Terms of Service

Version: 2026-06-13 · Effective date: 13 June 2026

NOTICE: This text is a draft and not legal advice; it should be reviewed by a lawyer before going live.

These Terms of Service govern your use of the digital business card platform ("Service") provided by Görkem Sarı (Barlas Dijital) ("BQR", "we").

Operator: Görkem Sarı (Barlas Dijital) — sole proprietorship.
Address: Ekinoba Mah. Ayberk Sok. No:5/33, Büyükçekmece / İstanbul · Tax No. 7460898686 · info@bqr.app.
By creating an account or using the Service, you confirm you have read and accept these terms.
This text is simplified. Your statutory rights as a consumer and mandatory legal provisions are reserved in all cases.

1. What the Service is

With BQR you create and publish digital business cards.

Creating, editing and publishing cards (at bqr.app/qr/<code> and on a customer domain).
QR code and vCard generation.
A contact form for visitors to your card.
Features may be improved, changed or removed from time to time.

Sign-in uses a single-use link (magic link) sent to your email; no password is stored.

You are responsible for ensuring the email address is yours and your access is secure.
Do not share your sign-in link with anyone; whoever holds it can access your account.
Activity carried out through your account is your responsibility to the extent it is within your reasonable control.
Our own security duty is reserved: for damage arising from a fault of our system (e.g. the link leaking on our side), we remain liable within our data-security responsibility under KVKK art.12.
You must keep your information accurate and up to date.

YOU alone are responsible for everything you enter on the card (text, images, links, contact details, IBAN, etc.).

You warrant that the information you enter is accurate, current and lawful.
You warrant that you hold the necessary rights (copyright, trademark, permission to use) in any images, logos and text you upload.
If you add third-party personal data (e.g. employee or customer details), providing the required notice and legal basis is YOUR responsibility.
You may not publish content that is unlawful, misleading, infringing, defamatory or harmful.
Liability arising from your content rests with you; we are not obliged to pre-screen content.
Consumer exception: For cardholders acting as consumers (outside commercial/professional purposes), the mandatory provisions of Law No. 6502 are reserved; this clause is not applied so as to form an unfair term against a consumer.

If a claim is brought against us because of your content or use, you cover it.

You are responsible for any claim, lawsuit, penalty, damage and reasonable cost (including legal fees) brought against us due to your content or your use of the Service breaching the law, these terms or third-party rights.
You agree to indemnify us for such costs and damages.
This clause does not cover damages caused by our own gross negligence or intent.
Consumer exception: For cardholders acting as consumers, the mandatory provisions of Law No. 6502 are reserved, and this indemnity is not applied so as to form an unfair term against a consumer.

The personal-data role allocation depends on how you obtain the Service.

WHITE-LABEL use (when the Service is offered unbranded to a client firm via a web studio — Barlas Dijital):
— DATA CONTROLLER: the cardholder firm. It determines the purpose and means of the personal data on the card and collected via the contact form, fulfils the KVKK art.10 notice obligation, and obtains consent where required.
— DATA PROCESSOR: Görkem Sarı (Barlas Dijital). We process data only on the cardholder's instructions, to provide the Service.
DIRECT use (when we provide BQR directly to the end user): for card content and contact-form data the DATA CONTROLLER is Görkem Sarı (Barlas Dijital); in that case the KVKK art.10 notice obligation is ours.
IN BOTH CASES: for data we process on OUR OWN behalf (account, authentication via magic link/session, security logs) we act as data controller.
Whenever we act as processor, our obligations under KVKK art.12 and GDPR art.28 (data-security measures, acting on instructions, sub-processor arrangements, breach notification) remain in force and cannot be waived.
DPA requirement: The validity of the white-label role allocation (cardholder = controller, us = processor) depends on a signed data processing agreement (DPA). Without a signed DPA, the roles between the parties are determined by the general provisions of KVKK and GDPR.

The platform is ours; your card content is yours.

The Service's software, design, interface and trademarks belong to us; they may not be copied, reproduced or used to create derivatives without permission.
Rights in the content you enter remain yours.
You grant us the limited, worldwide, royalty-free license needed to operate the Service, publish the card, generate QR/vCard and display it. This license is solely to run the Service.

The Service is provided "as is".

We do not guarantee that the Service will be uninterrupted, error-free or always available.
To the maximum extent permitted by applicable law, we are not liable for indirect damages, loss of profit/reputation/data, your content, third-party services (e.g. domain, email delivery) or service interruptions.
HONESTY LIMIT: This limitation does NOT cover damages caused by our own gross negligence or intent, liabilities mandated by law, or your rights as a consumer. The same applies to third-party services and the auxiliary performers we use (including sub-processors): under Turkish Code of Obligations art.116, liability cannot be wholly excluded in case of gross negligence or intent; this exception is reserved.
Under Law No. 6502 on Consumer Protection, unfair exemption clauses against a consumer are void; these terms do not limit those rights.

We may stop usage that breaches these terms; you may delete your account anytime.

We may suspend or terminate your account or card in case of breach of these terms, unlawful use, or situations threatening others' rights or safety.
We try to give prior notice where possible; in case of serious breach or emergency we may act immediately.
You may delete your account from the panel at any time.
After deletion or termination, the handling of your data (retention/erasure) is governed by the Privacy Policy and applicable law.

There may be free and paid features.

There is NO automatic or credit-card payment on the platform.
Paid services are paid by bank transfer (havale/EFT) after you contact us and agree.
Price, scope and term are agreed individually and confirmed in writing (incl. email).
Subscriptions do not auto-renew; renewal is subject to a separate agreement.

We may update these terms; we notify material changes.

For material changes the version date is updated and you are informed.
These terms are governed by the laws of the Republic of Türkiye.
The courts and enforcement offices of İstanbul have jurisdiction over disputes. As a consumer, your right to apply to the consumer court/arbitration committee at your own place of residence is reserved.
Contact: info@bqr.app