Terms of Service

By accessing or using the services provided by GNSAC Bilişim Teknolojileri Ltd. Şti. ("GNSAC", "we", "us", or "our"), including our websites (gnsac.com.tr and gnsac.com) and cybersecurity products (GNSAC Vigil and GNSAC Phishing), you agree to be bound by these Terms of Service. If you are entering into this agreement on behalf of an organisation, you represent that you have the authority to bind that organisation to these terms. If you do not agree to these terms, you may not access or use our services.

GNSAC provides enterprise cybersecurity platforms and services, including: GNSAC Vigil: Cyber threat intelligence platform with early warning, brand protection, and dark web monitoring capabilities. GNSAC Phishing: Security awareness and phishing simulation platform for employee training and assessment. Product Deployment: Platform deployment, configuration, and technical onboarding support for GNSAC products. Products and services are licensed or provided on the terms set out in the applicable quote, order form or service agreement.

As a user of our services, you agree to: • Authorised Use: Use services only for lawful purposes and within the scope of your licence • Authority Over Scope: Submit or monitor only domains, brands, identities, recipients, systems and assets that you own or are expressly authorised to assess • Account Security: Maintain the confidentiality of your account credentials • Accurate Information: Provide accurate and current information during registration • Compliance: Comply with all applicable laws and regulations • No Misuse: Not use services to harm, harass, or infringe on others' rights • No Unauthorised Access: Not attempt to gain unauthorised access to our systems • Responsible Findings: Restrict access to exposed credentials and threat findings to personnel with a legitimate need; validate evidence and apply lawful response procedures Prohibited Activities: • Using our services for illegal purposes • Testing, scanning, monitoring or simulating against a third party without documented authority • Using exposed credentials, session data, indicators or findings to access an account or system • Sending phishing simulations to recipients outside an approved campaign scope or without the permissions required by law and internal policy • Publishing, selling or redistributing raw findings or personal data obtained through the services • Attempting to reverse engineer, decompile, or disassemble our software • Sharing account credentials with unauthorised users • Reselling or redistributing our services without authorisation • Interfering with the operation of our services

Product scope, subscription term, fees, taxes, invoicing, renewal, cancellation and any suspension rights are set out in the applicable quote, order form or service agreement. If there is a conflict between this page and a signed customer agreement, the signed customer agreement governs for that customer. Pricing displayed on the website is informational until confirmed in an applicable commercial document.

Ownership: All intellectual property rights in our services, including software, documentation, trademarks, and content, remain the exclusive property of GNSAC. Licence Grant: Subject to these terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable licence to access and use our services for your internal business purposes. Restrictions: You may not: • Copy, modify, or create derivative works of our services • Reverse engineer, decompile, or disassemble our software • Remove or alter any proprietary notices • Use our trademarks without written authorisation Your Content: You retain ownership of data you submit to our services. Subject to the applicable agreement and law, you grant us the limited rights necessary to provide, secure and support the contracted service.

To the extent permitted by applicable law, warranties, exclusions and limitations of liability for paid products and services are governed by the applicable signed customer agreement. Information made available on the public website is provided for general product-evaluation purposes and may change. No system can provide absolute security, and no cybersecurity product can guarantee that every threat, exposure or incident will be detected or prevented. Customer and GNSAC responsibilities for a deployment are defined in the relevant service agreement.

Availability: Availability targets, maintenance arrangements and service credits, if any, are defined in the applicable service agreement. Scheduled maintenance will be communicated in advance where reasonably practicable. Support: • Standard support: Email support during business hours • Priority support: Available with eligible plans • Emergency support: For critical security incidents (eligible customers) Updates: We may update our services to improve functionality, security, or compliance. We will notify you of material changes that may affect your use.

The governing law and dispute-resolution procedure for paid products and services are defined in the applicable signed customer agreement. Unless another written agreement applies, these website terms are governed by the laws of the Republic of Türkiye and disputes are subject to the competent courts and enforcement offices of Istanbul, subject to mandatory applicable law.