Acceptable use policy

Version 1.0 · Last updated: 6 November 2026

This Acceptable Use Policy (the "Policy") sets the rules for using the Alvara AI platform and services and forms an integral part of the Terms of Use and Service Agreement. A breach of this Policy is grounds for suspending the Service and for terminating the Agreement for cause. The Turkish version prevails over this English edition.

1. General principle

The Platform is designed to let businesses carry out lawful, recipient-respecting business development in a corporate and professional context. The Customer, including its Users, is responsible for complying with law and with this Policy when using the Service.

2. Communication rules

2.1. Whose decision. The Company does not contact anyone on the Customer's behalf on its own. The Service produces message drafts; the Customer decides whom to contact, through which channel, with what content and on what legal basis.

2.2. Sending. Where sending features are offered, sending takes place only on the Customer's instruction and through the Customer's own account or domain. Content, selection of recipients, commercial-message consent, message-registry (IYS) registration and the legal basis are the Customer's responsibility.

2.3. Before sending a commercial electronic message the Customer must obtain the consent required under Law No. 6563 and the Regulation on Commercial Communication and Commercial Electronic Messages, or meet the conditions of the relevant exemption (for example, the recipient being a merchant or tradesperson), and complete all steps required by law, including registry registration and query obligations.

2.4. Commercial electronic messages may not be sent without prior consent to recipients in Turkey who are consumers (natural persons who are not merchants or tradespeople).

2.5. Every message clearly states the sender's company name and contact details, offers the recipient a free and easy way to refuse it, and, at first contact, provides a notice (or a link to one) covering the source of the personal data and the recipient's rights.

2.6. Objection, opt-out and erasure requests are handled within the statutory periods; those persons are added to the suppression list, and the suppression list is not circumvented.

2.7. No misleading headers, false sender information, deceptive subject lines or content impersonating another person or organisation.

2.8. When sending to persons in the European Union, the United Kingdom, the United States or another country, the data protection and electronic communications law of that country applies and must be followed.

2.9. Sending limits and quality thresholds set by the sending provider may not be circumvented, and multiple accounts or domains may not be used to evade them.

2.10. Measurement. Where sending features are offered, measurement of message engagement (such as whether a recipient reads a message or follows a link) may be carried out; the Customer can turn it off in its settings. Where offered, the Customer ensures that the measurement complies with the law of the recipients' countries, does not use it for recipients who must consent without first obtaining that consent, and mentions it in the notice given at first contact.

3. Prohibitions on data use

The Customer may not:

• 3.1. Upload special categories of personal data (race, ethnic origin, political opinion, philosophical belief, religion, sect, dress, association, foundation or union membership, health, sex life, criminal convictions, security measures, biometric and genetic data) to the Platform, or use the Service to obtain or infer such data.
• 3.2. Process data of minors or target them.
• 3.3. Use the Service to collect information on private life, or to follow, monitor, harass, threaten or discriminate against a person.
• 3.4. Use Outputs in decisions affecting creditworthiness, employment, insurance, housing, education or similar rights.
• 3.5. Sell, rent, license or distribute Platform Data or Outputs in bulk to third parties, or use them to build a competing database or service.
• 3.6. Upload data lists obtained unlawfully (purchased lists without permission, leaked databases).
• 3.7. Use personal email addresses or telephone numbers for marketing without the legal basis and consent that the law requires.
• 3.8. Use the third-party data providers on which the Service relies in a way that breaches the relevant provider's terms of use.

4. Technical and security prohibitions

• 4.1. Accessing the Platform or extracting data with bots, scrapers, crawlers or other automated tools, other than the official APIs offered by the Company.
• 4.2. Sharing accounts, or registering multiple free accounts to exceed usage right limits.
• 4.3. Attempting to bypass, probe or scan for vulnerabilities in the Platform's security measures, authorisation controls or rate limits without the Company's written permission.
• 4.4. Uploading malware, or performing actions that disrupt the Platform or place excessive load on it.
• 4.5. Analysing the Platform to reverse engineer it or to build a competing product; attempting to extract the prompts or models of AI components.

5. Content prohibitions

The Customer may not create or send through the Service:

• Unlawful, fraudulent or phishing messages,
• Promotion of unlawful products or services, gambling, crypto-asset fraud, fake investment opportunities or pyramid schemes,
• Content containing hate speech, discrimination, violence or obscenity,
• Content infringing third parties' intellectual property rights, personality rights or trade secrets,
• False statements that constitute unfair competition or disparage competitors.

6. Sanctioned persons

The Service may not be used in activities involving persons, entities or countries subject to sanctions by the United Nations, the Republic of Turkey or other competent authorities to which the Company is subject.

7. Oversight and sanctions

7.1. The Company has no duty to monitor the Customer's activities, but it may apply checks to ensure compliance with this Policy, investigate complaints and request the information and documents it considers necessary from the Customer.

7.2. In the event of a breach or suspected breach the Company may, at its discretion and without prior notice, stop the relevant message or campaign, turn off certain features, suspend the Account or terminate the Agreement, delete the relevant content and data, and notify the competent authorities.

7.3. Losses suffered by the Company because of a breach of this Policy are indemnified by the Customer under Section 16 of the Terms of Use. In the event of suspension or termination because of a breach, fees will not be refunded.

8. Reporting a breach

If you believe the Platform is being used in breach of this Policy, or you have received an unwanted message from a Platform user, you can report it at info@alvaraai.com.