This text is under legal review; marked fields will be filled with the company details. This is a translation; the Turkish version prevails.
1. Parties
- Rabs: Yiğit Ecik, Ovacık Mah. Yozgat Blv. No: 68 İç Kapı No: 21, Keçiören / Ankara, Yıldırım Beyazıt Vergi Dairesi / 3240499150, MERSİS: 1455419058200001, ekip@rabs.com.tr.
- The business: the business that accepts this agreement when it signs up to Rabs, or when it first opens the panel with an account the Rabs team set up. Its name, kind, owner's name, phone and address are those it gives at sign-up and setup.
- The agreement is made electronically when the business ticks the box on the sign-up screen.
2. Subject
Rabs provides the business with a booking calendar and customer booking service (the “Service”); this agreement sets out both parties' rights and duties.
3. What the Service covers
- Business panel: each team member's calendar, services, working hours, breaks and days off, customer records and history, optional payment records, reports.
- Booking pages:
- The business's own Rabs link, to share on Instagram, WhatsApp, a Google profile and the like.
- The discovery list Rabs shows customers: the business's name, address, place on the map, services, prices, photos and free times.
- Booking rules: how far ahead a customer must book at least, how late they can cancel and how many days ahead they can book. The business sets these.
- Setup and support: the business signs itself up and enters its services, prices, hours and team in the panel's setup. The Rabs team helps where it gets stuck. Issues go to ekip@rabs.com.tr or, in the panel, Settings → “Write to Rabs”.
4. Sign-up and approval
- The business gives true details at sign-up and setup. At sign-up it gives its tax identification number or, for a sole trader, the owner's T.C. identity number; the number is checked against the official calculation rule, and one number opens one business. The number is never shown to customers.
- When the setup is complete, the business goes live by itself: once it has at least one service with a price, a full address, a pin on the map and the number given at sign-up, customers can see it. The Rabs team checks the business afterwards (the number, the address and pin, and its Instagram account and website if given) and may ask for its tax certificate.
- Rabs may hide from customers, or close the account of, a business that turns out not to be real, gives false details, signs up with someone else's number or falls outside the kinds of business Rabs serves. A business Rabs has hidden does not go live by itself again unless Rabs reopens it.
- The business's place on the map is the pin the business puts; customers get directions to that pin. The business is responsible for the pin being at its shop. Once the Rabs team has checked it, the business page says "verified address"; a changed address or pin removes that line.
- The business's Instagram account and website, if it gives them, are shown on its page. The business is responsible for what those pages contain; Rabs may remove a link it finds misleading or harmful.
5. Fees
- Free period: every business has 3 months free from the day it signs up to Rabs.
- Monthly fee: after the free period, by team size: 350 ₺ for the first team member and +120 ₺ for each additional one (VAT included), with no upper limit. Example: 3 team members → 590 ₺ a month. Booking reminder messages are included in the fee.
- The fee is shown in writing on the sign-up screen and fixed for that business. Any change is announced in writing at least 30 days ahead; if the business does not accept it, the agreement ends at no cost.
- Payment starts only when the business adds its own card. Without a card, when the free period ends the business stops being shown to customers; its calendar and records are not deleted and nothing is owed.
- Rabs takes no commission on customers who come through the business's own Rabs link. Nor is there any extra fee for new customers who come from Rabs's discovery list.
- Customers pay the business. Rabs takes no money from customers and collects no money on the business's behalf.
6. The business's duties
- Keep its services, prices, durations, address, place on the map and working hours true and up to date.
- Keep the bookings it accepts; in unavoidable cases, tell the customer in good time.
- Upload only photos it has the right to use, with the consent of anyone shown in them. A business that picks one of Rabs's ready-made photos knows it is not a photo of its own shop and does not use it to mislead customers.
- Write no special categories of personal data, such as health information, and nothing insulting in customer notes.
- Inform its own customers that their personal data is kept on Rabs; the privacy notice Rabs provides can be used for this.
- Protect its panel access and phone. Give sign-in codes only to the person concerned, in person or by phone, never in a message. Remove team members from the panel when they leave. The business is responsible for what a team member does after signing in with a code the owner gave.
7. Rabs's duties
- Provide the Service with reasonable care and try to keep it running without interruption; announce planned maintenance in advance.
- Keep data on servers in Türkiye, over encrypted connections and with encrypted backups.
- Write every action to a permanent record showing who did what, when and from which device.
- Never share, sell or use the business's customer data for advertising, or pass it to other businesses.
8. Whose data is it?
- The business's customer list and booking history belong to the business. It can download them at any time from the panel as a spreadsheet (CSV).
- Rabs sees the business's booking and revenue figures to run the Service, improve the product and invoice. These figures may be used in aggregate statistics without the business's name.
- The business's details (name, address, place on the map, services, prices, photos, and its Instagram account and website if given) are shown to everyone on its page. The tax or T.C. identity number is not shown.
9. Term and termination
- The agreement starts with the business's electronic acceptance and has no fixed end.
- The business may end it at any time from the panel (Settings → “Delete my account”) or by written notice.
- Rabs may end it with 30 days' written notice. If the business commits a serious breach (false details, abuse of the system), Rabs may end it at once or suspend the account.
- When it ends:
- The business may download its data within 30 days.
- After that, personal data is deleted or anonymised, except where the law requires keeping it.
- Informing customers about upcoming bookings is the business's responsibility.
10. Liability
Rabs is not responsible for the service given to the customer, nor for payments between the business and the customer. Rabs's total liability under this agreement is limited to what the business paid Rabs in the last 12 months; mandatory law and Rabs's gross fault are not affected.
11. Confidentiality
Neither party discloses the other's business information (price offers, revenue, customer numbers) to third parties.
12. Transfer
Rabs may transfer its rights and duties under this agreement to a company set up to run Rabs or one that takes Rabs over, by written notice (including e-mail) to the business. The transfer does not reduce the business's rights; fees and terms stay the same and the business does not need to accept again.
13. Disputes
Turkish law applies. The courts and enforcement offices of Ankara have jurisdiction.
---
Annex 1: Data Processing Agreement (KVKK art. 12)
- Roles: The business is the data controller for its own customers' personal data. Rabs processes that data only on the business's behalf and for the purposes in this agreement (data processor).
- Data processed:
- The customer's name, phone, booking details (service, date, time, team member, price) and booking status (came, did not come, cancelled).
- Customer notes the business writes, payment records (amount, cash or card).
- The names and phones of the business's users.
- Purpose: keeping the booking calendar, the booking service to customers, reports to the business, evidence in a dispute.
- Instructions: Rabs processes the data only on the business's instructions and under this agreement. It does not use it for its own purposes, sell it or share it with other businesses.
- Security measures:
- Servers in Türkiye; encrypted connections (HTTPS).
- Hourly encrypted backups (AES-256).
- Role-based access: a team member sees only their own calendar.
- Two-step sign-in for administrators.
- A permanent action record (including IP address and device).
- Bookings are never deleted, only cancelled or anonymised.
- Sub-processors: the hosting company SUNUCU FİRMASI. Any new sub-processor, such as a messaging service, is announced to the business in advance.
- Breaches: Rabs tells the business without delay, and within 24 hours at the latest, when it learns of a security breach affecting the data, and helps the business notify the Board.
- Data subject requests: Rabs passes requests under KVKK art. 11 from customers to the business and provides the information needed to answer them.
- Retention and deletion: booking records are anonymised after 2 years. When the agreement ends, section 9 applies.
- Audit: the business may, reasonably often and with notice, ask Rabs in writing about its security measures.