Terms of Use

These Terms of Use ("Terms") govern access to Cleture websites and any Cleture service made available under these Terms. By accessing or using a service, you confirm that you can form a binding agreement and, if acting for an organization, that you have authority to bind it.

Paid and enterprise services may also be governed by an order form, master subscription agreement, statement of work, data processing agreement, service-level agreement or other written terms (together, "Commercial Terms"). If there is a conflict, the Commercial Terms control for the relevant service, followed by these Terms and then referenced policies.

If you do not agree or lack authority, do not access the service. Website use does not itself purchase a paid subscription.

Cleture / we

Cleture Yazılım A.Ş., the provider identified in the applicable order or service notice.

Customer / you

The person or organization accepting these Terms or identified in an order, including its authorized users.

Services

The Cleture website, Atlas, Connect, NetZero, Control Tower, related applications, APIs, reports, documentation and support made available to you.

Customer Data

Data, files, prompts, instructions, credentials, records and other content submitted to or generated for a customer through the Services, excluding Cleture technology and aggregated or de-identified service data.

Connect Execution

A completed run of a Connect workflow, measured as described in the applicable plan or order. Unless expressly stated otherwise, individual internal steps are not separate executions.

Order

An order form, online confirmation, proposal or other written document accepted by both parties that identifies purchased Services, scope, fees and term.

You must provide accurate account information, keep it current and use the Services only through authorized identities. Customer administrators are responsible for assigning roles, promptly removing departed users and reviewing access to connected systems.

• Keep passwords, API keys, tokens, certificates and recovery codes confidential.
• Do not share individual accounts, impersonate another person or bypass identity controls.
• Use multi-factor authentication and single sign-on where available and appropriate to your risk.
• Notify legal@cleture.com promptly of suspected compromise, unauthorized use or exposed credentials.
• You are responsible for actions taken through your accounts and integrations until you notify us, except to the extent caused by Cleture's breach of its obligations.

Cleture may offer a free starting point, focused environmental products, expansion capabilities and custom enterprise configurations. The current public journey is presented as Start, Grow and Enterprise, with products such as Corporate Carbon, Water, Product Carbon Footprint and CBAM available as focused entry points.

Plan names are a clear public presentation, not a replacement for the exact configuration in an Order. Features, organizations, facilities, environmental scopes, Connect capacity, integrations, deployment and governance controls are determined by the accepted Order or the in-product plan description.

Start

A limited entry configuration for exploration and initial environmental data work. Free access may carry capacity, feature, support and retention limits.

Grow

A paid annual starting point for a structured environmental data foundation, with the purchased impact areas and included usage defined in the Order.

Enterprise

A custom configuration shaped by organizational structure, facilities, operational scale, automation, integrations, security, deployment and governance requirements.

Public prices marked "From" are indicative starting prices for a qualifying standard scope. Custom pricing and any displayed feature comparison are informational and do not constitute a binding offer. A purchase is formed only when the parties accept an Order or complete an authorized purchase flow.

Before commitment, the Order should identify the purchased products, plan limits, included usage, term, fees and any separately scoped implementation, migration, consulting or integration work. Changes to scope may require a written change order.

• Customer purchase orders are administrative only and do not add or replace contract terms unless Cleture expressly agrees in writing.
• Verbal statements, demos, roadmaps and estimates are not commitments unless included in signed Commercial Terms.
• Beta, preview or evaluation features may be subject to additional limits and may be changed or withdrawn.

Where an Order differs from the public Pricing page, the accepted Order controls.

Fees, currency, invoicing schedule, payment due date and subscription term are stated in the Order. Unless the Order says otherwise, paid subscriptions are committed for the stated term and fees are non-cancellable and non-refundable except where mandatory law or the agreement provides otherwise.

Displayed or quoted fees may exclude VAT and other applicable taxes unless expressly stated. Customer is responsible for applicable taxes other than taxes based on Cleture's net income. Withholding duties are handled as required by law and the applicable Order.

• Renewal is automatic only if the Order expressly says so; otherwise a new written commitment is required.
• Usage-based, capacity or overage charges apply only when described in the plan or Order.
• Cleture may suspend paid access for undisputed overdue amounts after notice and a reasonable opportunity to cure, subject to the agreement.
• Free features may be subject to revised limits or discontinuation with reasonable notice where practicable.

Standard onboarding is included only where the selected plan or Order says so. Complex migration, historical data remediation, custom calculations, integration development, consulting, private-cloud or on-premise deployment and enterprise change management may be separately scoped.

• Customer will provide timely access to qualified personnel, lawful data, systems, decisions and dependencies.
• Each party is responsible for the tasks, assumptions, acceptance criteria and timeline assigned to it in the statement of work.
• Delays or rework caused by incomplete, inaccurate or changing customer inputs may affect dates and fees through an agreed change process.
• Production launch does not transfer responsibility for customer configuration, source-data quality or required internal approvals.

Connect can read from and write to third-party systems, run workflows, call APIs and webhooks, process documents, and invoke AI or data services. Customer must authorize every connection, destination and credential and remains responsible for the legality, accuracy and consequences of configured workflows.

Included Connect capacity and any additional tier are defined by the plan or Order. A Connect Execution is normally a complete workflow run, not every internal step. We may measure executions, compute, storage, concurrency, retries, payload size and error patterns to operate the Service, enforce agreed capacity, prevent abuse and plan reliability.

• Use least-privilege credentials and separate testing from production.
• Validate data mapping, recipients, write actions, retry behavior and rollback before enabling automation.
• Do not split, loop, replay, fan out or otherwise manipulate workflows primarily to evade metering, limits or charges.
• Do not exceed third-party API terms, rate limits or authorization scopes.
• Maintain human approval for destructive, irreversible, financial, legal, safety or materially consequential actions.

Customer must promptly disable or rotate any integration credential that may be exposed or used without authorization.

You must not use the Services, directly or indirectly, to harm people, systems, data, Cleture or third parties; violate law or rights; defeat safeguards; or create a material security, integrity or availability risk. Prohibited conduct includes, without limitation, the categories below.

Unauthorized access and credential abuse

Accessing accounts, systems, tenants, APIs, networks or data without permission; credential stuffing; password spraying; session hijacking; token theft; privilege escalation; bypassing SSO, MFA, RBAC or tenant isolation; or using leaked, shared, fabricated or unlawfully obtained credentials.

Malware and hostile code

Creating, hosting, delivering or executing malware, ransomware, spyware, cryptominers, botnets, destructive scripts, logic bombs, exploit payloads or code intended to persist, evade detection, damage, encrypt, exfiltrate or take control of systems or data.

Phishing, spam and deceptive automation

Sending unsolicited bulk messages; phishing; impersonation; fake forms or domains; social-engineering campaigns; deceptive lead generation; manipulated consent; fraud; or automating communications in violation of anti-spam, consumer, telecom or platform rules.

Data theft, surveillance and privacy violations

Exfiltrating or re-identifying data; unlawful tracking, profiling or surveillance; doxxing; processing personal or special-category data without a valid basis; inferring protected traits for harmful use; or connecting sources, prompts and destinations in a way that violates privacy, confidentiality or data-protection duties.

Attacks on services and infrastructure

Denial-of-service activity; traffic flooding; resource exhaustion; abusive polling; fork bombs; infinite loops; retry storms; deliberately oversized payloads; destructive load tests; scanning, probing or vulnerability exploitation without prior written authorization.

Scraping and automated extraction

Scraping, crawling, mirroring, bulk downloading or extracting website, Atlas, documentation, model, metadata or customer content beyond authorized exports; defeating robots, rate, access or technical controls; or building an unauthorized substitute dataset or competing service.

Metering, quota and billing evasion

Circumventing execution, storage, API, user, organization, facility, model or plan limits; hiding usage; recycling trials; creating coordinated accounts; tampering with telemetry; reselling capacity; or restructuring workflows primarily to avoid agreed fees or controls.

Unsafe AI and automated decisions

Using AI features to generate or scale malware, fraud, discrimination, targeted harassment, unlawful surveillance or evasion techniques; attempting prompt injection or data extraction against other users; or allowing unreviewed output to make high-impact employment, credit, insurance, legal, medical, safety or fundamental-rights decisions.

Illegal, infringing or harmful content

Processing content that is unlawful, fraudulent, defamatory, threatening, exploitative, hateful, sexually abusive, infringing, trade-secret violating or otherwise likely to cause serious harm; or removing provenance and rights information to conceal misuse.

Third-party and supply-chain abuse

Using integrations beyond granted authority; violating third-party terms; sending unauthorized commands to ERP, MES, IoT, email, storage or supplier systems; poisoning data or models; manipulating supplier responses; or causing a third party to breach law, contract or security policy.

Integrity and sustainability misrepresentation

Falsifying source data, evidence, approvals, calculations, factors, audit logs, product claims, emissions, water, CBAM or ESG results; presenting unverified output as certified; suppressing material corrections; or using Cleture to facilitate greenwashing or regulatory deception.

Interference and circumvention

Reverse engineering except where law cannot prohibit it; removing notices; bypassing safeguards, filters or approval gates; testing another customer's isolation; interfering with monitoring; concealing origin; or helping anyone perform prohibited conduct.

This list is illustrative, not exhaustive. Conduct with substantially similar purpose, method or risk is prohibited even if a new technique is not named. Authorized security research requires Cleture's prior written approval and compliance with the approved scope.

We may use proportionate automated and manual controls to detect abuse, protect users and preserve service integrity. Signals may include authentication events, IP and device indicators, execution patterns, rate and concurrency, error and retry behavior, destination reputation, payload metadata and reports from customers or third parties.

When we reasonably believe activity violates these Terms or creates imminent risk, we may rate-limit, block a request or destination, quarantine a workflow, disable an integration or credential, preserve relevant evidence, require remediation, suspend affected access or terminate the account. We will limit action to the affected scope where reasonably possible.

• We may act without advance notice where necessary to stop an active attack, data exposure, unlawful conduct, platform instability or material harm.
• We may notify the relevant customer administrator, service provider, affected party or competent authority where lawful and appropriate.
• Customer must cooperate with reasonable investigations, preserve relevant records and remediate unsafe workflows or compromised credentials.
• An account owner may appeal an enforcement decision through legal@cleture.com with relevant context and evidence.
• Enforcement does not waive any contractual, equitable or legal remedy.

As between the parties, Customer retains its rights in Customer Data. Customer grants Cleture a limited right to host, copy, transmit, transform and otherwise process Customer Data only to provide, secure, support and improve the Services as permitted by the agreement.

Customer is responsible for the lawfulness, quality and accuracy of Customer Data; required notices and permissions; data-subject requests; and instructions given through users, integrations and workflows. Cleture will process personal data according to the Privacy Policy and any applicable data processing agreement.

• Do not submit data you are not authorized to use or disclose.
• Minimize personal and special-category data and configure retention and permissions appropriately.
• Maintain backups or exports appropriate to your business continuity needs unless the Order assigns that responsibility to Cleture.
• Cleture may create aggregated or de-identified service data that does not identify Customer or individuals and use it for security, reliability, analytics and product improvement.

Cleture may assist with data extraction, classification, anomaly detection, emission-factor discovery, analysis, drafting and workflow decisions. AI and calculated outputs depend on Customer Data, selected methodology, factor version, configuration and context. They may contain errors or require professional interpretation.

Unless expressly stated in Commercial Terms, the Services do not provide legal, tax, accounting, audit, assurance, engineering or investment advice and do not themselves certify regulatory compliance. Customer remains responsible for reviewing outputs, maintaining evidence, selecting appropriate methods and obtaining qualified advice or assurance where required.

• Review source citations, units, boundaries, assumptions, factor geography and reporting period.
• Do not represent draft, estimated or AI-assisted output as verified or certified.
• Keep a qualified human in the loop for material disclosures, filings, supplier actions and operational changes.
• Do not use outputs as the sole basis for decisions affecting a person's legal rights, safety or access to essential services.

We operate and evolve the Services using commercially reasonable care. We may update interfaces, models, factors, documentation and features to improve security, performance, legal compliance or product capability. We will avoid materially reducing purchased core functionality during a paid term, except where necessary to address legal or security risk or as permitted by Commercial Terms.

Availability commitments, support response times, recovery objectives and remedies apply only if stated in an Order or service-level agreement. Planned maintenance, customer systems, third-party failures and force majeure may be excluded as defined there.

• Customer must maintain compatible systems, supported browsers and secure networks.
• Preview and beta features may be less reliable, unsupported and excluded from service levels.
• We may apply urgent patches or temporarily restrict a feature to address an active security, safety or integrity risk.

Each party may receive non-public information that a reasonable person would understand to be confidential. The receiving party will use it only to perform or exercise rights under the agreement, protect it with reasonable care and disclose it only to personnel and providers who need to know and are bound by confidentiality obligations.

Confidential information does not include information independently developed without use of the other party's information, lawfully known without restriction, received lawfully from another source or made public without breach. Legally compelled disclosure is permitted after notice where lawful and reasonably practicable.

Cleture and its licensors retain all rights in the Services, software, models, interfaces, workflows, methodologies, documentation, trademarks and improvements. Subject to the agreement and payment of applicable fees, Cleture grants Customer a limited, non-exclusive, non-transferable right for authorized users to use the purchased Services during the term for Customer's internal business purposes.

Customer retains its rights in Customer Data and reports generated specifically from it, excluding embedded Cleture technology, third-party materials and generally applicable methods. Feedback may be used by Cleture without restriction or attribution, provided it does not disclose Customer Confidential Information.

• You may not sublicense, resell, white-label or provide the Services as a service bureau unless an Order permits it.
• You may not copy, modify or create derivative works from the Services except through authorized configuration or as mandatory law permits.
• Open-source and third-party components remain subject to their own license terms.

The Services may interoperate with customer-selected identity providers, models, data sources, APIs, cloud services and operational systems. Third-party services are governed by their own terms and privacy practices. Customer authorizes Cleture to exchange data with them as configured and is responsible for maintaining lawful accounts, permissions and licenses.

Cleture is not responsible for a third-party service's availability, security, changes or use of data outside Cleture's control. We may disable an integration that becomes unlawful, insecure, unsupported or materially harmful to the Services.

Either party may terminate as provided in the applicable Order or Commercial Terms. Cleture may suspend access for a material breach, security threat, prohibited use, legal requirement or overdue undisputed payment, using notice and an opportunity to cure where the circumstances reasonably permit.

On termination, the license and access rights end. Customer may export Customer Data during the period and in the format specified by the agreement or product controls. Cleture will delete or return Customer Data according to the agreement, legal obligations and backup lifecycle.

• Suspension does not relieve Customer of fees already committed unless the agreement says otherwise.
• Sections intended by their nature to survive—such as accrued payment, confidentiality, intellectual property, disclaimers, liability, remedies and governing law—remain effective.
• Cleture may terminate free access with reasonable notice where practicable, or immediately for abuse or security risk.

Each party warrants that it has authority to enter the agreement. Cleture warrants that paid Services will materially conform to the applicable documentation during the term and that professional services will be performed with reasonable skill and care. Customer's exclusive remedy for a verified breach is correction, re-performance or, if Cleture cannot materially cure, termination of the affected Service and refund of prepaid fees for the unused affected period.

Except for express warranties in Commercial Terms and to the maximum extent permitted by law, the Services, website, free features, previews, factors, data and outputs are provided "as is" and "as available". Cleture disclaims implied warranties of merchantability, fitness for a particular purpose, non-infringement and uninterrupted or error-free operation.

Nothing in these Terms excludes a warranty or consumer right that cannot lawfully be excluded.

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, punitive or consequential loss, or loss of profit, revenue, goodwill, anticipated savings or data, arising from the agreement—even if advised of the possibility.

Unless Commercial Terms state another cap, each party's aggregate liability arising from the Services will not exceed fees paid or payable for the affected Services during the twelve months before the event giving rise to liability. For free Services, the aggregate cap is EUR 100 or the minimum enforceable cap under applicable law, whichever is greater.

• A limitation does not apply to liability that cannot lawfully be limited.
• Commercial Terms may provide different caps or exclusions for confidentiality, data protection, intellectual-property infringement, unpaid fees, fraud, wilful misconduct or prohibited use.
• Multiple claims do not increase an aggregate cap.

These allocations reflect the fees and risk allocation agreed for the relevant Service; an accepted Order controls if it states different terms.

We may update these Terms for legal, security, product or operational reasons. The current version and effective date are published on this page. Material changes affecting an active paid subscription will be notified as required by the agreement or law and generally apply from renewal unless earlier application is necessary for law, security or to prevent abuse.

If you object to a material change, stop using free Services or use the remedies available in the applicable Commercial Terms. Continued use after the effective date constitutes acceptance where permitted by law.

Unless Commercial Terms state otherwise, these Terms are governed by the laws of the Republic of Türkiye, without regard to conflict-of-law rules, and İzmir Courts and Enforcement Offices have exclusive jurisdiction, subject to mandatory jurisdiction and consumer protections.

Neither party is liable for delay caused by events beyond reasonable control, excluding payment obligations. Neither party waives a right by delay. Invalid provisions are limited to the minimum necessary and the remainder stays effective. Customer may not assign the agreement without Cleture's consent, except as permitted in Commercial Terms; Cleture may assign it in a merger, reorganization or sale of substantially all relevant assets.

• The agreement is the complete agreement for its subject and supersedes prior proposals or statements.
• Headings aid navigation and do not limit interpretation.
• Electronic notices and signatures are effective where permitted by law.
• No third party receives rights under these Terms unless expressly stated.

Send legal questions and formal notices to legal@cleture.com. Report suspected misuse, exposed credentials, abusive workflows or security incidents to the same address. Include relevant workspace, workflow, timestamp and impact details, but do not email passwords, secret keys or unnecessary personal data.