Terms of Use

1. Parties and definitions

These Terms of Use ("Terms") apply between Neden Olmasın Reklam ve İlet. Hiz. Dan. Tic. Ltd. Şti. (the "Company") and the persons who visit the gospock.com website and the customers who use the GOSpock service. GOSpock is the brand and service operated by the Company.

In these Terms:

• Service: the software service offered by the Company under the GOSpock brand, consisting of sending push notifications to web browsers and to iOS and Android apps, campaign management, event analytics and campaign attribution.
• Customer: a legal entity, or a natural person acting in the course of its trade or profession, that signs a service contract or order form with the Company to use the Service.
• Service Contract: the service contract and order form signed between the Customer and the Company, together with their annexes.
• Panel: the web-based administration interface through which the Customer manages the Service.
• Panel user: a person invited to the Panel by the Customer who uses the Panel on the Customer's behalf (team member).
• SDK: the GOSpock software development kits and related code snippets that the Customer integrates into its website or mobile app.
• End user: a person who uses the Customer's website or mobile app.
• Customer data: data sent to the Service by the Customer or by end users through the SDK or the Panel, and campaign content created by the Customer.
• Visitor: a person who visits the gospock.com website.

2. Scope and order of precedence

These Terms apply to (a) the use of the gospock.com website and (b) the use of the Service. The website is published to provide information about the Service; its content may be updated without prior notice and does not constitute a binding offer.

The paid Service is subject to the Service Contract signed in writing between the Customer and the Company. These Terms form an integral part of the Service Contract; however, if the Service Contract conflicts with these Terms, the Service Contract prevails.

The Service is offered only to businesses acting for commercial or professional purposes; it is not intended for consumers.

Information on the processing of personal data is set out in the Privacy Policy, the KVKK Notice and the Cookie Policy; the rules on personal data processed on the Customer's behalf are set out in the Data Processing Agreement.

3. Accounts and access

There is no public sign-up for the Service. A Customer account is opened after the Service Contract is signed, and the Panel can only be accessed by invitation. The Customer may invite team members to the Panel, set their roles and remove their access; the number of team members is subject to package limits.

The Customer is responsible for:

• ensuring that its Panel users comply with these Terms, and being responsible for all their actions in the Panel as if they were its own;
• ensuring that Panel users keep their sign-in credentials personal, and encouraging the use of two-factor authentication or passkeys;
• keeping secret API keys secret and not using them in public code or client-side apps (only public SDK keys are used client-side);
• removing the access of departing employees without delay;
• notifying info@gospock.com immediately if it suspects unauthorised use of its account or that a key has been compromised.

The Customer is responsible for rotating its keys through the Panel when needed.

4. The Service

As of the date of these Terms, the Service comprises the following functions:

• Push notifications: sending notifications to web browsers (Chrome, Edge, Firefox, Safari) using standard Web Push (VAPID); to iOS apps through the Apple Push Notification service (directly or through Firebase); and to Android apps through Google Firebase Cloud Messaging.
• Campaigns: targeting the audience by platform and notification channel, notification content with images, the web address or app screen the notification opens, sending now, scheduled or recurring, test sends to test devices paired by QR code or link, and campaign reports (sent, delivered, opened).
• Event analytics: recording usage events sent from the Customer's site or app through the SDK (e.g. app open, screen view, content view, video start, notification open); event catalog, event explorer and live monitoring.
• Campaign attribution: linking events that occur within 30 minutes after a notification click, or after a link carrying the gs_cid parameter is opened, to the relevant campaign.
• Panel: team members added by invitation, two-factor authentication and passkeys, multiple apps per account with strictly separated data, Turkish and English interface.

The Service is provided as software running on the Company's servers; no copy of the software is delivered to the Customer (except the SDKs). The detailed scope of the Service is determined by the Customer's package and the Service Contract.

5. Packages, limits and fees

5.1 Packages and limits

The Service is offered in Starter, Growth, Pro and Enterprise packages. The limits of each package, such as active devices, notifications per month, events per month, data retention (90, 180 or 395 days; for Enterprise, the period set in the Service Contract), team members and apps, are specified in the Service Contract or order form.

Monthly counters run by calendar month in UTC and reset at the start of each calendar month.

5.2 Reaching a limit

• When a limit is approached or reached, the Company may inform the Customer through the Panel and/or by e-mail.
• No data is deleted or lost because a limit is reached. If the event limit is exceeded, incoming events are not deleted; only their processing may be delayed.
• A campaign that has started is completed even if a limit is reached.
• Charges for exceeding a limit, package upgrades and any other consequences are determined by the Service Contract or order form.
• Data retention is a retention rule, not a limit: raw event data that has reached the end of the package's retention period is deleted as described in the Data Processing Agreement.

5.3 Fees and invoicing

Fees, billing periods, payment terms and invoicing are set out in the Service Contract or order form. Unless agreed otherwise, value added tax and other statutory taxes are added to the fees. Invoices are issued in accordance with the applicable tax legislation. In the event of late payment, the consequences set out in the Service Contract and by law, as well as Section 12 of these Terms, apply.

6. Customer obligations and acceptable use

6.1 General obligations

The Customer uses the Service in compliance with applicable law, these Terms and the Service Contract. In particular, the Customer is responsible for:

• having a lawful basis and obtaining the necessary permissions for processing its end users' personal data;
• obtaining notification permission from end users through the permission mechanism provided by the operating system or browser;
• providing cookie and consent notices on its own websites and apps;
• preparing its own privacy notice (aydınlatma metni) for end users and naming GOSpock in it as a data processor;
• complying with Law No. 6563 on the Regulation of Electronic Commerce and related legislation and the rules of the Message Management System (İYS) where the content is a commercial electronic message;
• ensuring that notification content, images and links are lawful and do not infringe third-party rights;
• complying with the developer and notification rules of Apple, Google and browser vendors.

6.2 Prohibited uses

The Customer and Panel users must not use the Service to:

• send spam or commercial electronic messages without the recipient's permission;
• distribute malware, phishing or fraudulent links or content;
• send unlawful, misleading, deceptive, defamatory or hateful content, or content that infringes third parties' intellectual property or personality rights;
• send special categories of personal data (health, biometric data, religion, political opinion, etc.), precise location data, contacts or advertising identifiers in event properties;
• process children's personal data in breach of the law, in relation to persons known to be under 13;
• attempt to circumvent operating system or browser rules (e.g. notification permission and frequency restrictions);
• test or attempt to breach the security of the Service, the SDKs or the infrastructure, reverse engineer them (except where permitted by law), or place an excessive load that disrupts the operation of the Service;
• attempt to access another customer's data;
• resell or rent the Service to third parties without the Company's written permission, or use it to develop a competing product.

7. Customer data and data protection

All rights in Customer data belong to the Customer. The Customer authorises the Company to process Customer data only to the extent necessary to provide the Service, keep it secure, provide support and perform its obligations under the Service Contract.

For end users' personal data, the Customer is the data controller and the Company is the data processor under Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR"). The Company processes this data on the Customer's instructions and in accordance with the Data Processing Agreement.

For personal data of Panel users, visitors and business contacts, the Company is the data controller; this processing is described in the Privacy Policy and the KVKK Notice.

The Company may create and use anonymous, aggregated statistics that do not identify the Customer or any person, in order to operate and improve the Service.

8. Third-party push services

Push notifications are delivered through third-party services that are not under the Company's control: Google Firebase Cloud Messaging, the Apple Push Notification service and the push services of browser vendors (Google, Mozilla, Apple, Microsoft). These services have their own terms, rules and technical limitations; the Customer is responsible for complying with them in respect of its own developer accounts and apps.

The Company hands the notification over to the relevant push service. Whether the notification reaches the device and is displayed depends on these services, the operating system, the browser and the device settings. The Company therefore does not guarantee that a notification will be delivered or displayed in a particular way in cases such as:

• the end user not granting or withdrawing notification permission, turning off the notification channel, or using do-not-disturb / focus mode;
• on Android, the app having been force-stopped by the user, or system restrictions such as battery optimisation;
• browser or platform limitations, such as Safari not displaying images in web notifications;
• the device being offline, the browser being closed, or the push service delaying, throttling or rejecting the message;
• the push service reporting a token or subscription as invalid (in which case the record is deactivated).

The "delivered" and "opened" figures in campaign reports are based on information received from devices and push services and are subject to the limitations of those sources.

9. Intellectual property

All intellectual and industrial property rights in the Service, the Panel, the SDKs, the related software, source code, documentation, designs, website content and the GOSpock name and logo belong to the Company or its licensors.

For the term of the Service Contract, the Company grants the Customer a non-exclusive, non-transferable and non-sublicensable right to use the Service for its own business operations and to integrate the SDKs into its own websites and apps solely for the purpose of using the Service. Where a separate licence text is provided with the SDKs, that text also applies to the SDKs. No rights not expressly granted in these Terms are transferred to the Customer.

The Customer retains its rights in campaign content, images, trademarks and Customer data and authorises the Company to use them to the extent necessary to provide the Service. The Customer's suggestions and feedback about the Service may be used by the Company to develop the Service without any obligation.

10. Confidentiality

Each party keeps confidential the commercial, technical and financial information obtained from the other party under the Service Contract that is marked as confidential or is evidently confidential by its nature (including fees, Customer data, API keys, software and security information), uses it only to perform the Service Contract, and does not disclose it to third parties other than its employees, advisers and subcontractors who need to know it. Each party ensures that those persons are bound by the same confidentiality obligation.

This obligation does not apply to information that is public, is obtained or developed independently of the other party, or must be disclosed by law, court order or the request of a competent authority; in the case of compulsory disclosure, the other party is informed in advance where legally possible. The confidentiality obligation survives the end of the Service Contract.

11. Availability, maintenance and changes

The Company makes reasonable efforts to keep the Service running continuously and securely. Unless a service level commitment is separately agreed in the Service Contract, the Company does not commit to a specific availability rate.

Planned maintenance is announced in advance where possible and is carried out outside peak hours where possible. Emergency maintenance may be carried out without prior notice because of security vulnerabilities, failures or emergencies.

The Company may change the Service, the Panel and the SDKs to improve the Service, increase its security or adapt to legislation or to changes in third-party push services. Changes that materially reduce the core functions of a paid package during the contract term are notified to the Customer reasonably in advance. The Customer is responsible for using supported versions of the SDKs for the Service to work correctly.

12. Suspension, termination and data after termination

12.1 Suspension

The Company may suspend the Service in whole or in part:

• Late payment: if an overdue payment is not made, despite a written reminder, within the period set in the Service Contract or, if none, within a reasonable period. In this case the Panel is, as a rule, made read-only; the Customer can view its data but cannot start new campaigns or change settings.
• Abuse and security: use in breach of Section 6, situations that threaten the security of the Service, other customers or third parties, or a compromised key. In these cases the Company may stop sending, disable keys or restrict access to the extent necessary to prevent harm, and informs the Customer as soon as possible.
• Legal requirement: a decision of a competent authority or a statutory obligation.

Customer data is not deleted during a suspension. When the reason for the suspension ceases, the Service is restored within a reasonable time.

12.2 Term and termination

The term and renewal of the Service Contract are set out in the Service Contract. Either party may terminate the contract if the other party materially breaches the Service Contract or these Terms and fails to remedy the breach within the period set in the Service Contract or, if none, within 30 days of written notice. No remedy period is required for serious or repeated abuse or for breaches that cannot be remedied.

Termination does not release fees and other debts accrued up to the termination date. Provisions that by their nature should survive the end of the contract (including intellectual property, confidentiality, liability, governing law and jurisdiction) remain in force.

12.3 Data after termination

After the Service Contract ends for any reason, Customer data is deleted or anonymised within 90 days, except for data that must be retained by law. Before this period ends, the Customer may request an export of its data by writing to info@gospock.com. Details are set out in the Data Processing Agreement.

13. Disclaimer of warranties and limitation of liability

Except for commitments expressly given in the Service Contract, the Service and the website are provided "as is" and "as available". To the extent permitted by law, the Company does not warrant that the Service will be uninterrupted or error-free, that the Customer will achieve a particular business result, or that notifications will be delivered at the stages controlled by third-party services and devices.

To the extent permitted by law:

• neither party is liable for indirect damages, such as loss of profit, loss of revenue or business, loss of reputation, or losses arising from the use of data;
• the Company's total liability under the Service Contract and these Terms is limited to the total fees actually paid by the Customer to the Company in the 12 months preceding the event giving rise to the damage;
• the Company is not liable for damages arising from the Customer's own content or instructions, the actions of Panel users, the disclosure of secret keys by the Customer, or the operation of third-party push services, operating systems or browsers.

Under Article 115 of the Turkish Code of Obligations No. 6098, these limitations do not apply to liability for intent or gross negligence or to any other liability that cannot be limited by law.

The Customer indemnifies the Company against damages arising from claims brought against the Company by third parties or competent authorities as a result of the Customer's content, Customer data, or use of the Service in breach of these Terms or the law (including failure to obtain the necessary permissions from end users).

14. Force majeure

Neither party is liable for failure or delay in performing its obligations due to events beyond its reasonable control, such as natural disasters, epidemics, war, terrorism, strikes, general power or internet outages, cyber attacks, decisions and acts of competent authorities, or widespread outages at data centers or third-party push services. The affected party notifies the other party within a reasonable time and makes reasonable efforts to mitigate the effects. Force majeure does not release payment obligations. If force majeure lasts longer than 60 days, either party may terminate the Service Contract by written notice.

15. Changes to these Terms and notices

The Company may update these Terms. The current text is published on gospock.com with its effective date. Changes that materially affect the Customer's rights or obligations are notified to the Customer by e-mail or through the Panel at least 30 days before they take effect. If the Customer does not accept a change, it may terminate the Service Contract by written notice before the change takes effect. The provisions of a signed Service Contract can only be amended by written agreement of the parties.

Notices under these Terms may be given by e-mail. Notices to the Company are sent to info@gospock.com; notices to the Customer are sent to the e-mail address specified in the Service Contract or the account owner's e-mail address registered in the Panel. The parties notify each other of changes to their contact details. Notices such as notices of default and termination within the scope of Article 18(3) of the Turkish Commercial Code No. 6102 are given in the form prescribed by law.

16. Governing law, jurisdiction and contact

These Terms are governed by Turkish law. The İstanbul (Çağlayan) Courts and Enforcement Offices have jurisdiction over disputes arising from these Terms and the Service Contract. The Turkish text of these Terms is the governing version; the English text is a translation for information purposes.

Company details:

• Trade name: Neden Olmasın Reklam ve İlet. Hiz. Dan. Tic. Ltd. Şti.
• Address: İstiklal Mah. Piyalepaşa Bulv. No:22/1 B-C Blok, Beyoğlu / İstanbul, Türkiye
• Tax office and number: Kasımpaşa Vergi Dairesi, 6300431044
• E-mail: info@gospock.com
• Website: gospock.com

Effective and last updated: 8 October 2026.