Cosyworker Mobile Application Terms of Service

This Terms of Service Agreement ("Agreement") has been prepared to regulate the terms of use of the Cosyworker mobile application ("Application"), as well as the rights and obligations of the parties. This Agreement has been drawn up in accordance with the Turkish Code of Obligations No. 6098 ("TCO"), the Turkish Commercial Code No. 6102 ("TCC"), the Personal Data Protection Law No. 6698 ("PDPL/KVKK"), the Law No. 5651 on Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications, the Law No. 6563 on the Regulation of Electronic Commerce, and other relevant legislation provisions. The Application is available for download on Google Play Store and Apple App Store, and is a platform that enables users to discover workspaces, participate in events, engage in social interaction, and build communities. By downloading, registering for, or using the Application in any way, you declare that you have read, understood, and accepted all provisions of this Agreement. This Agreement is effective as of June 22, 2025, and is binding for all users unless otherwise stated.

The following terms used in this Agreement carry the meanings set forth below: Application: Refers to the mobile software application published under the name Cosyworker on Google Play Store and Apple App Store platforms, compatible with iOS and Android operating systems. Service: Refers to all digital services offered through the Application, including but not limited to workspace recommendations and listing, event creation and participation, user profile management, social interaction, maps and navigation, notifications, CosyAI artificial intelligence assistant (for corporate users only), and in-app purchases. User: Refers to natural persons who download, register for, or use the Application in any way. Content: Refers to all text, photos, videos, comments, reviews, and other materials uploaded, shared, or created by Users on the Application. Account: Refers to the digital profile created by the User to access the Application, containing personal information and usage data. Age Restriction: Users must be at least 16 years old to use the Application. Use of the Application by individuals under the age of 16 is strictly prohibited. This provision has been established in accordance with the principle of protecting children's personal data under Article 6 of the PDPL. CosyAI: Refers to the AI-powered chat assistant (chatbot) offered exclusively to corporate users within the Cosyworker application, utilizing the Google Gemini API infrastructure. This Agreement covers all versions, updates, and extensions of the Application.

This Agreement is entered into between the parties whose details are set out below: Data Controller / Application Owner: Name: Kudret Yılmaz Address: Istanbul, Turkey Email: [email protected] The Application Owner is the natural person responsible for the development, management, operation, and provision of services of the Cosyworker mobile application. The Application Owner holds the status of data controller who determines the purposes and means of processing personal data within the scope of the PDPL. User: A natural person who downloads, registers for, or uses the Application in any way and accepts the provisions of this Agreement. The User undertakes the accuracy and currency of the information provided during registration.

The following services are provided through the Cosyworker application: Venue Listing and Discovery: Searching, reviewing, and evaluating workspaces (cafes, libraries, coworking spaces, etc.) based on the user's location or preferences. Event Management: Creating events, participating in existing events, viewing event details, and engaging in event-based social interaction. Profile and Social Interaction: Creating user profiles, editing profile information, interacting with other users, and building communities. Maps and Navigation: Displaying venues on maps and providing directions. Notification Services: Sending push notifications about event reminders, venue recommendations, and application updates. In-App Purchases: Offering donations, promotion packages, and other paid services through App Store / Play Store infrastructure. Geographic Scope: The Service is primarily valid for venues and events within the borders of the Republic of Turkey. The Application Owner reserves the right to expand or restrict the geographic scope of the service. Right to Update and Modify: The Application Owner has the right, with or without prior notice, to update the scope of services, add new features, modify or remove existing features, and partially or fully terminate the service. Substantial changes will be announced to users through in-app notification and/or email.

3A.1 Definition and Scope CosyAI is an AI-powered chat assistant (chatbot) offered exclusively to corporate users within the Cosyworker application. CosyAI assigns socialization tasks to users and tracks their progress, provides venue and event recommendations, and delivers a personalized experience. The CosyAI service utilizes Google Gemini API infrastructure and is accessible only to individuals with corporate user accounts. 3A.2 AI Content Disclaimer Responses, recommendations, and content generated by CosyAI are for informational purposes only and do not constitute any guarantee. Venue recommendations, event suggestions, and socialization tasks provided by CosyAI do not replace professional advice, medical advice, legal opinion, or expert opinion in any field. The User is personally responsible for decisions made based on CosyAI responses and the consequences of such decisions. The Application Owner does not guarantee the accuracy, completeness, or currency of content generated by CosyAI. 3A.3 CosyAI Usage Rules The general usage rules and restrictions specified in Article 5 of this Agreement apply equally to CosyAI usage. In addition, any attempt to manipulate CosyAI, generate misleading responses, circumvent the system's security measures, or misuse the AI model is strictly prohibited. The Application Owner reserves the right to modify, update, partially or fully terminate the CosyAI service with or without prior notice. 3A.4 Data Processing and Conversation History To provide the CosyAI service, the user's chat history, learned preferences, and context data are processed and stored. This data is used to generate more personalized responses, create socialization tasks, and improve recommendation quality. Processing of CosyAI chat data is based on explicit consent separately obtained from the user under PDPL Article 5/1. The user is informed about data processing and their explicit consent is requested before using CosyAI for the first time. For detailed information about data processed within the scope of CosyAI, we recommend reviewing the "CosyAI Data Processing" section of the Cosyworker Privacy Policy. 3A.5 Third-Party AI Services CosyAI uses the Google Gemini API service for generating AI responses. In this context, CosyAI chat messages and user context information are transferred to Google servers (USA) for response generation. This data transfer is subject to the provisions on international data transfer under Article 9 of the PDPL and is based on the user's explicit consent. For detailed information about Google's data processing practices, we recommend reviewing the Google Privacy Policy (https://policies.google.com/privacy).

Downloading the Application, registering, creating an account, or using the Application in any way constitutes your acceptance of all provisions of this Agreement. If you do not accept this Agreement, you must refrain from using the Application. This Agreement came into effect on June 22, 2025, and will continue to remain in force until modified or terminated by the Application Owner. The Application Owner reserves the right to make changes to this Agreement. Changes to the Agreement will be: - Announced through in-app notification. - An informational notice will be sent to the registered email address. - The updated Agreement text will be accessible within the Application. The User's continued use of the Application after the announcement of changes constitutes acceptance of the updated Agreement provisions. For changes to essential provisions (particularly regarding user rights, data processing, and financial provisions), explicit re-consent will be requested from the user. In accordance with Article 21 of the TCO, unilateral changes to general terms and conditions are not binding on the user; explicit acceptance by the user is required for substantial changes.

5.1 Acceptable Use Users undertake to use the Application only for lawful purposes and in accordance with the provisions of this Agreement. Acceptable use includes reviewing and rating venues, creating and participating in events, updating profile information, communicating with other users, and completing in-app purchases. 5.2 Prohibited Behaviors The following behaviors are strictly prohibited and, if detected, may result in sanctions including account suspension or permanent termination: - Sharing any content constituting a crime under the Turkish Penal Code ("TPC"), including defamation, threats, blackmail, hate speech, and terrorist propaganda. - Unlawful acquisition, sharing, or processing of personal data, including acts requiring criminal sanctions under Articles 17-18 of the PDPL. - Fraud, sharing misleading information, or creating fake accounts. - Spam, unsolicited bulk messaging, or advertising abuse. - Unauthorized access to the Application's source code, database, or infrastructure; reverse engineering, decompiling, or source code derivation attempts. - Any action that would prevent, disrupt, or overload the normal operation of the Application (DDoS attacks, bot usage, automated data scraping, etc.). - Behaviors that violate the rights of other users, including harassment, bullying, or discrimination. - Sharing content that infringes intellectual property rights. - Dissemination of content constituting a crime under Law No. 5651. 5.3 Content Sharing Rules All content uploaded, shared, or created by the User must: - Comply with the legislation of the Republic of Turkey. - Respect the intellectual property rights, personal rights, and privacy rights of third parties. - Be accurate and non-misleading in nature. - Not be contrary to public morality and general decency.

Account Security: The User is personally responsible for the confidentiality and security of account information (username, password, email, etc.). Account credentials must not be shared with third parties, strong passwords must be used, and the Application Owner must be notified immediately in case of any suspicious activity. The account holder will be held responsible for all transactions carried out through the account. Providing Accurate Information: The User undertakes that all information provided during and after registration is accurate, current, and complete. Providing false, misleading, or fraudulent information will be considered a breach of the Agreement and may lead to account suspension or termination. Legal Use Undertaking: The User undertakes to use the Application only for lawful purposes and in compliance with the legislation of the Republic of Turkey, international law, and the provisions of this Agreement. All legal and criminal liability arising from the User's unlawful activities shall exclusively belong to the User. Responsibility for Third-Party Damages: The User is personally responsible for damages caused to third parties during the use of the Application. In accordance with Article 49 of the TCO, if the Application Owner is subject to recourse due to damages caused to third parties as a result of the User's unlawful actions, the User is obligated to reimburse this amount to the Application Owner. Notification Obligation: The User is obligated to immediately notify [email protected] upon detecting unauthorized access to their account or any security breach.

7.1 Company Rights All intellectual property elements belonging to the Cosyworker application, including software, source code, design, graphics, logos, trademarks, trade names, domain names, content, databases, and all other elements, are protected under the Law on Intellectual and Artistic Works No. 5846 ("FSEK"), the Industrial Property Law No. 6769, and relevant international legislation. All rights belong to the Application Owner. The User is granted a limited, non-exclusive, non-transferable, and non-sublicensable license to use the Application for personal and non-commercial purposes within the scope of this Agreement. This license does not include the rights to copy, reproduce, distribute, modify, create derivative works, or use the Application for commercial purposes. 7.2 User Content License The User retains all rights to the content they upload, share, or create on the Application. However, the User grants the Application Owner a worldwide, royalty-free, irrevocable, non-exclusive, and sublicensable license for the purpose of publishing, displaying, distributing, and delivering the service of such content within the Application. This license terminates within a reasonable period upon deletion of the User's account, subject to legal retention obligations. 7.3 Content Removal Procedure and Compliance with Law No. 5651 The Application Owner has the right to remove or block access to content that violates this Agreement, the legislation of the Republic of Turkey, or the rights of third parties. Created content is not monitored in real time. Users who encounter offensive, unlawful, or rights-infringing content can report it using the in-app "Report" feature or by sending an email to [email protected]. In accordance with Article 5 of Law No. 5651, reported content is reviewed by the Application Owner within 72 hours at the latest. If deemed necessary following the review, the content is hidden, deleted, or warnings/sanctions are applied to the user who shared the content. Appeals against content removal decisions can be made via [email protected].

Detailed regulations regarding the protection of your personal data are set forth in the Cosyworker Privacy Policy. This section contains a summary of the fundamental principles regarding personal data protection. The Application Owner processes your personal data in accordance with the PDPL No. 6698 and relevant legislation provisions. Your personal data is processed within the scope of establishing and performing the contract, fulfilling legal obligations, legitimate interest, and your explicit consent. Explicit Consent Mechanism: For data processing activities requiring your explicit consent, your approval is obtained during the Application registration stage and separately when necessary. You have the right to withdraw your explicit consent at any time; however, the withdrawal will not affect the lawfulness of data processing activities carried out until the date of withdrawal. User Rights (PDPL Article 11): You have the rights to learn whether your personal data is processed, request information if it has been processed, learn the purpose of processing and whether it is used in accordance with its purpose, know third parties to whom data is transferred domestically or internationally, request correction if processed incompletely or incorrectly, request deletion or destruction under Article 7 of the PDPL, request notification of correction/deletion/destruction to third parties, object to the emergence of a result against yourself through analysis exclusively by automated systems, and request compensation for damages in case of unlawful processing. Application to the Data Controller: To exercise your rights, you may submit a written application to [email protected] with information confirming your identity, or create a request through the in-app "Profile" > "Settings" > "Privacy" > "Data Request" section. Applications are concluded free of charge within 30 days at the latest. CosyAI Data Processing: Chat data, learned preferences, and context information processed within the scope of the CosyAI artificial intelligence assistant are processed based on explicit consent separately obtained under the PDPL. For detailed information about the processing conditions, retention periods, and user rights regarding this data, we recommend reviewing Article 3A.4 of this Agreement and the "CosyAI Data Processing" section of the Cosyworker Privacy Policy. For detailed information, we recommend reviewing the Cosyworker Privacy Policy.

9.1 Free Basic Usage The basic features of the Cosyworker application (venue search, event viewing, profile creation, etc.) are provided free of charge. No fee is required for the use of the Application's basic functions. 9.2 In-App Purchases Paid services offered within the Application (donations, promotion packages, and other additional features) are processed entirely through Apple App Store and Google Play Store payment infrastructures. Cosyworker does not collect or store users' credit card numbers, bank account information, or other direct payment information. All payment transactions are carried out within the framework of the relevant store's security protocols. 9.3 Invoice and Tax Obligations Invoice and tax obligations related to in-app purchase transactions are subject to the rules and policies of the platform on which the transaction is carried out (Apple App Store or Google Play Store). Users can submit invoice requests for purchase transactions through the relevant platform. 9.4 Refund Policy Refund and cancellation conditions are subject to the refund policies of the platform on which the purchase transaction is carried out (Apple App Store or Google Play Store). Refund requests should be made through the support page of the relevant store. Cosyworker does not process direct refunds outside of store platforms. 9.5 Automatic Renewal In-app purchases are one-time in nature and no automatic renewal (subscription) model is applied. If a subscription model is offered in the future, users will be informed in advance and their separate consent will be obtained.

10.1 Service Delivery The Application and Service are provided "as-is" and "as-available." The Application Owner provides no express or implied warranty that the Service will operate without interruption, error-free, or securely. 10.2 Limitation of Liability Within the framework of Articles 112-126 of the TCO, the Application Owner's liability is limited as follows: The Application Owner cannot be held liable for direct, indirect, incidental, special, or punitive damages (including loss of profits, loss of data, loss of reputation) arising from the use or inability to use the Application. In any case, the total liability of the Application Owner is limited to the amount of purchases made by the user through the Application within the last 12 months. 10.3 Technical Failures and Third-Party Interruptions The Application Owner is not responsible for service interruptions or data losses arising from server failures, internet connection interruptions, interruptions by third-party service providers (Google, Apple, AWS, etc.), cyber attacks, and similar technical issues. 10.4 User Content The Application Owner does not guarantee the accuracy, reliability, or legality of content created, shared, or uploaded by users. Responsibility arising from user content belongs exclusively to the user who created the content.

In accordance with Article 136 of the TCO, when the fulfillment of obligations arising from this Agreement becomes partially or fully impossible due to extraordinary events that develop beyond the will of the parties, are unforeseeable and unavoidable, the affected party is released from these obligations and cannot be held liable. Force majeure events include but are not limited to: - Natural disasters (earthquakes, floods, fires, pandemics, etc.) - War, civil war, terrorist acts, blockades - Government measures, changes in legal regulations, embargoes - General strikes, lockouts, civil unrest - Technical infrastructure issues (internet outages, server failures, power outages, cyber attacks) - Service interruptions by third-party service providers (cloud services, payment systems, etc.) If the force majeure event lasts for more than 30 days, each party has the right to terminate the Agreement.

12.1 Account Creation Requirements To create an account in the Application, the user must be at least 16 years old, provide real and current personal information, and accept the provisions of this Agreement. 12.2 Multiple Account Prohibition Each user may create only one account. Opening multiple accounts by the same person is prohibited. If multiple accounts are detected, all accounts may be suspended or closed. 12.3 Account Suspension and Termination The Application Owner may temporarily suspend or permanently terminate a user account in the following situations: - Violation of the provisions of this Agreement - Detection of illegal activity - Endangering the rights or safety of other users - Providing false or misleading information - Using multiple accounts - Infringement of the intellectual property rights of the Application Owner or third parties Prior to the account suspension or termination decision, except in emergency situations, the user will be notified and their defense, if any, will be obtained. 12.4 Post-Termination Data Processing In the event of account closure or deletion, personal data is processed in accordance with the period and conditions specified in the Cosyworker Privacy Policy. Data subject to legal retention obligations under the PDPL and other legislation is retained until the expiration of the relevant periods. Data not subject to legal retention obligations is deleted or anonymized within 30 days of the account closure request.

Cosyworker holds the position of "hosting provider" within the scope of the Law No. 5651 on Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications. Hosting Provider Status: Cosyworker operates as a platform that hosts content created by users (venue reviews, event descriptions, photos, profile information, etc.). In accordance with Article 5 of Law No. 5651, as a hosting provider, Cosyworker has no obligation to pre-screen content provided by users. Content Responsibility: Users are personally responsible for all content they upload to the Application. Content that is unlawful, defamatory, violates personal rights, infringes the intellectual property rights of third parties, or constitutes a crime is strictly prohibited. Reporting and Notification Mechanism: Users or third parties who detect unlawful content can report through the following channels: - In-app "Report" feature - Email: [email protected] Reports are evaluated within 72 hours at the latest. Content found to be unlawful is removed or access is blocked in accordance with Article 5 of Law No. 5651. All removal and blocking actions are recorded.

Applicable Law: This Agreement is subject to the laws of the Republic of Turkey and shall be interpreted and applied in accordance with Turkish law. Authorized Courts: Istanbul (Anatolian) Courts and Execution Offices are authorized for the resolution of all disputes arising from or related to this Agreement. Dispute Resolution Process: 1. Amicable Resolution: The parties shall first attempt to resolve any disputes that may arise between them through mutual negotiation. An amicable solution shall be sought within 30 days of written notification of the dispute to a party. 2. Mediation: If an amicable resolution cannot be achieved, the parties may resort to mediation within the scope of the Mediation in Civil Disputes Law No. 6325. The mediation process is conducted in accordance with the procedures and principles determined in the relevant legislation. 3. Litigation: If no agreement is reached during the mediation process, the parties have the right to apply to the authorized courts. Consumer Rights: Users who hold consumer status within the scope of the Consumer Protection Law No. 6502 have the right to apply to the Consumer Arbitration Committee or Consumer Court in their location. Application limits to consumer arbitration committees are subject to the monetary limits determined annually by the Ministry of Trade.

Severability: If any provision of this Agreement is found invalid, void, or unenforceable by a competent court or regulatory body, this shall not affect the validity and enforceability of the other provisions of the Agreement. The invalid provision shall be deemed replaced by a valid provision that most closely reflects the intent of the parties. Waiver: The failure of the Application Owner to exercise any right arising from this Agreement, or any delay in exercising such right, shall not constitute a waiver of said right. The one-time exercise of any right shall not be interpreted as a waiver of the future exercise of that right. Notification Methods: Notifications between the parties under this Agreement may be made through the following means: - In-app notification (push notification) - Electronic mail to the registered email address - In-app messaging system The time of receipt of notifications is accepted as the moment of sending for in-app notifications and 3 business days from sending for email notifications. Prohibition of Assignment: The User may not assign the rights and obligations arising from this Agreement to third parties without the prior written consent of the Application Owner. The Application Owner may assign the rights and obligations arising from the Agreement, provided that the User is informed in advance. Entire Agreement: This Agreement, together with the Cosyworker Privacy Policy and in-app rules, constitutes the entire agreement between the parties. The Agreement supersedes all prior oral or written agreements.

For any questions, opinions, suggestions, and applications regarding this Agreement or the Application, you may contact us through the following channels: Email: [email protected] In-App: "Contact Us" / "Support" section Application under the PDPL: To exercise your rights regarding your personal data, you may apply to [email protected] with a petition that includes information confirming your identity (name-surname, Turkish ID number, contact information) and clearly states your request. Applications are concluded free of charge within 30 days at the latest. Complaint to the Personal Data Protection Board: In cases where your application is rejected, the response is found insufficient, or no response is given within the time limit, you can file a complaint with the Personal Data Protection Board (www.kvkk.gov.tr).