yazılım Teknolojileri Limited Şirketi (the “Provider”), located at Zafer Mah. 152 Cad. No: 35 Efeler / Aydın, registered with the Aydın Ticaret Sicili Müdürlüğü Trade Registry under number 23516-EFELER, MERSİS number 0352035535600001, tax office and number Güzelhisar Vergi Dairesi / 3520355356, and the business that signs up for the SignFlow service (the “Customer”).

The Agreement is concluded electronically when the acceptance box on the signup form is ticked and signup is completed. The person signing up confirms that they are authorised to accept this Agreement on the Customer’s behalf. The acceptance is recorded with the document version, date and time, IP address and browser details.

When a paid plan is purchased, the Distance Sales Agreement and the Pre-Contract Information Form are also accepted. How the Provider processes personal data as a data controller is explained in the KVKK Privacy Notice and the Privacy Policy; cookies are covered by the Cookie Policy. These documents form part of this Agreement.

2. Definitions#

• Service: the SignFlow software for sign and signage manufacturers, provided online at https://app.signflow.me, with all related features (orders, design approval, production workflow and department tasks, installations, stock and purchasing, notifications, dashboard, team and role management).
• Customer: the business, whether an individual or a legal entity, that subscribes to the Service.
• Account Owner: the user who created the account on the Customer’s behalf and holds every permission.
• User: a person invited by the Customer and given access to the Service, usually one of the Customer’s employees.
• Plan: a subscription package with defined features, limits and price, as published on the Pricing page.
• Subscription Period: the paid monthly or yearly term of use.
• Customer Data: all data and files the Customer and its Users enter into or upload to the Service, including information about the Customer’s own customers, orders, product details, notes, installation addresses and photos, design files, and stock and supplier records.
• Read-Only Mode: an account state in which Users can sign in, view and export data and manage billing, but cannot create new records or change existing ones.

3. Account and users#

Signup asks for a full name, email address, password, mobile phone number and company name. The phone number is verified with a one-time code sent by SMS and the email address with a link. The Customer is responsible for keeping this information accurate and current.

The Account Owner invites other Users by email and sets their roles and permissions. No User can grant a permission they do not hold themselves. The Customer is responsible for everything its Users do as if it had done it itself.

The Customer and its Users must keep their passwords confidential, must not share accounts, and must report any suspected unauthorised access to destek@signflow.me without delay. After repeated failed sign-in attempts an account may be locked temporarily for security.

4. Free trial#

New Customers can try the Service free of charge for 7 days without giving card details. During the trial all operational modules are available within the trial limits (5 users, 50 orders per month, 2 GB of storage). The Customer receives an email reminder before the trial ends.

If no paid plan is purchased by the end of the trial, the account enters Read-Only Mode. No data is deleted, and the Customer can purchase a plan at any time and pick up where it left off.

5. Subscription and renewal#

The Service is offered as a monthly or yearly subscription. The yearly price equals ten times the monthly price. A Subscription Period starts on the purchase day (Türkiye time) and renews on the same day of the period.

Unless the Customer turns off renewal, the subscription renews at the end of each period for the same plan and interval. Depending on the payment method the Provider offers, the renewal is paid either by an automatic charge to the stored card or, without storing the card, by the Customer from a payment link emailed at least 7 days before the period ends. Storing the card and charging it automatically rely only on the Customer's separate consent at checkout; this consent is recorded.

If a renewal charge to the stored card fails, it is retried on the 3rd and 7th day after the renewal date, followed by a 3-day grace period. If a subscription renewed by payment link is not paid by the end of the period, a 3-day grace period starts at the period end. During the grace period the Service remains fully available. If payment still has not been received when the grace period ends, the account enters Read-Only Mode and regains full access once payment is made.

6. Fees, payment and invoicing#

Current plan prices are published in Turkish lira on the Pricing page. Value added tax at 20% is added to the prices; the order summary on the checkout page shows the total payable including taxes.

Payments are made by credit or debit card through the licensed payment institution PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. (“PayTR”). Card details go directly to PayTR and never reach the Provider’s servers. With the stored-card payment method, the Provider stores only the card token issued by PayTR, encrypted, together with display details such as the last four digits, expiry date, bank and card type.

An invoice naming Erelsis Yazılım Teknolojileri Limited Şirketi as seller is issued after each successful payment. Customers registered for e-invoicing receive an e-Fatura; all others receive an e-Arşiv invoice. The Customer is responsible for the accuracy of the legal name, tax identification number, tax office, address and email in its billing profile.

The Provider may change plan prices. Price changes are announced at least 30 days in advance by email and in the app, and apply from the first renewal after the notice. A Customer that does not accept the new price can turn off automatic renewal before the renewal date.

7. Plan changes#

An upgrade takes effect immediately. The unused value of the current period is credited against the new plan’s price in proportion to the remaining time, and only the difference is charged.

Downgrades and changes between monthly and yearly billing take effect at the next renewal; until then the current plan stays in place. Downgrades are not refunded. Existing usage above the lower plan’s limits (for example the number of users) is not deleted, but new usage may be blocked until it falls below the limit.

8. Cancellation and refunds#

The Customer can turn off automatic renewal at any time on the Billing page under Settings. The Service then remains available until the end of the paid Subscription Period; after that the account enters Read-Only Mode and data export remains available.

Unless mandatory law requires otherwise, no partial refund is given for the unused part of a period. Duplicate or erroneous charges are refunded to the card used for payment after review. Details are on the Cancellation and Refunds page.

9. Read-Only Mode#

An account enters Read-Only Mode when the trial ends without a purchase, when a renewal remains unpaid after the grace period, or when a cancelled subscription reaches the end of its period.

In Read-Only Mode Users can sign in, view and export data, and manage billing; they cannot create new records or change existing ones. Read-Only Mode does not by itself lead to any data being deleted.

10. Acceptable use#

The Customer and its Users may use the Service only for lawful business purposes. In particular, they must not:

• Upload or share content that is unlawful, infringes the rights of others, contains malware or attacks anyone’s personal rights.
• Attempt to bypass, probe or break the Service’s security, the separation of other customers’ data, or its access controls.
• Reverse engineer, decompile or otherwise attempt to analyse the software, except as mandatory law permits.
• Resell, rent or offer the Service to third parties as a service without the Provider’s written permission.
• Place automated load on the Service beyond normal use or disrupt its infrastructure.
• Attempt to circumvent plan limits (number of users, monthly orders, storage, depots, maximum file size).

11. Customer Data and personal data protection#

11.1 Roles#

For personal data contained in Customer Data (for example names, contact details, addresses, tax or national ID numbers of the Customer’s own customers, and installation photos), the Customer is the data controller within the meaning of Law No. 6698 on the Protection of Personal Data (“KVKK”), and the Provider is the data processor acting on the Customer’s behalf and instructions. For account, session, billing and payment data the Provider is the data controller, as explained in the KVKK Privacy Notice.

11.2 Customer obligations#

The Customer is responsible for having a lawful basis for the personal data it enters into the Service, for informing the data subjects, for obtaining explicit consent where required, and for answering data subject requests. Requests that reach the Provider directly are forwarded to the Customer.

11.3 Provider obligations as data processor#

In line with Article 12 of the KVKK, the Provider:

• Processes Customer Data only to provide the Service and on the instructions the Customer gives through the Service; it does not use Customer Data for any other purpose and does not sell it.
• Takes the technical and organisational measures needed to provide an appropriate level of security, to prevent unlawful processing of and access to the data, and to safeguard it.
• Binds staff who may access Customer Data to confidentiality; platform staff have no screen for browsing customers’ business data, and access happens only when needed for support the Customer requested, for security, or to meet a legal obligation.
• Does not disclose personal data it learns in breach of the KVKK; this obligation continues after the Agreement ends.
• May use sub-processors for hosting, backups, email and SMS delivery and similar services; they are listed in the Privacy Policy and bound by comparable protection obligations.
• Processes Customer Data on servers provided by DigitalOcean, LLC in a data centre in the United States (New Jersey); this transfer abroad is made in line with Article 9 of the KVKK, relying on the standard contract published by the Board [Draft — the legal basis for the transfer awaits legal review]. The Customer is informed before a new sub-processor abroad is used.
• Informs the Customer without undue delay on becoming aware of a breach affecting Customer Data, and gives reasonable assistance with the Customer’s notifications to the Personal Data Protection Board and to data subjects.
• Provides reasonable information and cooperation so the Customer can meet its own KVKK obligations.

11.4 Data export#

The Customer can request a full export of its data at any time, including while the account is in Read-Only Mode. The export is prepared in the background as a ZIP archive containing one CSV file per data type and a manifest file describing the contents; it can be downloaded through the app and is kept for 7 days. A Customer that wants its own backups can use this feature regularly.

12. Security#

The Provider operates the Service with reasonable care and in line with accepted industry practice. The main measures are: separation of each customer’s data enforced at database level, passwords stored only as one-way hashes, encryption of sensitive fields such as national ID numbers and card tokens, role-based access control, an audit log of actions, file access only through short-lived signed links, and regular backups.

No system can be perfectly secure. The Provider is liable for incidents that occur despite reasonable measures only within the limits set out in section 15.

13. Availability#

The Provider makes reasonable efforts to keep the Service running without interruption or error, but does not commit to any particular availability percentage. Planned maintenance is announced in advance where possible and scheduled for off-peak hours. The Provider may improve or change features of the Service; material changes to the Customer’s detriment are notified under section 19.

14. Intellectual property#

All rights in the Service, the software, the interface, designs, trademarks and documentation belong to the Provider or its licensors. The Customer receives a non-exclusive, non-transferable, non-sublicensable right to use the Service for its own internal business during the Subscription Period and in accordance with this Agreement.

All rights in Customer Data remain with the Customer. The Customer authorises the Provider to process that data only as needed to provide the Service. Suggestions and feedback from the Customer may be used to improve the Service without any obligation to the Customer.

15. Limitation of liability#

The Provider’s total liability under this Agreement is limited to the subscription fees the Customer actually paid to the Provider in the 12 months before the event giving rise to the claim. The Provider is not liable for indirect damages such as lost profit, lost business, reputational harm or loss of use of data.

These limits do not apply in cases of intent or gross negligence by the Provider, or where mandatory law does not permit liability to be limited.

The Customer is responsible for the accuracy of the data it enters and for the business decisions it bases on that data.

16. Indemnity#

The Customer will indemnify the Provider against third-party claims, and the reasonable costs they cause, arising from a breach by the Customer or its Users of this Agreement, of the acceptable use rules in section 10, or of the law (including data protection law). The Provider will notify the Customer of any such claim without delay and cooperate reasonably in the defence.

17. Confidentiality#

Each party will use information it learns under this Agreement that is marked confidential, or that should reasonably be regarded as confidential, only to perform this Agreement, and will not disclose it to third parties except as required by law. This obligation survives the end of the Agreement. It does not cover information that is public, obtained independently of the other party, or required to be disclosed by a competent authority.

18. Suspension, termination and account closure#

18.1 Suspension#

The Provider may suspend access for a User or an account, for as long and as far as the situation requires, in the case of use that endangers the Service’s security or other customers, suspected abuse, or a request from a competent authority. The Customer is told of the suspension and the reason in advance where possible, otherwise immediately.

18.2 Termination#

The Customer may end the Agreement at any time by turning off automatic renewal or by requesting account closure. Either party may terminate the Agreement if the other materially breaches it and fails to remedy the breach within 15 days of written notice; for serious breaches that cannot be remedied, termination may be immediate.

18.3 Account closure and data deletion#

The Account Owner can request account closure in the app. For 30 days from the request the data remains available, read-only use and export remain possible, and the request can be withdrawn. Within a reasonable time after the 30-day period ends, authorised Provider staff delete the Customer’s business data (including orders, customers, files, stock records, user memberships, sessions, the billing profile, and the stored cards held at PayTR).

Invoices and payment records that tax and commercial law require to be kept (for the periods set by the Tax Procedure Law and the Turkish Commercial Code), audit log entries, consent records and the Customer’s name on those records are not deleted. User accounts that belong to no other business are anonymised. Deleted data drops out of backups within 30 days at the latest.

19. Changes to this Agreement#

The Provider may change this Agreement. Material changes are notified by email to the Account Owner and to the billing profile’s email address, and in the app, at least 30 days before they take effect. A Customer that does not accept a change can cancel its subscription before the effective date. Continuing to use the Service after the effective date means the change is accepted. Non-material changes (such as corrections or new features) take effect when published.

20. Notices#

Notices from the Provider to the Customer are sent to the email addresses of the Account Owner and in the billing profile and/or shown in the app. Email notices are deemed received on the day they are sent. The Customer must keep its email addresses up to date.

Notices from the Customer to the Provider are sent by email to destek@signflow.me. Notices with legal effect may also be sent through a notary or by registered post to Zafer Mah. 152 Cad. No: 35 Efeler / Aydın.

21. Evidence#

The parties agree that, in any dispute under this Agreement, the Provider’s system records (action and audit logs, session records, consent records, email records and payment records) constitute conclusive evidence under Article 193 of the Code of Civil Procedure No. 6100. This does not remove the right to submit counter-evidence.

22. Force majeure#

Neither party is liable for failing to perform its obligations because of natural disasters, epidemics, war, terrorism, fire, strikes, general power or communications outages, decisions of competent authorities, or similar events beyond its reasonable control. The affected party will inform the other without delay. If force majeure lasts longer than 60 days, either party may terminate the Agreement.

23. Governing law and jurisdiction#

This Agreement is governed by the laws of the Republic of Türkiye. The Courts and Enforcement Offices of Aydın have jurisdiction over disputes arising from it. Where the Customer is a consumer, its rights under Consumer Protection Law No. 6502 to apply to consumer arbitration committees and consumer courts are reserved.

24. Miscellaneous#

The Customer may not assign its rights and obligations under this Agreement to third parties without the Provider’s written consent. If any provision is held invalid, the remaining provisions stay in effect. A party’s failure to exercise a right is not a waiver of that right.

25. Entry into force#

This Agreement enters into force when the Customer accepts it electronically and remains in effect for as long as the subscription or account exists. Rights and obligations that arose before it ends, and provisions that by their nature must survive (such as confidentiality, liability, data retention and evidence), are not affected by its termination.

Contact: destek@signflow.me, Phone: 0553 521 17 47, Address: Zafer Mah. 152 Cad. No: 35 Efeler / Aydın.