Terms of Service

Service provider: MGVault (“MGVault”, “we”). Contact: muhammed@aliguc.com

User: the natural person who creates an account and, if the account is used on behalf of an organization, also that organization.

MGVault is a software service for storing passwords, two-factor (TOTP) codes and notes with end-to-end encryption, syncing them across devices and sharing them within organizations, provided through a web application and a browser extension. The Service is under continuous development; features may be improved, changed or removed.

• You must be at least 18 years old and have legal capacity to use the Service. If you accept these Terms on behalf of an organization, you represent that you are authorized to bind it.
• You are responsible for keeping your account information accurate and up to date and for activity carried out through your account and devices.
• If you suspect unauthorized use of your account, you should sign out your sessions, change your master password and notify us.

The Service follows a zero-knowledge design: we do not know, store or reset your master password. Keeping your master password and Emergency Kit (recovery code) safe is your responsibility. If you lose both, access to your vault is permanently lost; MGVault cannot recover this data.

Content you store in your vault belongs to you or to the relevant organization. MGVault processes it only to store, sync and transmit it in encrypted form; it cannot access or review the content. You are responsible for the lawfulness of your content.

In organization accounts, inviting members, setting their roles and access, and removing them is the responsibility of the organization's owners and administrators. Organization administrators can see members' email addresses, roles and organization activity logs. A removed member loses access to the organization's collections; changing passwords that member could previously access is the organization's responsibility.

When using the Service, you agree not to:

• use the Service for unlawful purposes or in a way that infringes the rights of others;
• attempt unauthorized access to the Service, other users' accounts or our infrastructure, or attempt to circumvent security measures, rate limits or plan limits;
• place a load that disrupts the Service or send excessive requests with automated tools;
• use it to distribute malware or send unsolicited messages;
• copy, modify or reverse engineer the software except as permitted by law, or resell or sublicense the Service without permission.

Good-faith security research must follow the responsible disclosure rules on the Security page.

All rights in the Service and its software belong to MGVault. You are granted a non-exclusive, non-transferable and revocable right to use the Service for personal purposes or for your organization's internal operations for the duration of these Terms.

The Service's free and paid plans are described on the Pricing page.

When paid plans become available, payments are collected through a licensed payment institution; your card details never reach MGVault. Subscriptions renew at the end of each period unless cancelled; cancellation takes effect at the end of the current period. Fee changes are announced before they take effect.

For users acting as consumers, Turkish Consumer Protection Law No. 6502 and the Regulation on Distance Contracts apply; a preliminary information form and a distance contract are presented separately before payment. The right of withdrawal and its exceptions are set out in those documents.

We make reasonable efforts to provide the Service without interruption or errors; however, the Service is provided “as is” and “as available”, and no specific availability level is guaranteed. The Service may be temporarily interrupted for maintenance, updates, security measures or reasons beyond our control.

Except in cases of intent or gross negligence and subject to mandatory law, MGVault is not liable for indirect damages, loss of profit, loss of data or reputation, or damages arising from failure to protect the master password, Emergency Kit or devices.

Subject to the same exceptions, MGVault’s total liability under these Terms is limited to the fees the User paid to MGVault in the twelve months before the event giving rise to the damage.

In cases of force majeure, such as natural disasters, epidemics, war, widespread infrastructure or power outages, cyberattacks and orders of public authorities, the parties' obligations are suspended for the duration of the event.

• You may end the agreement at any time by deleting your account in Settings.
• In case of serious or repeated breach of these Terms, unlawful use, or situations threatening the security of the Service or other users, MGVault may suspend the account or terminate the agreement, giving prior notice where possible.
• If MGVault decides to discontinue the Service entirely, it will give at least 30 days' notice so that you can access and move your data.
• On termination, your data is deleted within the periods set out in the Privacy Policy.

We may update these Terms. We will notify you of material changes by email to your registered address or within the Service at least 15 days before they take effect; changes required by law or for security reasons may take effect sooner. If you do not accept the changes, you may delete your account before the effective date; continuing to use the Service after that date means you accept the updated Terms.

Notices to you are sent to the email address registered to your account or within the Service. You can send notices to us at muhammed@aliguc.com.

These Terms are governed by the laws of the Republic of Türkiye. The Courts and Enforcement Offices of Istanbul (Çağlayan) have jurisdiction over disputes. The rights of users acting as consumers to apply to consumer arbitration committees and consumer courts under Law No. 6502 are reserved.

If any provision of these Terms is held invalid, the remaining provisions remain in effect. Information on the processing of personal data is provided in the Privacy Policy, the KVKK Privacy Notice and the Cookie Policy. This English text is a translation; in case of any discrepancy, the Turkish text prevails.