Suflor

TERMS OF SERVICE

Last updated: 15 September 2026

Türkçe

About this translation

This is an English translation provided for convenience. The binding text is the Turkish original. In the event of any discrepancy, the Turkish text prevails.

Last updated: 15.09.2026

1. PARTIES

1.1 Service provider: MOZ TEKNOLOJİ VE TASARIM TİCARET LİMİTED ŞİRKETİ

MERSIS No: 0623212323100001 · Tax No / Tax Office: 6232123231 / Alemdar · Address: Topçular mahallesi, Saray Bosna caddesi, Altındoğa Sitesi, C Blok D:1 Gölcük/Kocaeli, Türkiye · Email: suflorapp@gmail.com

MOZ TEKNOLOJİ VE TASARIM TİCARET LİMİTED ŞİRKETİ is referred to below as "SUFLOR" or the "Application".

1.2. User: the natural or legal person who uses SUFLOR's mobile application and the connected digital systems, referred to below as the "User".

1.3. Parties: SUFLOR and the User are together referred to as the "Parties".

2. SUBJECT MATTER AND SCOPE

2.1. This Agreement is the framework text governing the conditions for using the mobile application named SUFLOR: AUDITION PARTNER (SUFLOR) and its connected digital services. Privacy notices, explicit consent texts and other supplementary texts that may additionally apply to a particular service are reserved.

2.2. SUFLOR offers features such as script analysis, character and line splitting, AI-assisted voice generation, spoken line tracking, a prompter and video recording, in order to assist actors with audition, self-tape, rehearsal and line-learning work.

2.3. SUFLOR is not a casting agency, a production company, a management company or an acting agent.

2.4. Use of SUFLOR gives the User no guarantee of any audition, role, job, representation or production.

3. DEFINITIONS

3.1. Account: the personal user area through which the User accesses SUFLOR.

3.2. Mobile Application / Application: SUFLOR, being a mobile application and all connected digital systems, interfaces, data flows and services.

3.3. Electronic Approval: the User's completion of sign-in or registration with an Apple or Google account on the SUFLOR sign-in screen. On that screen, immediately below the sign-in options, a notice is displayed at all times which links to this Agreement and to the Privacy Notice and contains the statement "By continuing, you accept the Terms of Service" (or a statement carrying the same meaning). The User's completion of sign-in or registration on the screen where that notice is displayed means that Electronic Approval has been given.

3.4. Record of Acceptance (Timestamp): the technical system records relating to Electronic Approval, such as the date and time, the version of the agreement and user information. This record does not contain the User's IP address.

4. ACCEPTANCE OF THE AGREEMENT

4.1. The User is required to review this Agreement before starting to use the Application.

4.2. The User's completion of sign-in or registration with Apple or Google while the notice linking to the Agreement is displayed on the sign-in screen, and/or their continued use of the Application, means that they accept the provisions of the Agreement relating to use of the service.

4.3. The primary mechanism for the entry into force of this Agreement is the User's completion of sign-in or registration with Apple or Google while the notice linking to the Agreement (Art. 3.3) is displayed on the sign-in screen (Electronic Approval). That notice is displayed at all times immediately below the sign-in options before the User's first sign-in, and the sign-in or registration is recorded by the Record of Acceptance. The "continued use of the Application" case in paragraph 4.2 is supplementary only, against the possibility that the notice cannot be displayed for an exceptional technical reason; it does not legitimise, or take the place of, the notice not actually being presented in the Application.

4.4. In addition to the notice on the sign-in screen, the User may access the Agreement and the Privacy Notice at any time through the profile screen after signing in. This access does not move back or alter the moment this Agreement enters into force (Art. 4.3); it only ensures that the texts remain continuously and easily accessible.

5. ACCOUNT, ACCOUNT SECURITY AND PRINCIPLES OF USE

5.1. The User must create an account in order to use SUFLOR's features.

5.2. An account may be created through the sign-in methods offered by Apple and Google.

5.3. The User is responsible for the security of their account, for keeping their username, password and access information confidential, and for the transactions carried out through their account.

5.4. If the User believes their account is being used by unauthorised persons, they must notify SUFLOR as soon as possible.

5.5. The User agrees to use the mobile application only in a manner consistent with the law, the rule of good faith, this Agreement and the other rules of use determined by SUFLOR.

6. AGE AND CONDITIONS OF USE

6.1. SUFLOR's age rating on the App Store relates to the content rating of the application and does not by itself determine the User's legal capacity.

6.2. Persons under 18 must use SUFLOR with the knowledge, permission and supervision of a parent or legal guardian. Ensuring the necessary parental or guardian permission and supervision for a minor User's use of the application is the responsibility of the User and/or their legal representative.

6.3 SUFLOR cannot be held liable for consequences that may arise from a minor using the application without parental or guardian supervision, without prejudice to the responsibilities imposed on the Company by applicable mandatory legislation.

6.4 The third-party artificial intelligence and technology services used in SUFLOR may have their own age and usage conditions. The User must use those services in accordance with their current terms. This article does not remove or alter any age or usage restriction of a third-party provider.

6.5. It is prohibited to circumvent age restrictions by misstating one's age or identity.

6.6. Because account creation takes place through Apple's or Google's authentication services and that process is not managed by SUFLOR, the age declaration is not taken at the moment of account creation but on a separate screen within the Application's own interface, immediately after the User completes their first sign-in with Apple or Google. On that screen the User declares whether they are over 18. Where the User declares that they are under 18, in order to use the Application they are asked to tick a separate checkbox declaring that they are acting with the knowledge and supervision of a parent or legal guardian. This mechanism does not guarantee absolute verification of the parent's or guardian's identity; it is, however, an age-sensitive, reasonable and technically feasible measure within an architecture in which SUFLOR does not directly manage account creation.

6.7. The age rating shown in the App Store and similar app stores (for example "4+") relates to the content rating of the application and does not take the place of the age declaration and parental or guardian approval mechanism under this article; the two systems apply independently of each other.

7. SUFLOR SERVICES

7.1. SUFLOR may develop or change the scope and technical features of the service, or make certain features temporarily or permanently unavailable.

7.2 SUFLOR offers features such as script upload, script analysis, character and line splitting, AI voice generation, spoken line tracking, a prompter and audition recording.

7.3. Third-party technology providers are used in order to make these features available.

7.4. The results of AI-assisted features are produced by automated systems and may not in every case be error-free, complete, or of the nature of a professional assessment.

8. ARTIFICIAL INTELLIGENCE OUTPUT

8.1. Character analyses, line splitting, voice generation, text edits and other AI output produced by SUFLOR may contain errors, omissions or misinterpretations.

8.2. The User is responsible for checking the results produced by artificial intelligence during an audition or rehearsal.

8.3. AI output produced by SUFLOR does not take the place of the opinion of a professional casting director, agent, actor, director or other expert.

8.4. SUFLOR does not guarantee that AI output will lead to any particular audition result, role or job opportunity.

9. SCRIPTS AND USER CONTENT

9.1. The User accepts and declares that they have the authority to upload the scripts, texts, documents, audio or other content they upload to SUFLOR, and to have it processed within the relevant service.

9.2. The User is responsible for holding the necessary rights and permissions when uploading copyrighted or otherwise legally protected content belonging to third parties.

9.3. The User is responsible for ensuring that the content they upload to SUFLOR is not unlawful and does not infringe the rights of third parties.

9.4. Ownership of, and the intellectual property rights in, content uploaded by the User remain with the User or the relevant rightsholder unless expressly stated otherwise.

9.5. The User does not transfer ownership or copyright in the content they upload to SUFLOR.

9.6. The User permits the content they upload to SUFLOR to be technically processed and analysed, to be transferred to the necessary third-party technology services, and to be held in SUFLOR's systems for as long as necessary for the service to function.

9.7. This technical authorisation does not give SUFLOR the right to use or sell User content as independent commercial content.

10. ARTIFICIAL INTELLIGENCE AND THIRD-PARTY TECHNOLOGY SERVICES

10.1 SUFLOR uses third-party technology and artificial intelligence services in order to run certain features.

10.2 Google Gemini

a) The script the User uploads to SUFLOR is sent to the Google Gemini Developer API for language detection and script analysis.

b) SUFLOR uses the paid API tier of this service.

c) Under Google's applicable paid service terms, the prompts sent to the API and the responses generated are not used to improve Google products.

d) Google may keep technical records for abuse prevention and security purposes. The retention period for those records is not determined by SUFLOR.

e) SUFLOR does not control the technical logging and security processes applied by Google.

10.3. ElevenLabs

a) In order to have the other characters voiced by artificial intelligence, only the lines that need to be voiced are sent to the ElevenLabs service.

b) The User's own lines are not sent to ElevenLabs for that voicing purpose.

c) In SUFLOR's account, the ElevenLabs option "Improve the models for everyone" is switched off. The data sent by SUFLOR is therefore not permitted to be used to improve ElevenLabs' models.

d) Technical records that ElevenLabs keeps in the course of running the service may nevertheless be subject to that provider's own policies and terms.

e) Generated audio clips may be held in a shared technical cache (shared between users) in order to avoid regenerating the same line text with the same voice selection. Records in this cache are stored under a technical key derived from the line text and the selected voice; they are not associated with a User account and do not identify the User. This cache is hosted on Cloudflare R2 storage infrastructure; the content stored there is not the User's own voice but the AI voice generated by ElevenLabs.

10.4. Deepgram

a) In order to run the spoken tracking and line detection features while the User reads their own lines, the audio captured through the microphone is sent to the Deepgram Nova-3 service.

b) In SUFLOR's requests to Deepgram Nova-3, the opt-out parameter that prevents data from being used for model improvement (mip_opt_out=true) is used.

c) SUFLOR sends data to Deepgram only for the purpose and through the technical flow set out in this article; there is no other known path by which data is sent.

d) The User's voice data is processed at the stage where the User reads their own line.

e) The User's microphone audio is not sent to Deepgram while the AI characters are speaking.

f) Data kept by Deepgram under the opt-out is processed only for as long as necessary to process the relevant request; the third-party provider's technical policies may additionally apply.

10.5 Sentry

a) SUFLOR uses the Sentry service in order to detect and resolve errors that may occur in the mobile application and in server-side functions.

b) In the production environment, screenshot capture at the moment of an error and session replay are enabled. Text and visual content in these records is processed in masked form; scripts or other content elements uploaded by the User therefore do not appear in a readable form in them.

c) Sentry may access technical data such as the connection IP address and device or session identifiers it generates itself while the service is provided; this data is subject to Sentry's own policies and terms.

10.6 RevenueCat

a) SUFLOR uses the RevenueCat service in order to manage in-app purchases and subscriptions.

b) In this context, the technical data necessary in relation to purchase, transaction and subscription status may be transferred to RevenueCat.

c) Payment card details are not received by SUFLOR or RevenueCat; that information is processed directly by the payment infrastructure of the relevant app store (Apple App Store / Google Play Store).

10.7 Apple AdServices

a) SUFLOR may use Apple's AdServices API for ad attribution.

b) This measurement does not use the IDFA (advertising identifier) and is Apple's attribution method that requires no permission (outside App Tracking Transparency).

c) Apart from the standard app analytics offered through App Store Connect and the attribution API described in this article, SUFLOR uses no other third-party analytics SDK.

11. STORAGE AND DELETION OF SCRIPT FILES

11.1. The original script file the User uploads in PDF or Word format is processed in such a way that it is deleted from SUFLOR's systems after the analysis and the creation of the necessary structured data.

11.2. Characters, lines and similar structured data created from the script may be held in SUFLOR's systems until the relevant script or account is deleted by the User.

11.3. SUFLOR may apply automated clean-up processes for technical and operational reasons.

11.4. The deletion of a script from SUFLOR's systems does not mean that data held in third-party providers' own systems or technical records is deleted at the same time.

11.5. Technical records held by third-party providers in their own systems are subject to that provider's own policies.

12. AUDIO, MICROPHONE, CAMERA AND AUDITION RECORDINGS

12.1. Access to the microphone and/or camera may be required for certain SUFLOR features to work.

12.2. The microphone may be used in particular to run the spoken tracking and line detection features while the User reads their own lines.

12.3. SUFLOR cannot access the User's audition or self-tape video; it is not uploaded to SUFLOR's servers and therefore cannot be kept by SUFLOR as a video archive. The video created by the User is stored on the User's own device, through the recording and gallery mechanism provided by the operating system.

12.4. Where the User shares a video or other content created through Suflör on WhatsApp, Instagram, casting platforms, email or other third-party services, the terms of use and privacy policies of that third party apply.

12.5. SUFLOR cannot be held responsible for the consequences of the User's sharing on platforms outside SUFLOR, for the actions of the platform concerned, or for the User's own decision to share.

13. DEVICE PERMISSIONS

13.1. SUFLOR may request permission to access the camera, microphone or related operating system features on the User's device in order to offer certain features.

13.2. These permissions are managed through the operating system of the User's device.

13.3. The User may choose not to grant the relevant permissions, or to withdraw them later. In that case, all or part of the SUFLOR features that require the permission concerned may become unusable.

13.4. Camera or microphone permission granted through the device operating system is not by itself treated as explicit consent under the KVKK.

14. SUPABASE AND SUFLOR INFRASTRUCTURE

14.1. SUFLOR uses the Supabase infrastructure in order to store and process the user account, the script structure, the lines and the technical data necessary for the service to function.

14.2. SUFLOR's database and file storage infrastructure is located in the European Union / Frankfurt region.

14.3. Data processing carried out through Supabase is conducted for the technical provision of the service and for the purposes determined by SUFLOR.

14.4. Whether Supabase acts as a data processor or has a different data protection role in respect of a given service is assessed separately according to the service and contractual structure used.

14.5. Details of the processing of User data by technical infrastructure providers are set out separately in the Privacy Notice.

15. PUSH NOTIFICATIONS AND ONESIGNAL

15.1. SUFLOR may use third-party notification services such as OneSignal in order to send in-app notifications and push notifications.

15.2. The technical identifiers, device information or notification tokens necessary to run push notifications may be transferred to the relevant provider.

15.3. The User may turn off push notifications through the device operating system or the settings offered by SUFLOR.

15.4. The third-party provider's own technical records and data processing terms may apply while push notification services are technically carried out.

16. DEVICE IDENTIFIERS AND IP ADDRESS

16.1. A device identifier generated and stored on the User's device may be used in order to run the service securely and correctly, to manage the relationship between the account and the device, to detect technical problems and to prevent abuse of the service. This device identifier is not sent to SUFLOR's servers and is not stored in SUFLOR's own database.

16.2. SUFLOR does not separately record Users' IP addresses in its own database for the purpose of processing personal data. That said, infrastructure and service providers used to operate the Application — such as Sentry, OneSignal, RevenueCat and Supabase — may technically see the IP address while a connection is established and may process it within their own connection logs and policies.

16.3. Some third-party providers integrated by SUFLOR (in particular Sentry and OneSignal) may use device or session identifiers they generate themselves in order for the service to function. These identifiers are created by the provider, not by SUFLOR, and are subject to that provider's own policies and terms.

16.4. The purposes, legal grounds and retention periods for device identifiers and technical connection data are set out separately in the Privacy Notice.

17. INFORMATION ON THE PROTECTION OF PERSONAL DATA

17.1. The User accepts that they have been informed that their personal data is processed by SUFLOR within the scope of the Privacy Notice on the Processing of Personal Data and any supplementary privacy notices that may apply according to their capacity.

17.2. SUFLOR processes the User's personal data in accordance with Law No. 6698 on the Protection of Personal Data and the related legislation.

17.3. The categories in which personal data is processed, the purposes of processing, the legal grounds, the persons and organisations to whom it may be transferred, the retention periods and the User's rights are set out separately in the Privacy Notice.

17.4. The Privacy Notice on the processing of personal data is not treated as part of this Agreement and is provided separately.

17.5. Presenting the Privacy Notice does not amount to obtaining general approval from the User for personal data processing activities.

17.6. Where there are personal data processing activities for which explicit consent is legally required, that consent is presented to the data subject through a separate text and/or a separate declaration of intent.

17.7. Where a particular processing activity requires explicit consent, that consent is obtained separately and for a specific purpose.

17.8. SUFLOR endeavours to take the reasonable and necessary technical and administrative measures to protect personal data against unlawful access, loss or unauthorised use.

17.9. Under the KVKK, the data controller is obliged to take appropriate technical and administrative measures to prevent the unlawful processing of and access to personal data and to ensure its preservation.

17.10. Where SUFLOR changes its technical data flows or the service providers it uses, it updates the Privacy Notice and any other necessary legal texts.

17.11. In order to be able to demonstrate that it has fulfilled its obligation to inform under Article 10 of the KVKK, SUFLOR keeps a technical record showing that the link to the Privacy Notice was displayed at all times on the sign-in screen together with the notice relating to the Agreement (Art. 3.3), and showing the version of the linked text at the time of sign-in or registration. The User may also access the current version of the Privacy Notice at any time through the profile screen after signing in. This record and this access do not constitute approval or explicit consent under paragraph 17.5; they serve only as evidence that the information was provided and that the text was accessible.

18. TRANSFER OF DATA ABROAD

18.1. In addition to SUFLOR's own technical infrastructure being located in the European Union / Frankfurt region, the third-party technology, artificial intelligence, error monitoring, notification, purchase management and storage providers used (such as Google, ElevenLabs, Deepgram, Sentry, OneSignal, RevenueCat, Cloudflare (R2) and Apple) may process data abroad.

18.2. Where personal data is transferred abroad, the transfer is carried out in accordance with the applicable provisions of the KVKK.

18.3. Where applicable, an adequacy decision, appropriate safeguard mechanisms, standard contracts or the other transfer mechanisms provided for in legislation are relied upon.

18.4. The recipients, purposes, data categories and legal grounds of transfers abroad are set out separately in the Privacy Notice.

18.5. Where a standard contract is used as the transfer mechanism, the notification obligations provided for in legislation are additionally fulfilled.

18.6. The transfer of personal data to a server or provider located within the European Union does not by itself mean that the transfer is exempt from the appropriate safeguards or other transfer conditions under Article 9 of the KVKK; such transfers are subject to the same legal regime as other transfers abroad.

19. SHARING USER CONTENT OUTSIDE SUFLOR

19.1. Audition videos and other content created by the User are the User's responsibility.

19.2. The User may share this content with applications, platforms, persons or organisations outside SUFLOR at their own choice.

19.3. Where such sharing takes place, the third-party platform's own terms of use and privacy policy apply.

19.4. The User is responsible for the compliance of content they upload to third-party platforms with copyright, personal data, privacy and other legal requirements.

20. CREDIT SYSTEM AND IN-APP PURCHASES

20.1. Some SUFLOR features are offered through a credit system.

20.2. Credits may be consumed when using script analysis, AI voice generation, recording, or other services separately indicated within the application.

20.3. Credit amounts, prices and service scopes may be updated by SUFLOR.

20.4. In-app purchases are made through the payment system of the Apple App Store or the relevant app store.

20.5. The rules of the relevant app store and applicable mandatory consumer legislation apply to purchase, payment, return and refund processes.

20.6. A provision stating that unused credits cannot be refunded in all cases and unconditionally may not be interpreted so as to remove the User's mandatory statutory rights of refund and withdrawal.

20.7. SUFLOR may share the transaction information necessary in relation to the User's purchase and usage status with the relevant app store and/or RevenueCat, in order to carry out payment and refund processes.

20.8. To the extent that credits and in-app purchases in the nature of digital content fall within "services or digital content supplied instantly in electronic form" under Article 15/1-(ğ) of the Regulation on Distance Contracts, the position under applicable consumer legislation that the User cannot exercise a right of withdrawal applies.

21. THIRD-PARTY SERVICES

21.1. SUFLOR may use third-party service providers such as Google, ElevenLabs, Deepgram, Supabase, OneSignal, Sentry, RevenueCat, Cloudflare (R2) and Apple in order to provide the service.

21.2. The technical conditions and service policies of the provider concerned may apply when accessing those providers' services.

21.3. Interruptions, changes or technical faults in services provided by third parties independently of SUFLOR may cause SUFLOR's services to be temporarily affected.

21.4. SUFLOR may change its third-party providers, or use new ones, to the extent the service requires. Where such a change affects personal data processing activities, the necessary information is provided separately.

21.5. The current list of the third-party service providers SUFLOR uses, together with links to those providers' terms of use and privacy terms, is published on the "Third-Party Services Used" page, which is also reachable from within the application and is maintained independently. Updating that page — including adding a new provider, removing a provider, or a change in a provider's own terms or policy link — does not by itself create any new right or obligation and only shows which provider actually carries out an obligation already provided for in this Agreement; it is therefore not treated as an "amendment to the Agreement" within the meaning of Article 30.

22. INTELLECTUAL PROPERTY

22.1. The intellectual property rights in the SUFLOR application's software, design, interfaces, trade mark, logo, original texts and other elements created by SUFLOR belong to SUFLOR or to the relevant rightsholder under applicable legislation.

22.2. The User may not copy, modify, reverse engineer, sell or commercially redistribute SUFLOR's software without permission.

22.3. Rights in content the User uploads to SUFLOR are subject to the provisions of Article 9.

23. PROHIBITED USES

The User may not:

a) create fake accounts,

b) attempt to access another person's account without permission,

c) scan SUFLOR's systems, software or infrastructure without permission, attempt or test anything that would damage its data flow or business model, or exploit security vulnerabilities,

d) use the application with data extraction, scraping, bulk export, automation, bot, crawler or similar tools,

e) use SUFLOR's services for reverse engineering purposes,

f) send excessive or abusive requests to SUFLOR's infrastructure,

g) impair the security of the service or other users' use of it,

h) upload unlawful content or content that infringes the rights of third parties,

i) use SUFLOR for misleading, fraudulent or malicious purposes,

j) build an independent database, commercial archive or alternative service infrastructure.

24. CONFIDENTIALITY

24.1. SUFLOR endeavours not to disclose without authorisation the non-public scripts and other content uploaded by the User, other than for the purpose of providing the service.

24.2. However, Articles 10, 14, 15, 16 and 18 state that content may be transferred to Google Gemini, ElevenLabs, Deepgram, Supabase, OneSignal, Sentry, RevenueCat, Cloudflare (R2) or other relevant providers in order for the service to function.

24.3. Where legally required, SUFLOR may comply with requests from competent public authorities or judicial bodies within the framework of legislation.

25. LEGAL OBLIGATIONS AND COMPETENT AUTHORITIES

25.1. SUFLOR may share information with competent authorities to the extent necessary where required under applicable legislation, for the conduct of legal proceedings, for the investigation of crime or abuse, to protect system security, or to protect the rights of SUFLOR and of third parties.

25.2. Such sharing takes place only to the extent legally permitted or required.

26. INTERRUPTION OF THE SERVICE

26.1. SUFLOR does not guarantee that the service will operate without interruption or error.

26.2. All or part of the service may be temporarily unavailable because of maintenance, updates, technical faults, internet connectivity, interruptions at third-party providers, or force majeure.

26.3. SUFLOR endeavours to maintain continuity of service to a reasonable extent.

27. SUSPENSION AND TERMINATION OF THE ACCOUNT

27.1. The User may delete their account through the account deletion function in the application.

27.2. SUFLOR may temporarily suspend or close an account in the event of a serious breach of the Agreement, a security risk, unlawful use, abuse or a legal requirement.

27.3. Closure of an account does not remove the User's statutory rights.

27.4. Where an account is deleted, personal data held by SUFLOR that must be deleted is deleted, destroyed or anonymised in line with the applicable retention policies, save for data that must be kept by law.

27.5. Third-party providers' own technical records and statutory retention obligations may apply independently of these operations.

28. ACCOUNT DELETION AND DATA RETENTION

28.1. The User may delete their account through the SUFLOR application. It is recommended that remaining credits be used before requesting deletion; when the account is deleted, unused credits expire without refund.

28.2. Upon deletion of the account, data associated with the User account in SUFLOR's systems is placed into deletion or destruction processes, save for the retention periods required by applicable legislation.

28.3. Scripts uploaded by the User and the structured data created from them are subject to those deletion processes.

28.4. Certain records may be kept for the necessary period in cases of legal dispute, accounting, financial obligation, security, abuse prevention, or mandatory retention arising from legislation.

28.5. Deletion of technical records in third-party providers' systems is subject to that provider's own retention policies and agreements.

29. SECURITY

29.1. SUFLOR aims to apply technical and administrative measures appropriate to the nature of the service in order to ensure the security of personal data.

29.2. That said, absolute security of internet and electronic systems cannot be guaranteed.

29.3. The User is responsible for using their account information and their device securely.

29.4. Where a breach of personal data security occurs and that breach is capable of producing adverse consequences for the data subjects, SUFLOR notifies the Personal Data Protection Board without delay and at the latest within 72 (seventy-two) hours of becoming aware of it, and the affected data subjects within the shortest reasonable time, pursuant to Article 12 of the KVKK, the Board's Decision No. 2019/10 dated 24.01.2019 and the related legislation.

30. AMENDMENTS

30.1. SUFLOR may amend this Agreement because of service development, changes in legislation or technical requirements.

30.2. In the event of material changes, the User is informed so far as possible within the application or by another appropriate means of communication.

30.3. The current version of the Agreement is published in the application or on SUFLOR's relevant digital channels.

30.4. If the User continues to use the service after the date on which the changes take effect, the provisions of the changes relating to use of the service apply.

30.5. The User's statutory rights are reserved.

31. LIMITS OF LIABILITY

31.1. SUFLOR does not guarantee that AI output will be accurate or complete in every case.

31.2. SUFLOR endeavours to a reasonable extent to remedy problems arising from interruptions, changes or service policies at third-party providers' own systems, but cannot be held directly liable for third parties' activities outside its control.

31.3. The User is responsible for consequences that may arise from not holding the rights in content they upload to SUFLOR, from uploading unlawful content, or from infringing third-party rights.

31.4. SUFLOR is not responsible for the User's sharing on platforms outside SUFLOR.

31.5. These provisions may not be interpreted so as to remove liabilities of SUFLOR that cannot be limited by law, or rights arising from mandatory consumer and personal data legislation.

32. FORCE MAJEURE

32.1. Events beyond the Parties' reasonable control — such as natural disasters, war, epidemics, large-scale internet or infrastructure outages, cyber attacks, decisions of public authorities, and third-party infrastructure outages — may be treated as force majeure.

32.2. For the duration of a force majeure event, the Parties' relevant obligations may temporarily be incapable of performance to the extent of the event's effect.

33. GOVERNING LAW AND DISPUTES

33.1. This Agreement is governed by the law of the Republic of Türkiye.

33.2. In disputes arising from consumer transactions, the mandatory provisions of applicable consumer legislation regarding compulsory application routes, monetary thresholds and the jurisdiction and powers of consumer arbitration committees and consumer courts are reserved.

33.3. Turkish law applies to any dispute arising out of or in connection with this Agreement. Without prejudice to mediation, conditions of action and other application procedures that are mandatory under Code of Civil Procedure No. 6100, Enforcement and Bankruptcy Law No. 2004 and the related legislation, the Parties agree that the Courts and Enforcement Offices of Kocaeli have jurisdiction.

33.4. Paragraph 33.3 applies to Users who are consumers without prejudice to paragraph 33.2 and to the mandatory provisions of applicable consumer legislation; a consumer User's statutory right to apply to the consumer arbitration committee or consumer court of their own place of residence cannot be restricted by this article.

34. ELECTRONIC RECORDS

34.1. Electronic records relating to acceptances, transactions, purchases, account operations, technical operations and similar actions carried out by the User in the SUFLOR application may be used as evidence to the extent permitted by applicable legislation.

34.2. SUFLOR may keep, in accordance with legislation, the version of the agreement accepted, the date and time of acceptance, technical records associated with the account, and the records necessary in relation to use of the service.

34.3. Keeping these records is subject to personal data being processed separately in accordance with KVKK legislation.

35. ENTRY INTO FORCE AND ACCEPTANCE

35.1. The User declares that they have read and understood this Agreement, have approved it electronically, and accept its provisions as they stand.

35.2. This Agreement enters into force at the moment the User gives electronic approval.

35.3. The current version of the Agreement is kept accessible within the application or on SUFLOR's relevant digital channels.

ANNEX 1 – WHERE DOES YOUR SCRIPT GO?

*This section summarises the information in Articles 10, 14, 15, 16 and 18 of the Agreement. It explains in plain terms which services process the script you upload to SUFLOR, for which purposes, and to what extent.

1. GOOGLE GEMINI – SCRIPT ANALYSIS

• SUFLOR uses the Google Gemini API to analyse the PDF or Word script you upload.

• The language of the script is detected.

• The script is processed in order to split out and analyse elements such as characters, lines and scene or context.

• In the technical workflow, the document is first processed as a whole for language detection, and then in parts for analysis.

• Once the analysis is complete and the content has been moved into the rehearsal flow, the temporary analysis content on SUFLOR's side is marked for deletion.

• With the paid Gemini API, Google does not use the prompts sent and the responses generated to improve its products; limited transaction records may be kept for purposes such as service security, abuse detection and legal obligations.

• Gemini API's current terms apply in addition (see the "Third-Party Services Used" page).

2. ELEVENLABS – AI VOICE GENERATION

• SUFLOR uses ElevenLabs to voice the lines of the other characters you select.

• The whole script is not sent to ElevenLabs.

• Only the lines of the other characters that need to be voiced are sent.

• Lines belonging to your own character are not sent to ElevenLabs for voicing.

• Generated audio clips may be held in a shared technical cache so that the same line with the same voice is not regenerated; these clips are stored under a key derived from the text and are not associated with your account. This cache is hosted on Cloudflare R2 storage infrastructure; what is stored there is not your own voice but the AI-generated voice.

• ElevenLabs' and Cloudflare R2's own terms of use and privacy terms apply in addition (see the "Third-Party Services Used" page).

3. DEEPGRAM – MICROPHONE / LINE TRACKING

• In SUFLOR's microphone-assisted rehearsal feature, voice data is sent to Deepgram so that your speech can be detected while you read your own line.

• The microphone is used while that feature is running.

• The User's microphone audio is not intended to be sent while the AI characters are speaking.

• In SUFLOR's use of Deepgram, participation in the model improvement programme is switched off.

• Deepgram's own terms of use and privacy terms apply in addition (see the "Third-Party Services Used" page).

4. DELETING A SCRIPT AND AN ACCOUNT

• Scripts held on SUFLOR's side, and the account data connected with them, are deleted or anonymised in line with technical processes and statutory retention obligations when the User deletes a script or the account.

• That said, where a request has been sent to a third-party provider, the retention period of the transaction records created in that provider's systems cannot always be determined unilaterally by SUFLOR. Those records may be subject to the provider's own policies and agreements.

5. SELF-TAPE VIDEOS

• Videos recorded with SUFLOR's self-tape feature are not uploaded to SUFLOR's servers; they are saved to the User's device. SUFLOR does not store these videos on its own servers.

6. SENTRY – ERROR MONITORING

• SUFLOR uses Sentry to detect application and server errors.

• A screenshot and session replay may be captured at the moment of an error; text and visual content in these records is masked.

• The content of your script does not appear in a readable form in these error records.

• Sentry's own privacy and data processing terms apply in addition (see the "Third-Party Services Used" page).

7. REVENUECAT – PURCHASE MANAGEMENT

• SUFLOR uses RevenueCat to manage credit and subscription purchases.

• Your payment card details are sent directly to the app store, not to RevenueCat.

• RevenueCat's own privacy and data processing terms apply in addition (see the "Third-Party Services Used" page).

8. WHAT IS NOT IN THE SYSTEM?

• In SUFLOR's current technical setup, self-tape videos are not uploaded to SUFLOR's servers.

• SUFLOR does not use the scripts, information and data shared by users to train its own AI models.

• Script text and visual content do not appear in a readable form in Sentry error records (masking is applied).

• SUFLOR does not use the IDFA for ad attribution and runs no separate third-party analytics SDK.

*These explanations reflect SUFLOR's current technical architecture. If the technical architecture or the third-party providers used change, these explanations are updated.

ANNEX 2 – THIRD-PARTY SERVICE PROVIDERS

• The current list of the third-party service providers SUFLOR uses, together with links to those providers' terms of use, privacy policies and data processing agreements, is not published as a fixed list annexed to this Agreement but on the separately and independently maintained "Third-Party Services Used" page (see Art. 21.5).

ANNEX 3 – KVKK DOCUMENTS

• SUFLOR's Privacy Notice on its personal data processing activities is published separately. This Agreement and the Privacy Notice can be reached at any time through the links on the sign-in screen and, after signing in, through the User profile (see Arts. 3.3, 4.4 and 17.11).

• The Privacy Notice and an Explicit Consent Text are not the same document. SUFLOR requests explicit consent separately only for operations where it has been determined to be legally necessary.

• The Privacy Notice contains current information on data categories, purposes of processing, legal grounds, the parties to whom data is transferred and the purposes of transfer, methods of data collection, and rights under Article 11 of the KVKK.

All documents