Acceptable Use Policy

This Acceptable Use Policy (the "Policy") forms part of the Terms of Service. It covers hosting, e-mail, domains, smApp, the client portal and every other service offered under the simurgh.media brand, and applies to our clients, their users and the visitors of their sites.

You are responsible for all activity in your account, including access you give to third parties (for example your own customers or sub-users). You must make sure your users follow this Policy too.

You may not host, publish, transmit or link to:

• content that is a crime or unlawful under the laws of the Republic of Türkiye or the laws that bind the company providing the service (US federal and state law for the US Company),
• any child sexual abuse material (reported to the authorities immediately) or non-consensual intimate imagery,
• content inciting violence, terrorism or hatred, or targeting people because of race, religion, sex, disability, origin or similar characteristics,
• content infringing intellectual property rights (copyright, trademarks, patents) or personality rights; pirated software or licence-cracking tools,
• phishing pages, fake bank or institution sites, fraud, or misleading sales of fake goods or services,
• malware, viruses, trojans, ransomware, botnet command-and-control servers and similar code,
• illegal betting and gambling, or the sale of unlicensed medicines or prohibited substances,
• content that collects, sells or discloses personal data unlawfully.

Hosting lawful adult content requires our prior written approval.

• attempting unauthorised access to other systems, accounts or networks; password cracking, credential phishing, exploiting vulnerabilities,
• port or network scanning, brute-force attacks, denial-of-service (DoS/DDoS) attacks, or facilitating them,
• forging IP addresses, e-mail headers or sender details,
• running open proxies, open mail relays, unauthorised VPN or Tor exit nodes,
• cryptocurrency mining, persistent background processes, IRC bots and game servers (unless the hosting plan expressly allows them),
• using our services purely as file storage, backup space or a file-sharing service,
• trying to bypass our security, billing or licence-check mechanisms.

If you want to run security tests on your own systems that could affect our infrastructure, you need our written permission in advance.

• You may not send bulk or commercial e-mail without the recipients' prior consent. Messages to recipients in Türkiye are subject to Law No. 6563 on the Regulation of Electronic Commerce and the Message Management System (İYS); messages to US recipients are subject to the CAN-SPAM Act; the rules in force in other countries apply to their recipients.
• Purchased, rented or harvested mailing lists may not be used.
• Every commercial message must identify the sender and include an easy unsubscribe link, and opt-outs must be honoured within the legal deadline.
• Hourly sending limits apply on shared hosting ([hourly e-mail sending limit]). Use a dedicated e-mail marketing service for newsletters.
• Sending that gets our servers or IP addresses blacklisted may lead to immediate suspension of the account.

CPU, memory, disk I/O, concurrent connections and inodes on shared hosting servers are shared among all clients. Features offered as "unlimited" mean ordinary website use and are subject to this Policy.

• Accounts that affect the stability of a server or other clients' service may be limited temporarily until the problem is fixed.
• We then tell you, explain why and suggest a suitable plan, optimisation or a dedicated server.
• In emergencies (for example processes bringing a server down) we may act first and notify you afterwards.

• keep the software on your site (CMS, plugins, themes, libraries) up to date and apply security patches,
• use strong, unique passwords and turn on two-step verification for your portal account,
• check file types and sizes wherever users can upload files,
• tell us immediately if you notice that your account has been compromised.

We may suspend compromised accounts carrying out harmful activity until they are cleaned, to protect other clients and third parties.

For its hosting services, the Turkish Company is a hosting provider (yer sağlayıcı) under Turkish Law No. 5651 on the Regulation of Internet Publications. As a hosting provider we have no duty to check hosted content in advance; we remove content once we are properly notified that it is unlawful or a decision of a competent authority or court is served on us. We keep traffic data for the period required by law.

The US Company handles copyright infringement notices under 17 U.S.C. § 512 (the Digital Millennium Copyright Act). Send notices to our designated agent: [DMCA designated agent details]. Accounts of repeat infringers are terminated.

A notice must identify the right you believe is infringed, the exact location (URL) of the content, your identity and contact details, and a statement that your notice is accurate.

Report spam, phishing, malware, attacks or unlawful content involving our services to [abuse e-mail address]. Domain-related abuse can be reported to the same address; where needed we pass it on to the registrar.

Including the domain or IP address, the date and time (with time zone) and evidence such as e-mail headers or log lines speeds up our review. We log and review every report and take the action needed.

If this Policy is breached, we may take one or more of these steps, depending on how serious the breach is:

• a warning and a reasonable time to fix the problem,
• removing or disabling the content, file or process concerned,
• limiting e-mail sending or specific features,
• suspending the service,
• terminating the agreement for serious or repeated breaches.

Where needed to protect other clients, our infrastructure or third parties from serious harm, we may act without prior notice; we then inform you as soon as possible. No refund is given for services suspended or terminated for breach of this Policy, and we may claim our losses and reasonable costs (for example blacklist removal costs).

We comply with proper requests and orders of competent authorities and courts. We do not share client information without a lawful request and, unless the law forbids it, we tell you about the request. How personal data is processed in this context is explained in the Privacy Policy.

We may update this Policy to address new threats, technologies and changes in law. Material changes are announced as described in the Terms of Service.