Skip to content
Türkçe Talk to us

Acceptable Use Policy

Company
Alone AI Teknoloji Ltd. Şti.
Last updated

This English text is a translation provided for information. The Turkish version is the binding text.Türkçe (esas metin)

Draft: this text is under legal review and becomes final once approved.

Contents7 sections
  1. 1.General rules
  2. 2.WhatsApp, Messenger and Instagram
  3. 3.Commercial electronic messages
  4. 4.Personal data
  5. 5.Account, API and webhook security
  6. 6.What happens if the rules are broken
  7. 7.Tell us

This policy sets out, in one place and in plain language, the rules that businesses using UPPU must follow. The binding source of these rules is the Terms of Service (in particular clauses 4, 7, 8 and 13); this page adds no new obligations, and in the event of a conflict the Terms of Service prevail.

1. General rules

The Platform is used in accordance with applicable law, the Terms of Service and Meta's terms. In particular, it is prohibited to (Terms 8.1):

  • send unsolicited bulk messages or marketing messages without permission;
  • send content that is unlawful, deceptive, threatening, hateful, infringes the rights of others or contains malware or phishing;
  • impersonate another person;
  • test or try to bypass the security of the Platform, circumvent rate limits or reverse engineer the Platform (except where the law allows it);
  • resell or rent the Platform to third parties without UPPU's written permission.

2. WhatsApp, Messenger and Instagram

You connect these channels with your own Meta account and by accepting Meta's terms. You comply with Meta's current terms, in particular the WhatsApp Business Terms, the WhatsApp Business Messaging Policy and Commerce Policy, the Meta Platform Terms and the Messenger Platform and Instagram policies. In particular, you (Terms 7.2):

  • obtain opt-in permission in the form Meta requires before messaging people on WhatsApp, and honor requests to opt out;
  • use only templates approved by Meta outside the 24-hour customer service window;
  • offer people a way to reach a human if you use automated replies or a bot;
  • keep your business profile information accurate and up to date;
  • do not message about products and services that Meta prohibits or restricts, and do not use WhatsApp for purposes Meta's terms do not allow, such as offering a general-purpose AI chat service rather than your own business's customer service;
  • do not use data obtained through the channels for any purpose other than what messaging with those people requires, and do not build profiles of people, enrich this data with other data or use it to train AI models (exceptions permitted by Meta excepted);
  • when linking an Instagram account to a Facebook Page, inform the account owner that Page administrators can see the Instagram messages.

Meta may restrict or suspend accounts, numbers, templates or messaging under its own rules. If Meta asks for a customer's access to be cut off, or if the use violates Meta's terms, UPPU may disconnect the channel concerned (Terms 7.3 and 7.4). Meta's rules: WhatsApp Business Messaging Policy, WhatsApp Business Terms and Meta Platform Terms.

3. Commercial electronic messages

You are responsible for obtaining the consents required under Turkish Law No. 6563 and its regulation for the commercial electronic messages you send to people, for meeting your registration and checking obligations in the Message Management System (İYS), and for honoring refusals. The Platform's consent records do not replace these obligations; UPPU has no İYS integration (Terms 8.2).

4. Personal data

You are the data controller of the data relating to people. Informing people, relying on an appropriate legal ground, obtaining explicit consent where necessary and answering people's applications are your responsibility. The web chat channel cannot be activated without the address of your own privacy notice. You process special categories of personal data only where there is a basis under Article 6 of the KVKK, only to the extent necessary and after assessing in advance the adequate measures determined by the Board (Terms 8.3; Data Processing Annex E.2).

5. Account, API and webhook security

  • Passwords, two-factor authentication tools, API keys and webhook secrets must be kept confidential. If you become aware of unauthorized use, you revoke the key concerned and inform UPPU without delay (Terms 4.3).
  • You are responsible for inviting your users, setting their roles and for their actions on the Platform, and you ensure that your users follow these rules (Terms 4.2).
  • You are responsible for the security of your API and webhook integrations, for the data transferred to your own systems by webhook and for the processing of that data in your systems (Terms 8.4).

6. What happens if the rules are broken

UPPU may suspend the service in whole or in part in the event of a serious breach of the Terms of Service or of Meta's terms, unlawful use, situations that threaten the security of the Platform or other customers, a request from competent authorities, or late payment; where possible, suspension is announced in advance with reasons (Terms 13). In the event of a material breach, the agreement may be terminated immediately (Terms 15.3). The customer indemnifies UPPU against damage arising from claims and sanctions brought against UPPU because of use in breach of the rules (Terms 14.3).

7. Tell us

If you believe that a business is using UPPU in breach of these rules, or if you have found a security vulnerability in the Platform, write to info@uppu.net. Please report a vulnerability as far as you have seen it, without continuing to test it.