Agreements

The agreements that apply to the service and the notices about personal data. The version you approve in the console is the one that applies; the texts here are published for information.

PVERSION SERVICE AGREEMENT

This is an English translation provided for convenience. In case of any conflict, the Turkish version prevails.

Last Updated: 10.11.2026
Effective Date: 10.11.2026

THIS AGREEMENT CONTAINS IMPORTANT PROVISIONS CONCERNING YOUR LEGAL RIGHTS AND OBLIGATIONS. PLEASE READ IT CAREFULLY.

1. PARTIES

This Service Agreement (the "Agreement") is entered into between:

(a) Gelişim Bulutu Eğitim ve Bilişim Hizmetleri Tic. Ltd. Şti., located at Alize Tower, Finanskent Mah. Yahya Kemal Cd. No:36 D:94, 34760 Ümraniye/İstanbul, registered with the Kadıköy Tax Office under tax number 3910604809 (trading under the brand "PVersion"; hereinafter "PVersion" or the "Provider")

and

(b) the natural or legal person who creates an account, purchases a service or uses the service on the PVersion console at https://console.pversion.com (hereinafter the "Customer" or "You"),

and is concluded upon its approval by electronic means and enters into force on the date of approval.

In this Agreement, the terms "we", "us" and "our" refer to the PVersion brand of Gelişim Bulutu Eğitim ve Bilişim Hizmetleri Tic. Ltd. Şti.; the terms "You", "Your", "Customer" and "User" refer to every natural or legal person who accepts this Agreement.

2. DEFINITIONS

Service: All services provided by PVersion, namely hosting of managed version control servers based on Perforce Helix Core, build and deploy automation, build agent management, backup, and the related console services.
Console: The management interface accessed at https://console.pversion.com and the related API.
Plan: The service plan selected by the Customer in the Console, with a defined price, term and usage limits (projects, users, depot size, number of agents, etc.).
Organization: The Customer's account in the Console; team members invited by the Customer are authorized under this Organization.
Customer Data: Source code, game and film assets, configuration files, build outputs and all other content hosted by the Customer through the Service.
Perforce Software: The Helix Core server and client software owned by Perforce Software, Inc. Perforce and Helix Core are registered trademarks of Perforce Software, Inc.; PVersion is an authorized Perforce partner.

3. SUBJECT MATTER OF THE AGREEMENT

This Agreement sets out the terms governing PVersion's provision of the Service to the Customer within the scope of the selected Plan, the conditions under which the Customer may use the Service, and the mutual rights and obligations of the parties. The Data Processing Agreement and (if consent has been given) the Commercial Electronic Message Consent apply together with this Agreement; in the event of a conflict, the provisions specific to the Service prevail. How personal data is processed is explained separately from this Agreement, in the KVKK Privacy Notice.

4. CONDITIONS FOR USING THE SERVICES

Only persons who are able to enter into legally binding contracts under applicable law may use the Service. By creating an account in the Console, you accept, represent and undertake that you are at least eighteen (18) years of age and have the legal capacity to enter into contracts.
If you enter into this Agreement on behalf of a legal entity, you accept, represent and undertake that you have the legal authority required to represent and bind that legal entity. If it is subsequently determined that you did not have such authority, you will be personally liable for all obligations arising from this Agreement, including payment obligations.
If the person acting on behalf of a legal entity ceases to be associated with that legal entity, PVersion must be notified promptly; if no such notification is made, the legal entity and the relevant natural person are jointly liable for any resulting damage.

5. ACCOUNT, ORGANIZATION AND ACCESS

The Customer undertakes that the information provided when creating an account is accurate, current and complete, and that it will keep it so. If PVersion concludes that the information is untrue or incomplete, PVersion reserves the right to suspend or terminate the account.
The Customer is obliged to keep all access credentials confidential, including e-mail address, password, API keys, Perforce user credentials and verification codes. The Customer is responsible for all actions carried out through the account, whether authorized or not.
When assigning roles (owner, admin, developer) to team members invited to its Organization, the Customer ensures that they act in accordance with this Agreement and removes their access when necessary. The actions of team members are deemed to be actions of the Customer.
For security reasons, PVersion may apply additional authentication steps such as one-time code verification by SMS, trusted device registration and similar measures.
If you suspect that your account has been used without authorization, you must inform PVersion immediately. PVersion is not liable for unauthorized use resulting from the Customer's negligence.

6. SCOPE AND NATURE OF THE SERVICE

PVersion creates the managed Perforce Helix Core server (or, depending on the Plan, servers) dedicated to the Customer under the Plan and provides SSL-encrypted access, user and depot management, license tracking and nightly backups.
Changes the Customer submits to Perforce may trigger build and deploy steps for the services defined by the Customer. Builds are performed on PVersion's infrastructure or on build agents running on the Customer's own machines. The security and configuration of agents running on the Customer's own machines are the Customer's responsibility.
Requests outside the Plan (special hardware, additional licenses, static IP, custom maintenance window, consultancy, etc.) may be charged separately.
The features of the Service are clearly shown in the Console at the time of purchase. The Customer may not claim compensation on the ground that features not specified at the time of purchase are not included in the Service.
Use of the Perforce Software is subject to the license terms of Perforce Software, Inc. The Customer agrees to comply with the Perforce user and server limits within the scope of the Service and not to breach the Perforce license terms.

7. AVAILABILITY, MAINTENANCE AND BACKUP

PVersion provides the Service with a monthly availability target of 99.5%. This is a target and, unless otherwise agreed in writing, does not constitute a service level agreement (SLA).
Planned maintenance is announced, where possible, at least twenty-four (24) hours in advance via the Console or by e-mail and is not included in the availability calculation. The Service may be temporarily interrupted without prior notice due to security patches, emergency interventions and third-party infrastructure failures.
Managed servers are backed up every night; backups are retained for seven (7) days. The Customer may take additional backups and restore them from the Console.
Backup is a supporting service. The Customer is also obliged to back up its business-critical data by its own means; no absolute guarantee is given that backups will always be complete or up to date.

8. ACCEPTABLE USE

The Customer uses the Service in accordance with this Agreement and all applicable national and international legislation. The following are prohibited (without limitation):

Hosting or distributing content constituting the offences listed in Article 8 of Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications ("Law No. 5651").
Use in a manner constituting offences under the Turkish Penal Code against honor, private life, personal data or property.
Hosting content that infringes the copyright, trademark, patent, design or personality rights of third parties; storing unlicensed or unauthorized source code, game assets or software.
Hosting or distributing malicious software (viruses, worms, trojans, etc.); unauthorized access to or attacks on (DDoS, brute force, etc.) PVersion's infrastructure or third-party systems, or disabling security features.
Using build agents and build steps for cryptocurrency mining, botnets, sending spam or purposes outside the Service.
Running processes that consume shared resources excessively in a way that adversely affects other customers.
Accessing the Console under the identity of another user or institution; using the Console and API in ways other than those intended by PVersion, reverse engineering or copying them.

In the event of a breach, PVersion may take the measures it deems necessary, including a warning, restriction of resources, removal of content, suspension of the account or termination of this Agreement for just cause. The Customer may not claim to be unaware of Law No. 5651 and related legislation.

9. PLANS, FEES AND PAYMENT

Service fees are the amounts shown in the Console when the Plan is selected and, unless otherwise stated, are inclusive of VAT.
PVersion may change Plan prices and the fees for extra users, servers and storage, for reasons such as changes in license, infrastructure and other costs, by giving at least thirty (30) days' notice in the Console and to the Customer's registered e-mail address. The new price applies from the first subscription period that starts at least thirty (30) days after the notice. The fee for a period already paid, including annual subscriptions, does not change until the end of that period.
A Customer who does not accept the new price may cancel the subscription in the Console so that it ends at the end of the period. In that case the new price is not applied to the Customer, and the right to export data under Article 15 remains.
The user, server, workspace and storage limits of each Plan are shown in the Console. On Plans with a limited number of users, larger teams move to a higher Plan.
Payments are collected in advance by credit or debit card using the 3D Secure method through the licensed payment institution iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. ("iyzico"). Card details are neither seen nor stored by PVersion; only the transaction result is transmitted to PVersion.
A subscription is valid for the selected period (monthly or annual). At the end of the period, unless the Customer makes the renewal payment, the Service is suspended; access to the Console is restricted and the Perforce server is stopped. During the suspension, Customer Data is retained for thirty (30) days; if no renewal is made within this period, the data may be deleted.
Invoices are issued as e-Archive invoices or e-Invoices in accordance with Tax Procedure Law No. 213, based on the billing information provided by the Customer in the Console, and are sent to the registered e-mail address. The Customer is responsible for the accuracy of the billing information.
If a payment cannot be collected, is disputed (chargeback) or is cancelled, PVersion may immediately suspend the relevant Service.

10. REFUNDS AND RIGHT OF WITHDRAWAL

The Service is a digital service whose performance begins instantly by electronic means. When the subscription is started with the Customer's approval, the Perforce server is set up and performance of the Service begins.
For Customers who qualify as consumers: pursuant to Law No. 6502 on Consumer Protection and Article 15 of the Regulation on Distance Contracts, the right of withdrawal cannot be exercised for services performed instantly by electronic means whose performance has begun with the consumer's approval. The Customer declares that it accepts this at the purchase step.
For Customers acting for commercial or professional purposes, no refund is made for a paid subscription period.
In cases where the Service could not be provided at all due to PVersion's fault, the refund is made through the channel through which payment was made, using the same payment method.

11. INTELLECTUAL PROPERTY AND CUSTOMER DATA

All rights in Customer Data belong to the Customer. PVersion processes Customer Data solely for the purposes of providing the Service, backing it up, running build and deploy steps and technical support; it has no right to inspect, reproduce, distribute or otherwise use Customer Data for other purposes.
The Customer accepts, represents and undertakes that it owns, or holds the necessary licenses and permissions for, all content it hosts through the Service, and that the content does not infringe third-party rights.
All intellectual and industrial property rights in the Console, the PVersion software, API, interface, documentation, and the PVersion name and logo belong to PVersion. This Agreement grants the Customer no right or license other than the right to use the Service during the term of the Agreement.
Perforce and Helix Core are registered trademarks of Perforce Software, Inc. and their use is subject to the terms of Perforce Software, Inc.

12. CONFIDENTIALITY AND PERSONAL DATA

The parties shall not share with third parties each other's trade secrets and confidential information learned under this Agreement, except where required by law. This obligation survives the termination of the Agreement.
The personal data of the Customer and its team members are processed to the extent described in the KVKK Privacy Notice. With respect to personal data of third parties hosted by the Customer through the Service, the Customer acts as data controller and PVersion as data processor; this relationship is governed by the Data Processing Agreement.
PVersion may share account and transaction records with the relevant authorities upon legal requests from domestic and foreign courts, public prosecutors, law enforcement and regulatory authorities, and in accordance with Law No. 6698 on the Protection of Personal Data. In the case of allegations of rights violations under Law No. 5651, PVersion may take the necessary measures, including removal of content, blocking of access, suspension of the account and sharing of the necessary information with the legal authorities.

13. LIMITATION OF LIABILITY

The Service is provided "as is" and "as available". PVersion does not warrant that the Service will be uninterrupted, error-free or fully suited to the Customer's specific needs.
Except in cases of intent or gross negligence, PVersion's total liability arising from this Agreement is limited to the total fees actually paid by the Customer to PVersion for the relevant Service in the twelve (12) months preceding the event giving rise to the damage.
Except in cases of intent or gross negligence, PVersion is not liable for loss of profit, loss of business, loss of reputation, loss of data, errors in third-party software and infrastructure, consequences arising from the Customer's build scripts and configuration, or indirect and incidental damages.
The Customer may not claim compensation for service interruptions arising from compliance with regulatory actions of the Information and Communication Technologies Authority (BTK) or other competent authorities.

14. INDEMNIFICATION

The Customer agrees to indemnify PVersion, its employees and representatives against all claims, lawsuits, administrative fines, costs (including attorneys' fees) and damages they may incur because of (i) the Customer's use of the Service, (ii) the Customer's breach of this Agreement, or (iii) the Customer's infringement of the intellectual property or other rights of third parties. This obligation survives the termination of the Agreement.

15. TERM, SUSPENSION AND TERMINATION

This Agreement enters into force upon electronic approval and remains in effect for as long as the Customer has at least one active subscription.
The Customer may cancel its subscription from the Console at any time, effective at the end of the period. Cancellation does not give rise to a right to a refund for the paid period.
If the Customer acts in breach of this Agreement, PVersion grants seven (7) days to remedy the breach; if the breach is not remedied, PVersion may terminate the Agreement. In the case of serious breaches (illegal content, attacks, payment fraud, etc.), PVersion has the right to terminate and suspend immediately without granting a cure period.
If PVersion decides to discontinue the Service entirely, it will notify the Customer at least sixty (60) days in advance and refund the fee for the remaining period.
If the Agreement ends for any reason, the Customer may export Customer Data within thirty (30) days via the Console or Perforce clients. At the end of this period, Customer Data and its backups are deleted; records subject to a statutory retention obligation are retained.
PVersion may decide, where necessary, that the Service will be provided by a group company or by another acquiring company; in that case the Customer will be informed at least thirty (30) days in advance and the obligations under KVKK will also be fulfilled by the new provider.

16. FORCE MAJEURE

Late or incomplete performance of obligations due to natural disasters, fire, war, terrorism, epidemics, strikes, large-scale internet or power outages, data center or carrier line failures, cyber attacks, decisions of official authorities and similar events beyond the reasonable control of the parties does not constitute a breach of the Agreement. If the force majeure event lasts longer than thirty (30) days, either party may terminate the Agreement.

17. AMENDMENTS

PVersion may update this Agreement and its annexed texts due to legislative changes, changes in the scope of the Service or other justified reasons. The current version is published in the Console, and the Customer may not continue to use the Service at its next login without approving the new version. Approval records are kept with the user, version, date and IP information. Price changes are subject to the provisions of Article 9.

18. NOTICES

Notices between the parties are made, for PVersion, to the e-mail address [email protected] and to the address stated in Article 1, and, for the Customer, to the e-mail address registered in the Console. The Customer is responsible for keeping its e-mail address up to date; notices sent to the registered address are deemed to have reached the Customer.

19. DISPUTE RESOLUTION AND JURISDICTION

This Agreement is governed by the laws of the Republic of Türkiye. The Istanbul (Anadolu) Courts and Enforcement Offices have jurisdiction over disputes arising from the Agreement. For Customers who qualify as consumers, the Consumer Arbitration Committees and Consumer Courts also have jurisdiction within the monetary limits set under Law No. 6502.

20. SEVERABILITY AND ENTIRE AGREEMENT

If any provision of this Agreement is found to be invalid or unenforceable, this does not affect the validity of the other provisions. Headings are for convenience only. This Agreement, together with its annexes, constitutes the entire agreement between the parties and supersedes all prior oral or written understandings.

21. ENTRY INTO FORCE

The Customer acknowledges that it has read and understood this Agreement and approved it by electronic means. Electronic approval is a valid declaration of intent under Turkish Code of Obligations No. 6098 and Law No. 6563 on the Regulation of Electronic Commerce.

SERVICE PROVIDER

Gelişim Bulutu Eğitim ve Bilişim Hizmetleri Tic. Ltd. Şti. ("PVersion")
Tax ID: 3910604809 · Tax Office: Kadıköy
Alize Tower, Finanskent Mah. Yahya Kemal Cd. No:36 D:94, 34760 Ümraniye/İstanbul
E-mail: [email protected] · Web: https://pversion.com

PRIVACY NOTICE UNDER THE PERSONAL DATA PROTECTION LAW (KVKK)

This is an English translation provided for convenience. In case of any conflict, the Turkish version prevails.

Last Updated: 10.11.2026
Effective Date: 10.11.2026
Legislation: Law No. 6698 on the Protection of Personal Data ("KVKK"); Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.

1. DATA CONTROLLER

Trade Name: Gelişim Bulutu Eğitim ve Bilişim Hizmetleri Tic. Ltd. Şti.
Brand: PVersion (https://pversion.com)
Tax ID: 3910604809
Tax Office: Kadıköy
Address: Alize Tower, Finanskent Mah. Yahya Kemal Cd. No:36 D:94, 34760 Ümraniye/İstanbul
E-mail: [email protected]

Gelişim Bulutu Eğitim ve Bilişim Hizmetleri Tic. Ltd. Şti., referred to in this notice as the "Data Controller", the "Company" or "PVersion", processes, in its capacity as data controller under KVKK and related legislation, the personal data of its customers, of users invited to the console by its customers, of its visitors and of other relevant persons (each a "Data Subject") within the scope, for the purposes and on the legal grounds described below.

2. SCOPE

This Privacy Notice applies to all personal data that reaches PVersion or is collected by PVersion through the following channels:

https://pversion.com and its subdomains (console.pversion.com, etc.)
Registration, invitation, project and server management, purchase, payment, contract approval and support transactions carried out through the PVersion console and its API
Transaction and access records generated through managed Perforce servers and build agents
Communication established by telephone, e-mail or physical means
One-time code (OTP) verification by SMS and corporate integrations (iyzico, Netgsm, Mailjet, etc.)

3. CATEGORIES OF PERSONAL DATA PROCESSED

3.1. Identity Data

First name, last name; Turkish national identification number (T.C. kimlik numarası) or tax number and trade name, for the purpose of issuing invoices.

3.2. Contact Data

E-mail address, mobile phone number, billing address, country and city.

3.3. Customer Transaction Data

Organization and membership information, roles, invitations, selected plan, subscription period, order and payment history, invoice records, support correspondence.

3.4. Financial Data

Billing information, payment amount and date, the payment institution's transaction number, the masked last four digits of the card. The full card number is not seen by PVersion and is NOT STORED; it remains with the payment institution iyzico.

3.5. Transaction Security Data

Password hash, session cookie, IP address, browser and operating system information, trusted device record, records of successful and failed logins, OTP sending and verification records, API key usage records.

3.6. Service Usage Data

Perforce user names, depot and project names, author name, e-mail and description information contained in changelists and file history, build and deploy logs, build agent names and machine information, backup records.

3.7. Legal Transaction Data

Contract approval records (user, text version, date, IP, browser), application and complaint information, dispute files.

3.8. Marketing Data

Processed only if you give explicit consent: notification channel preferences (e-mail, SMS), consent and opt-out records.

WE DO NOT PROCESS SPECIAL CATEGORIES OF PERSONAL DATA. Data within the scope of KVKK Art. 6, such as health, biometric data, ethnic origin, religion, political opinion, trade union membership and criminal convictions, is not requested, collected or processed. If such data is transmitted by mistake, it is deleted immediately. Customers must not host such data in their own Perforce depots; if they do, responsibility lies with the Customer in its capacity as data controller.

4. PURPOSES OF PROCESSING PERSONAL DATA

4.1. Membership and Account Management

Creating accounts, invitation links, password resets, identity verification by SMS, trusted device management, session management, management of API keys.

4.2. Formation and Performance of the Contract

Purchase of plans, setting up and operating the managed Perforce server, opening Perforce user accounts, running build and deploy steps, backups, subscription renewals, cancellations.

4.3. Financial and Legal Obligations

Issuing invoices, sending e-Invoices / e-Archive invoices, and bookkeeping and record-keeping obligations under Tax Procedure Law No. 213 ("VUK"), Turkish Commercial Code No. 6102 ("TTK"), Law No. 6502 on Consumer Protection ("TKHK") and other legislation.

4.4. Payment Transactions

Collecting payments with 3D Secure through iyzico, matching payment results, refund transactions.

4.5. Communication and Customer Relations

Sending invitations, verification codes, invoices, and payment, subscription and service notifications; managing support requests.

4.6. Information Security and Abuse Prevention

Protecting accounts against unauthorized access, limiting login attempts, log analysis, fraud detection, spam and bot blocking.

4.7. Legal Obligations and Protection of Rights

Providing information to competent public authorities and institutions (court orders, requests from public prosecutors, obligations under Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications, etc.), following up legal claims in potential disputes.

4.8. Improving Service Quality

Anonymous or aggregate statistics, debugging, performance monitoring.

4.9. Marketing (With Explicit Consent)

Sending announcements of product news, campaigns and events by e-mail or SMS.

5. LEGAL GROUNDS (KVKK Art. 5)

PVersion processes personal data based on one or more of the following legal grounds:

Explicit Consent (Art. 5/1): For commercial electronic messages for marketing purposes.
Expressly Provided for by Law (Art. 5/2-a): VUK, TTK, TKHK, Law No. 5651, etc.
Formation or Performance of a Contract (Art. 5/2-c): Membership, plan purchase, provision of the service.
Compliance with a Legal Obligation (Art. 5/2-ç): Invoices, books of account, court requests.
Establishment, Exercise or Protection of a Right (Art. 5/2-e): Evidence in legal disputes.
Legitimate Interest (Art. 5/2-f): Information security, abuse prevention, service improvement.

6. TRANSFER OF PERSONAL DATA (KVKK Art. 8 and Art. 9)

6.1. Domestic Transfers

Data may be transferred to third parties in Türkiye in the following cases and only to the extent limited to the purpose of the transfer:

Payment Service Provider: iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. (iyzico). Card information is processed entirely by the provider; only the transaction result is returned to PVersion.
SMS / OTP Provider: Netgsm İletişim ve Bilgi Teknolojileri A.Ş. Only your phone number and the message content are transmitted.
e-Invoice / e-Archive Providers: The Revenue Administration (Gelir İdaresi Başkanlığı) and contracted private integrators. Only invoice information is transmitted.
Certified public accountants, lawyers and independent auditors: Subject to professional secrecy obligations.
Competent public authorities: Courts, public prosecutors, the Information and Communication Technologies Authority (BTK), the Personal Data Protection Authority, tax offices.

6.2. Transfers Abroad

Mailjet SAS (France, European Union) is used as the e-mail delivery infrastructure. Only your e-mail address, your name and the message content are transmitted to this provider in order to deliver invitation, verification, invoice and notification e-mails.
For transfers abroad under KVKK Art. 9, data is transferred to countries declared by the Personal Data Protection Board to provide adequate protection, or adequate protection is ensured by standard contract / written undertaking, or your explicit consent is obtained.
Customer Data (source code, assets, build outputs) and the managed Perforce servers are hosted on servers located within the borders of Türkiye; data that the Customer, by its own choice, sends to build agents or deploy targets located abroad is the Customer's responsibility.

7. METHOD OF COLLECTING PERSONAL DATA

7.1. Automated Methods

Session cookies, browser information and IP address when accessing the console and the website
Registration, invitation, purchase, billing and contact forms
The SMS / OTP sending and verification flow
Perforce server, build agent and console application logs

7.2. Non-Automated Methods

Information and documents transmitted by e-mail, telephone or physical means
Business cards and documents provided in face-to-face meetings

8. RETENTION PERIODS

Your personal data is retained for the period expressly provided for in the legislation or for the period related to the purpose for which it is processed. After the relevant purpose ends, it is placed on the periodic destruction schedule:

Membership and organization data: For as long as the membership is active + 10 years from the last transaction (TTK Art. 82, VUK Art. 253).
Invoices and financial data: 10 years from the year following the year in which they were issued (VUK Art. 253).
Contract approval records: Term of the contract + 10 years (Turkish Code of Obligations ("TBK") Art. 146).
Login, access and transaction logs: 2 years under Art. 5/3 of Law No. 5651; may be extended by decision of the Authority.
OTP records: At most 24 hours after the time of verification; for the code hash, immediately; the sending record is retained in masked form.
Marketing consents: Until the date explicit consent is withdrawn; after withdrawal, the opt-out record is retained for 3 years as evidence in İYS disputes.
Support correspondence: 5 years from the closing of the request.
Customer Data and its backups: For the duration of the subscription; 30 days after it ends. Nightly backups are retained for 7 days.

Personal data whose retention period has expired is deleted, destroyed or anonymized at the first periodic destruction run (at most 6 months).

9. DATA SECURITY MEASURES

The technical and administrative measures taken under KVKK Art. 12 include the following:

9.1. Technical Measures

TLS-encrypted transmission for console, API and Perforce connections
Storage of passwords using one-way, salted algorithms (bcrypt)
Storage of secret keys, API credentials and Perforce passwords in encrypted form (AES-256-GCM) in the database
Second-factor verification by SMS and trusted device registration
Login attempt limiting, brute-force protection
Role-based access (owner, admin, developer, operator), access and approval logs
Daily backups and a restore procedure
Software and server updates, security patches

9.2. Administrative Measures

KVKK awareness training for employees
Confidentiality agreements and data protection clauses in job descriptions
Data inventory and inventory of processing activities (compliance with the Data Controllers' Registry, VERBİS)
Data breach response plan and procedure for notifying the Personal Data Protection Board
Periodic destruction policy

10. RIGHTS OF THE DATA SUBJECT (KVKK Art. 11)

As a Data Subject, you may exercise the following rights by applying to PVersion:

to learn whether your personal data is being processed,
to request information about the processing if your personal data has been processed,
to learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
to know the third parties in Türkiye or abroad to whom your personal data has been transferred,
to request rectification of your personal data if it has been processed incompletely or inaccurately,
to request erasure or destruction of your personal data under the conditions set out in KVKK Art. 7,
to request that rectification, erasure and destruction operations be notified to the third parties to whom the data has been transferred,
to object to a result to your detriment arising from the analysis of the processed data exclusively through automated systems,
to claim compensation for damage if you suffer damage due to the unlawful processing of your personal data.

11. HOW TO APPLY

To exercise the rights above, you may apply by one of the following methods in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller":

By a petition bearing a wet-ink signature: Alize Tower, Finanskent Mah. Yahya Kemal Cd. No:36 D:94, 34760 Ümraniye/İstanbul
By registered electronic mail (KEP)
By sending an e-mail signed with a secure electronic signature or mobile signature from your e-mail address registered in our system to [email protected]

Your application must include your first and last name, Turkish national identification number (passport number for foreign nationals), address for service, an e-mail address and telephone number for notification, the subject of the request and any relevant documents.

Your application will be answered free of charge within 30 (thirty) days at the latest under KVKK Art. 13/2. If the action requires an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged. If your application is rejected, the response is found insufficient or no response is given in time, you may lodge a complaint with the Personal Data Protection Board under KVKK Art. 14 within 30 days of learning of the response and, in any case, within 60 days of the application date.

12. COOKIES

The PVersion console uses only cookies that are strictly necessary to provide the service; no analytics or marketing cookies are used.

Session cookie: Used to keep you logged in; becomes invalid when the browser is closed or when you log out.
Trusted device cookie: Remembers the device on which you completed SMS verification for 30 days; it is not created unless you tick the "Trust this device" option.
Security cookies: Used for a short period to protect the integrity of the SMS verification and login flows.

13. CHILDREN'S DATA

PVersion services are designed for individuals aged 18 or over and for legal entities. Data is not knowingly collected from individuals under 18; if it is found to have been collected by mistake, it is deleted immediately.

14. UPDATES

This Privacy Notice may be updated in line with legislative changes, changes in the scope of the service or guidance issued by the Personal Data Protection Board. The current version is always published in the PVersion console, and users are informed in the console and by e-mail in the case of material changes.

15. CONTACT

Data Controller: Gelişim Bulutu Eğitim ve Bilişim Hizmetleri Tic. Ltd. Şti. ("PVersion")
Tax ID: 3910604809 · Tax Office: Kadıköy
Alize Tower, Finanskent Mah. Yahya Kemal Cd. No:36 D:94, 34760 Ümraniye/İstanbul
E-mail: [email protected] · Web: https://pversion.com

When you indicate in the console that you have read this notice, that is a record that our obligation to inform under KVKK Art. 10 has been fulfilled; it is not an approval or a statement of explicit consent. Your explicit consent for marketing communications is requested separately and is optional.

DATA PROCESSING AGREEMENT (DATA CONTROLLER – DATA PROCESSOR)

This is an English translation provided for convenience. In case of any conflict, the Turkish version prevails.

Last Updated: 10.11.2026
Effective Date: 10.11.2026
Legislation: Law No. 6698 on the Protection of Personal Data ("KVKK"); Regulation on the Erasure, Destruction or Anonymization of Personal Data; decisions of the Personal Data Protection Board.

This Agreement is entered into because the Customer hosts personal data of its own employees, contractors and users on servers operated by PVersion, with the Customer acting as "data controller" and PVersion acting as "data processor", and forms an integral part of the Service Agreement.

1. PARTIES AND ROLES

Data Controller: The natural or legal person who creates an account on the PVersion console and approves the Service Agreement (the "Customer").
Data Processor: Gelişim Bulutu Eğitim ve Bilişim Hizmetleri Tic. Ltd. Şti. (trading under the brand "PVersion"); Tax ID 3910604809, Kadıköy Tax Office; Alize Tower, Finanskent Mah. Yahya Kemal Cd. No:36 D:94, 34760 Ümraniye/İstanbul; e-mail [email protected].
PVersion processes the personal data hosted by the Customer through the Service ("Customer Personal Data") solely in accordance with the Customer's instructions and for the purpose of providing the Service.
With respect to personal data relating to the PVersion accounts of the Customer and its team members (identity, contact, payment, login records), PVersion is the data controller; that processing is subject to the KVKK Privacy Notice and falls outside the scope of this Agreement.

2. SCOPE OF PROCESSING

Data subjects: The Customer's employees, contractors, users invited to the console and persons for whom a Perforce account is opened.
Data categories: First name, last name, e-mail address, Perforce user name; author information and changelist descriptions contained in source code and file history; user information contained in build and deploy logs; access and transaction records.
Processing activities: Hosting, storage, backup, access management, authentication, running build and deploy steps, technical support, deletion.
Purpose of processing: Providing the Customer with the Service defined in the Service Agreement.
Duration: For the term of the Service Agreement and, after it ends, until the data is returned or destroyed in accordance with Article 6.
Special categories of personal data are outside the scope of this Agreement. The Customer agrees that it will not host special categories of personal data through the Service and that, if a compelling need arises, it will inform PVersion in writing in advance and the parties will jointly agree on the necessary additional measures.

3. OBLIGATIONS OF THE DATA PROCESSOR

PVersion:

processes Customer Personal Data only in accordance with the Customer's documented instructions (the Service Agreement, commands given through the console and written requests); unless legally required, it does not use it for other purposes, disclose it to third parties or process it for its own purposes.
informs the Customer immediately if it considers that an instruction is contrary to KVKK or other legislation.
takes appropriate technical and administrative measures under KVKK Art. 12 to prevent unlawful processing of and unlawful access to the data and to ensure its safekeeping: TLS-encrypted transmission, encrypted storage of secret keys and passwords, role-based access, login limiting, daily backups, access and transaction logs, up-to-date software and security patches.
places its personnel and sub-processors who access Customer Personal Data under confidentiality obligations and limits access to persons who need it to perform their duties.
hosts Customer Personal Data on servers located within the borders of Türkiye; it does not transfer it abroad except on the Customer's explicit instruction or to the sub-processors listed in Article 4.
notifies the Customer of a data breach (unauthorized access to, or loss, alteration or disclosure of, Customer Personal Data) without delay and in any event within 48 (forty-eight) hours of becoming aware of it, and shares the information it has on the nature of the breach, the categories of data and persons affected, the likely consequences and the measures taken. It provides reasonable assistance with the notification that the Customer must make to the Personal Data Protection Board within 72 hours.
provides reasonable assistance to the Customer in responding to applications by data subjects under KVKK Art. 11, by forwarding to the Customer applications that reach PVersion directly and by providing technical information on request.
carries out deletion and user removal instructions given by the Customer through the console; the purging of deleted data from backups is completed at the end of the 7-day backup retention period.

4. SUB-PROCESSORS

The Customer grants PVersion a general authorization to use the following sub-processors to provide the Service:

iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. (Türkiye): Payment processing. It has no access to Customer Personal Data; it processes only the Customer's payment information.
Netgsm İletişim ve Bilgi Teknolojileri A.Ş. (Türkiye): Sending verifications and notifications by SMS. Only the phone number and message content are transmitted.
Mailjet SAS (France, European Union): Delivery of invitation, verification, invoice and notification e-mails. Only the e-mail address, name and message content are transmitted. The transfer abroad is protected by standard contractual clauses under KVKK Art. 9.
Hosting: The managed Perforce servers and the console run on servers operated by PVersion and located in Türkiye. Data center or carrier line providers do not access the data at content level.

PVersion keeps the list of sub-processors up to date in the console. The addition of a new sub-processor or the replacement of an existing one is announced to the Customer by e-mail or console notification at least 15 (fifteen) days in advance. The Customer may object within this period on justified grounds; if the objection cannot be resolved, the Customer may terminate the Service Agreement effective at the end of the period. PVersion imposes on its sub-processors data protection obligations equivalent to those in this Agreement and remains liable to the Customer for the acts of its sub-processors.

5. OBLIGATIONS OF THE DATA CONTROLLER

The Customer:

ensures that Customer Personal Data has been collected lawfully, that the obligation to inform under KVKK Art. 10 has been fulfilled and that explicit consent has been obtained where required.
manages the access rights of the users it invites to the console and of the Perforce accounts it has opened; it removes the access of departing persons without delay.
does not keep unnecessary personal data in Perforce depots, changelist descriptions and build scripts; it complies with the principle of data minimization.
is responsible for the lawfulness of the instructions it gives to PVersion.
ensures the security of the Perforce clients, build agent machines and deploy targets used on its side.
manages data subject applications and data breach notifications in accordance with KVKK.

6. RETURN AND DESTRUCTION OF DATA AT THE END OF THE AGREEMENT

For 30 (thirty) days after the Service Agreement ends, the Customer may export Customer Data, including Customer Personal Data, via the console or Perforce clients.
At the end of this period, PVersion erases or destroys Customer Personal Data and its backups in accordance with the Regulation on the Erasure, Destruction or Anonymization of Personal Data. Records subject to statutory retention obligations (invoices, contract approvals, access logs under Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications) are retained until the end of those periods.
Upon the Customer's written request, PVersion confirms in writing that the destruction has been completed.

7. AUDIT

Subject to giving at least 30 (thirty) days' prior written notice and not more than once a year, the Customer may audit PVersion's compliance with this Agreement on the basis of documents, policy summaries and, if any, independent audit reports provided by PVersion. An on-site audit is carried out in a manner that does not affect the confidentiality of PVersion's other customers or system security, and within a scope jointly agreed by the parties; reasonable audit costs are borne by the Customer.

8. LIABILITY

The parties' liability arising from this Agreement is subject to the limitations of liability in the Service Agreement.
Each party is liable for administrative fines imposed by competent authorities and compensation payable to data subjects that result from its own fault. PVersion, when acting in accordance with the Customer's instructions, cannot be held liable for breaches resulting from those instructions.
Under KVKK Art. 12/2, the data controller and the data processor are jointly responsible for taking data security measures.

9. TERM AND ENTRY INTO FORCE

This Agreement enters into force upon electronic approval of the Service Agreement and ends together with the Service Agreement; the provisions of Articles 3, 6 and 8 remain in force until the data is destroyed.
In the event of a conflict between this Agreement and the Service Agreement, this Agreement prevails on matters relating to the protection of personal data.
PVersion may update this Agreement in the event of legislative changes; the current version is published in the console and the Customer approves it at its next login.
This Agreement is governed by the laws of the Republic of Türkiye; the Istanbul (Anadolu) Courts and Enforcement Offices have jurisdiction over disputes.

DATA PROCESSOR

CONSENT TO COMMERCIAL ELECTRONIC MESSAGES AND EXPLICIT CONSENT TEXT

This is an English translation provided for convenience. In case of any conflict, the Turkish version prevails.

Last Updated: 10.11.2026
Effective Date: 10.11.2026
Legislation: Law No. 6698 on the Protection of Personal Data ("KVKK"); Law No. 6563 on the Regulation of Electronic Commerce; Regulation on Commercial Communications and Commercial Electronic Messages (Message Management System, İYS).

IMPORTANT NOTICE: Under KVKK Art. 5/1, this text covers only personal data processing activities that are SUBJECT TO EXPLICIT CONSENT. Data processing activities that are necessary to provide the service and are based on the other legal grounds in KVKK Art. 5/2 are set out in a separate document, the KVKK Privacy Notice.

Giving explicit consent is entirely at your discretion; you may decline to give it, or withdraw consent you have given at a later time. If explicit consent is not given or is withdrawn, the essential parts of the service (account, subscription, invoicing, server management, security, etc.) are not affected; only the marketing communications described below are stopped.

1. IDENTITY OF THE DATA CONTROLLER

Trade Name: Gelişim Bulutu Eğitim ve Bilişim Hizmetleri Tic. Ltd. Şti.
Brand: PVersion (https://pversion.com). The term "PVersion" in this text is always to be understood as the brand of Gelişim Bulutu Eğitim ve Bilişim Hizmetleri Tic. Ltd. Şti.
Tax ID: 3910604809
Tax Office: Kadıköy
Address: Alize Tower, Finanskent Mah. Yahya Kemal Cd. No:36 D:94, 34760 Ümraniye/İstanbul
E-mail: [email protected]

2. PERSONAL DATA TO BE PROCESSED ON THE BASIS OF EXPLICIT CONSENT

When you approve this text, you give your explicit consent to the processing of the following personal data for the purposes set out in Article 3:

Identity data: First name, last name
Contact data: E-mail address, mobile phone number
Customer transaction data: The plan you use, subscription status, purchase history
Marketing data: Your notification channel preferences, delivery, open and click records of the messages sent

3. PURPOSES OF PROCESSING ON THE BASIS OF EXPLICIT CONSENT

The following activities are carried out by PVersion only if you approve this text:

3.1. Sending Commercial Electronic Messages

Sending, by E-MAIL, product news, new features, campaigns and discounts, event and webinar announcements, surveys and offers
Sending short messages with the same scope by SMS

3.2. Keeping Notification Records

Reporting consent, opt-out and sending records to the Message Management System (İleti Yönetim Sistemi, İYS) and retaining them, in accordance with Law No. 6563 and the İYS rules

3.3. Transfer of Data Abroad

Because the e-mail delivery infrastructure (Mailjet SAS, France) is located abroad, the transfer, under KVKK Art. 9, of your first name, last name and e-mail address listed above to this provider for the purpose of sending messages. The transfer is made to countries declared by the Personal Data Protection Board to provide adequate protection or to providers for which adequate protection is ensured by a standard contract.

4. MATTERS OUTSIDE THE SCOPE

The following notifications are NOT SUBJECT TO EXPLICIT CONSENT; they are sent for the purpose of providing the service whether or not you consent to this text:

Invitation links, password resets and SMS verification codes
Invoice, payment, subscription renewal and suspension notifications
Server, backup, build and deploy status notifications
Contract changes, security alerts and legal notices
Responses to your support requests

The information required for these notifications is set out in a separate document, the KVKK Privacy Notice.

5. EXPLICIT CONSENT OPTIONS

You may approve each of the following options separately, or approve none of them, in the console under Settings → Account → Notification permissions. Each approval is independent; declining one does not affect the other.

I agree to receive commercial electronic messages by e-mail.
I agree to receive commercial electronic messages by SMS.

When you approve this text, you are deemed to have given consent for the channels that are enabled in the console at that time; you may later update your preference for each channel separately.

6. NATURE OF EXPLICIT CONSENT

Under KVKK Art. 3/1-a and Art. 5/1, explicit consent is:

Freely given: It is not presented as a precondition for providing the service.
Specific: It is limited to the purposes listed in Articles 3 and 5 above; it is not a general, blanket consent.
Informed: Through this text, the data controller, the data to be processed, the purposes of processing, the transfers, your rights and the methods of withdrawal have been clearly communicated.

7. WITHDRAWAL OF EXPLICIT CONSENT

You may withdraw the explicit consent you have given at any time, without giving any reason, by one of the following methods:

By switching off the relevant channel in the console under Settings → Account → Notification permissions
By clicking the "Unsubscribe" link at the bottom of every commercial e-mail sent to you
By using the opt-out method stated in SMS messages
By sending a written notice to [email protected]
By updating your preferences through the Message Management System (https://iys.org.tr)

Your withdrawal request is implemented within 3 (three) business days at the latest. Withdrawal does not affect the lawfulness of processing activities carried out before that date.

8. RETENTION PERIODS

Marketing consents and sending records: 3 years from the date explicit consent is withdrawn (for İYS audits and as evidence in disputes); during this period they are kept only as an opt-out record and no messages are sent.
Records of transfers abroad: The year in which the transfer took place + 5 years.

9. UNAUTHORIZED USERS

Persons under 18 years of age do not have the capacity to give this explicit consent; consent declarations submitted without the approval of a parent or guardian are invalid.
If PVersion determines that a declaration of explicit consent has been made using another person's data, it immediately cancels the relevant consent record.

10. RIGHTS OF THE DATA SUBJECT

A detailed explanation of your rights under KVKK Art. 11 and the method of application are set out in a separate document, the KVKK Privacy Notice; you can access that text from the console and at https://pversion.com.

11. UPDATES

This text may be updated in the event of legislative changes or changes in the scope of the service. In the case of material changes, your existing explicit consents become invalid and your approval is requested again for the new text. The current version is always published in the PVersion console.

12. DECLARATION AND APPROVAL

I accept and declare that I have read this text and fully understood its content, that the KVKK Privacy Notice has also been provided to me, and that, limited to the channels I selected in Article 5 above, I give my EXPLICIT CONSENT, FREELY, ON AN INFORMED BASIS and with respect to SPECIFIC matters, to the processing of my personal data by PVersion — Gelişim Bulutu Eğitim ve Bilişim Hizmetleri Tic. Ltd. Şti. and to the sending of commercial electronic messages to me.

DATA CONTROLLER

PRE-CONTRACT INFORMATION AND DISTANCE SALES AGREEMENT

This is an English translation provided for convenience. In case of any conflict, the Turkish version prevails.

Last Updated: 10.11.2026
Effective Date: 10.11.2026

This text is prepared under Law No. 6502 on Consumer Protection and the Regulation on Distance Contracts. It informs the Buyer who purchases a plan, extra users, extra servers or extra storage in the PVersion console before payment, and sets out the terms of the sale. The Buyer sees and accepts this text at the payment step together with the order summary; the acceptance is kept with the date, version and IP address.

1. SELLER

Name: Gelişim Bulutu Eğitim ve Bilişim Hizmetleri Tic. Ltd. Şti. (trading as "PVersion")
Address: Alize Tower, Finanskent Mah. Yahya Kemal Cd. No:36 D:94, 34760 Ümraniye/İstanbul, Türkiye
Tax Office and ID: Kadıköy, 3910604809
E-mail: [email protected]
Web: https://pversion.com

2. BUYER

The natural or legal person who has an account in the PVersion console and makes the purchase. The Buyer's name, address and invoice details are those entered or selected at the payment step.

3. SUBJECT AND MAIN FEATURES OF THE SERVICE

The subject is the electronic sale of the service defined in the PVersion Service Agreement: a managed version control server, nightly backups, build and release automation, the desktop app and the console.
The name of the Plan purchased, its period (monthly or annual), the users, servers and storage it includes, and any extra users, servers and storage bought are shown in the order summary at the payment step. The order summary is part of this agreement.
After payment, the order summary and a link to this text are sent to the Buyer's registered e-mail address.

4. PRICE AND PAYMENT

The total price, including taxes, is shown in the order summary. Prices in Turkish lira include VAT. There are no delivery or other extra costs.
Payment is taken in advance by credit or debit card with 3D Secure through the licensed payment institution iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. ("iyzico"). Card details are not seen or stored by the Seller.
Purchases made in the middle of a period are charged for the remaining days of that period.

5. START OF THE SERVICE

The service starts electronically as soon as the payment is confirmed: the Plan becomes active and any extras are added to the account. There is no separate delivery.

6. TERM, RENEWAL AND END

A subscription is valid for the selected period (monthly or annual). It does not renew automatically and the card is not stored; renewal happens with a new payment by the Buyer.
A service not renewed at the end of the period is suspended; data is kept for thirty (30) days and can be exported during that time.
The Buyer may cancel the subscription in the console at any time so that it ends at the end of the period.
Price changes are announced at least thirty (30) days ahead and do not change the price of a period already paid.

7. RIGHT OF WITHDRAWAL

Under Article 15(1)(ğ) of the Regulation on Distance Contracts, the right of withdrawal does not apply to services performed instantly in an electronic environment.
At the payment step the Buyer agrees that the service starts immediately upon payment and confirms knowing that there is therefore no right of withdrawal.
If the service cannot be provided at all due to the Seller's fault, the amount paid is refunded to the card used for the payment.

8. COMPLAINTS AND DISPUTES

Complaints and requests can be sent to [email protected].
A Buyer who is a consumer may apply to the Consumer Arbitration Committees within the monetary limits announced each year by the Ministry of Trade, and to the Consumer Courts above those limits, at the Buyer's place of residence or where the transaction was made.

9. OTHER PROVISIONS

The PVersion Service Agreement applies together with this agreement. For consumers, if the two conflict, the provision more favourable to the consumer applies.
The provisions on the right of withdrawal and consumer dispute bodies apply only to a Buyer who is a consumer; for a Buyer purchasing for commercial or professional purposes, the relevant provisions of the Service Agreement apply.

10. ACCEPTANCE

Before paying, the Buyer confirms having read this Pre-Contract Information and the order summary, accepts the Distance Sales Agreement electronically, and knows that the payment creates an obligation to pay.

RIGHTS INFRINGEMENT NOTICE

If you believe content hosted on PVersion infringes your copyright, trademark or personal rights, write to [email protected].

Please include:

The web address of the content, or details that identify it
Which of your rights is infringed and how, with supporting evidence if you have it
Your name or company name and how we can reach you
If you are applying for someone else, what shows your authority

We review the notice, pass it to the customer who owns the content if needed, and take the necessary measures, including removing the content. Court and authority orders can be sent to the same address.

This channel does not limit any other route the law gives you.