LEGAL DOCUMENT

Acceptable Use Policy

What may not be done on AIOR infrastructure, how resources are shared fairly, the rules for sending e-mail, and how we act on a violation. The purpose is to protect the service of every customer.

Effective: 2026-09-22
Basis: Law no. 5651 · Intellectual and Artistic Works Law no. 5846 · E-Commerce Law no. 6563 · Data Protection Law no. 6698 · ISO/IEC 27001 · Related controlled document AIOR-HYS-PRS-24-PLT-05

1. Purpose and Scope

This policy sets the rules that apply when using AIOR's hosting, server, domain, e-mail, managed application and cloud services. Its purpose is to protect the integrity of the service, other customers' access and the rights of third parties.

The policy binds the customer using the service and every user the customer authorises. The customer is responsible for their users' compliance and for the content they host.

2. General Principles

The service is used in compliance with applicable law and the rights of third parties.
On shared infrastructure no customer may consume resources in a way that degrades others' service quality.
Bypassing, circumventing or disabling security controls is prohibited in all cases.
In case of doubt, we expect you to ask us via a support record before acting.

3. Prohibited Content

Any content criminalised by law, including publications subject to the catalogue offences listed in Law no. 5651.
Any child sexual abuse material — on detection the service is stopped immediately and the competent authorities are notified.
Content infringing copyright, trademarks or other intellectual property rights, and its distribution (Law no. 5846).
Malware, exploit code, phishing pages and fake authentication screens.
Archives containing personal data, card data or credentials obtained without authorisation.
Hate speech, incitement to violence and publications attacking personal rights.

4. Prohibited Activities

Attempting unauthorised access, using someone else's account, password cracking and session hijacking.
Unauthorised security scanning, port scanning, network sniffing and penetration testing. Testing your own system requires prior written notice.
Launching denial-of-service (DoS/DDoS) attacks or hosting software used as a tool in such attacks.
Cryptocurrency mining and similar background jobs that continuously consume high CPU/memory (except on dedicated-resource server services).
Installing, using or distributing unlicensed or pirated software.
Running an open relay/open proxy and using the infrastructure to conceal third parties' traffic.
Activities that abuse domain or IP reputation, or registration with false identity data.

5. E-mail and Commercial Message Rules

Unsolicited bulk e-mail (spam) is prohibited. Promotional commercial electronic messages may be sent only with consent obtained under Law no. 6563.
Purchased or scraped lists may not be used; every message must offer an opt-out.
Concealing sender identity or forging headers or the return path is prohibited.
Correct SPF, DKIM and DMARC configuration is expected for your domain; misconfiguration causes delivery problems and reputation loss.
On shared hosting, bulk sending must use a purpose-built sending infrastructure rather than the server's e-mail service.

6. Resource Usage and Fair Use

CPU, memory, I/O and concurrent process limits for shared packages are stated on the product page; sustained overage is treated as use unsuited to the package.
On overage we first inform you and suggest improvements; we then recommend moving to a suitable package as a permanent fix.
Backup space is for the service's own data; it may not be used as general-purpose file storage or an archive.

7. Customer Security Obligations

Keep applications, themes and plugins updated; do not leave unsupported versions in production.
Use strong, unique passwords; enable multi-factor authentication wherever available.
Do not leave admin panels and development environments publicly exposed; disable unnecessary services.
Open a support record immediately if you notice your account has been compromised.

8. Reporting Abuse

You can report abuse, unlawful content or copyright infringement you believe originates from our infrastructure. Including the relevant address (URL or IP), the date and time, and any evidence (headers, logs) speeds up the investigation.

Reports may be sent by e-mail, registered e-mail (KEP) or the contact form. Every report is recorded and tracked.

9. Investigation and Enforcement

An incident record is opened and an investigation is carried out upon a report or an alert from our monitoring.
For remediable violations the customer is notified and given a reasonable period to correct the issue.
Where other customers, the infrastructure or third parties are under direct threat (active attack, malware distribution, catalogue-offence content) the service is stopped first and notification follows.
Where a decision by a competent authority is required, that decision is implemented and the customer is informed.
For repeated or serious violations the contract may be terminated; you are then given a reasonable period to export your data.

Suspension and termination conditions are detailed in the Terms of Service; outage communication and escalation in the Service Level Statement.

Service Provider Details

Legal name: AIOR TEKNOLOJİ LİMİTED ŞİRKETİ
Address: Geçit Mahallesi 6. Gümüş Sokak No: 6, Balkar Plaza A Blok Kat: 1 Daire: 2, Osmangazi / Bursa / Türkiye
Tax office / Tax ID: Osmangazi V.D. — 0102359120
MERSIS: 0010235912000001
Trade registry no: 137841
E-mail: [email protected]
Registered e-mail (KEP): [email protected]
Phone: +90 850 309 80 80

All official registry data:Company details·BTK hosting-provider registry