Terms of Service

1. Who we are

BPMN Central is a workflow automation service operated by Numan Karaaslan, a sole proprietor established in Türkiye ("we", "us", "the Provider"). "BPMN Central" is the name of the product; the contracting party is the operator named above.

These Terms govern your use of the BPMN Central website at bpmncentral.com, the customer console, and any BPMN Central instance provisioned for you. By creating an account you accept these Terms and the Privacy Policy. If you do not accept them, do not create an account.

2. The service

BPMN Central provisions a dedicated instance of our workflow application for you, reachable at a subdomain of bpmncentral.com, and runs it on infrastructure we manage. What each plan includes is described on the pricing page at the time you subscribe.

We may change, improve or discontinue individual features. If we discontinue something you depend on materially, we will tell the account owner by email in advance where we reasonably can.

3. Your account, and who owns the instance

The account is the instance. Whoever can log in to the account that created a subscription controls that subscription and the instance it provisioned: its data, its credentials and its billing. We act only on instructions received from that account, and the account's email address is the address of record for every notice we send.

Because of this:

• Use an address the organisation controls — a shared company mailbox, not an individual's personal address. If the person who created the account leaves with a personal address, the organisation may lose access to its own subscription.
• You are responsible for everything done through your account, including by your employees, contractors and anyone you give credentials to. Keep them confidential and tell us promptly if you believe they have been misused.
• Ownership transfer. If control of an account has to move to a different address — a departure, a company restructure — this is handled manually by support and requires evidence that the requester is entitled to the account, such as a request from an address on the organisation's own verified domain together with proof of the organisation's identity.
• Contested ownership. Where two parties both claim an account or a subdomain and the evidence does not clearly favour one of them, we will not transfer it. We may keep the subscription running, suspend it, or decline to act until the parties resolve the matter between themselves or produce a court order or equivalent binding decision. We are not a tribunal and will not determine who owns a business.

4. Fees, billing and payment

Subscriptions are sold through Polar, acting as Merchant of Record. Polar is the seller for the transaction, charges you, handles applicable sales tax and VAT, and issues your receipt or invoice; Polar's own terms apply to the payment itself. We receive a payout from Polar.

• Subscriptions renew automatically for successive periods until cancelled.
• Cancelling stops future renewals. Your instance keeps running until the end of the period you have already paid for, and is then removed. Periods already paid for are not refunded on cancellation.
• Upgrades apply immediately and are charged pro rata at the time of the change. Downgrades apply at the end of the current period, with no charge and no credit.
• Pausing stops billing from the end of the current period; your configuration is retained and your instance is switched off until you continue it.
• Non-payment. If a renewal payment fails, we may suspend the instance after notifying the account owner, and may terminate the subscription and remove the instance if payment is not completed.
• Prices shown in a currency other than the one you are charged in are indicative conversions, not the amount charged. The charged amount and currency are shown at checkout.

5. Free trials

Trial instances are provided as-is for evaluation. They are time-limited, are deleted automatically when the trial ends, and carry no availability commitment or support obligation. Do not put real or personal data in a trial instance. We may limit or withdraw trials at any time.

6. Your data and your infrastructure

Paid instances run against your own database and your own object storage, under credentials you supply.

• Your content is yours. We claim no ownership of the processes, documents or personal data you put into your instance. We do not store your database credentials, your storage keys or your business data outside the configuration of your own instance.
• You are responsible for your data — its lawfulness, its backups, and its retention. We do not back up your database or storage for you. When a subscription ends we remove the instance; your database and storage are untouched and remain entirely yours.
• Roles. Where your content includes personal data, you are the data controller and we act as a processor in respect of the account and operational data described in the Privacy Policy.
• Availability of your infrastructure. An instance cannot run if the database or storage you supplied is unreachable, full, or rejects its credentials. That is outside our control and is not a failure of the service.

7. Acceptable use

You must not use BPMN Central, any instance, or any subdomain to:

• impersonate any person, business, brand, bank, payment provider or public authority, or to suggest an affiliation, endorsement or official status that does not exist;
• conduct phishing, credential harvesting, fraud, or any other deceptive practice;
• distribute malware, or host content designed to compromise a visitor's device or accounts;
• send unsolicited bulk email (spam), including through any email feature we provide on your behalf;
• publish material that is unlawful in Türkiye or in your own jurisdiction, that infringes someone else's intellectual property, or that depicts the sexual exploitation of minors;
• attack, probe, overload or attempt to gain unauthorised access to our infrastructure, to another customer's instance, or to any third-party system, including by using our outbound network addresses to reach systems you are not authorised to reach;
• resell, sublicense or provide the service to third parties as your own service, unless we have agreed that in writing;
• circumvent the technical limits of your plan, or the security rules described on our security page.

Everything sent from an instance leaves from network addresses shared with other BPMN Central customers. Abuse therefore harms every other customer, which is why we enforce this section strictly.

8. Subdomains

Your instance is published at a subdomain of bpmncentral.com that you choose when you subscribe.

• A subdomain is a licence, not property. It is assigned to you for as long as your subscription runs. You acquire no trademark, domain-name or other ownership right in it, and it cannot be sold, rented or transferred to anyone else.

• Subdomains are assigned first-come, first-served, and remain associated with the account that first claimed them.

• Names we do not assign. We maintain a reserved list — system names, security and payment vocabulary, names suggesting official or governmental status, and well-known brands — and we may refuse any name at our discretion.

• We may reclaim or suspend a subdomain where it, in our reasonable judgement:

  1. infringes a trademark or other right of a third party;
  2. impersonates a person, organisation or brand, or misleads visitors about who operates it;
  3. is used for phishing, fraud, malware distribution or any other breach of section 7;
  4. endangers the reputation or operation of bpmncentral.com as a whole — including where it risks the domain, or any part of it, being flagged by browser, email or security-reputation providers, which would affect every other customer;
  5. was obtained by misrepresentation, or is being held for resale.

  Where there is active abuse or an immediate risk to other customers, we may act without prior notice. Otherwise we will notify the account owner first and, where the issue can reasonably be fixed, give a chance to fix it.

• What you get if we reclaim one. Where we reclaim a subdomain and you were not in breach of these Terms, we will offer a replacement subdomain and a pro-rata refund of the unused part of your current period. Where the reclaim follows a breach, no refund is due.

• Complaints about a subdomain are received and handled as described on our abuse page.

9. Suspension and termination

We may suspend or terminate an account, a subscription or an instance if you materially breach these Terms (section 7 in particular), if payment fails, if we are required to by law or a binding order, or if continuing would put our infrastructure or other customers at risk.

Where the circumstances allow it, we will notify the account owner first and set out what has to change. Where the risk is immediate — active abuse, an ongoing attack, a legal order — we may act first and notify afterwards.

You may terminate at any time by cancelling your subscription in the customer console.

On termination we delete the instance and its configuration. We do not delete, and cannot delete, your own database or storage — those remain yours, and you should remove our network addresses from any allowlist you added.

10. Support and availability

We aim to keep instances available and to fix defects promptly, but we do not offer a service level agreement or an uptime guarantee unless we have agreed one with you in writing. Maintenance, updates and provider incidents can cause interruptions.

Bugs and system errors are fixed free of charge for every plan. Feature requests are evaluated case by case; some are built free, others are quoted as paid work. Anything we build ships to all customers.

11. Changes to these Terms

We may update these Terms. The version identifier at the top of this page changes when we do. For changes that materially affect your rights or obligations we will notify the account owner by email before they take effect; continuing to use the service after that constitutes acceptance. If you do not accept a material change, you may cancel your subscription.

12. Warranties and liability

The service is provided as is and as available. To the fullest extent permitted by applicable law, we exclude all implied warranties, including fitness for a particular purpose, and we do not warrant that the service will be uninterrupted or error-free, or that it will meet any regulatory requirement that applies to your business.

To the fullest extent permitted by applicable law, our total liability arising out of or relating to the service in any twelve-month period is limited to the fees you paid us for the service in that period, and we are not liable for indirect or consequential loss, loss of profit, loss of business, or loss or corruption of data held on infrastructure you supplied and control.

Nothing in these Terms excludes liability that cannot lawfully be excluded, including liability for fraud, for wilful misconduct, or under mandatory Turkish consumer legislation where it applies to you.

13. Governing law

These Terms are governed by the laws of the Republic of Türkiye, and the competent courts of Türkiye have jurisdiction over any dispute arising from them. Where you contract as a consumer, any mandatory protections and forums of your own country of residence remain available to you. Where the transaction is concluded through Polar as Merchant of Record, Polar's own terms govern the payment relationship.

14. Contact

Questions about these Terms, ownership transfers and support requests: the contact page. Abuse, impersonation and trademark complaints: the abuse page, or abuse@bpmncentral.com.