Terms of Use

1. Parties and scope of service

These Terms of Use form the agreement between the provider of SECRETARY and the person or business using the service. Send questions and notices to hi@secretary.sh.

SECRETARY is a monthly subscription service. It includes the AI work assistant installed on your Windows computer, the web dashboard for creating and monitoring tasks, access to AI models, connected applications, and operations through WhatsApp and Telegram.

2. Agreement and eligibility

This agreement takes effect when you first sign in with Google and your account is created. Installing SECRETARY, purchasing a paid plan, or using the service also means you accept these terms. The Privacy Policy forms part of this agreement. Terms shown on the payment page also apply to paid purchases.

The service is intended for businesses and professional users and may not be used by anyone under 18. If you create an account for a business, you confirm that you are authorized to bind that business to these terms.

Consumers and commercial users. A natural person using the service outside commercial or professional activity is a consumer under Turkish Consumer Protection Law No. 6502. Users acting within commercial or professional activity are referred to as commercial or professional customers. These terms do not remove or limit mandatory consumer rights, and any conflicting restriction does not apply to consumers.

3. Installation scope and device permissions

Installation makes persistent changes to your computer. By starting setup, you authorize the following operations:

• Setup requires administrator privileges and cannot run without them.
• If an Agent is already installed, setup fully removes the previous installation, including its folder, settings, WhatsApp and Telegram sessions, browser profile and active sessions, capabilities, workspace, history, scheduled tasks, startup item, and tasks from the previous account. A folder that cannot be deleted is renamed and cleaned later.
• Required third-party software is installed silently, including Node.js, LibreOffice, 7-Zip, SumatraPDF, ffmpeg, a PowerShell module for Excel, and a PDF library. If Windows Package Manager is unavailable, downloads use designated sources. The system PATH may be updated. Each product remains subject to its own license.
• The Agent engine and extensions, including WhatsApp support, are installed from a public package repository at versions fixed by our server.
• Background tasks are installed: a scheduled task that synchronizes with our server every minute and a service task that runs the Agent engine. A startup item may also be added so the engine can start after Windows sign-in.
• An elevated repair task is installed. It does not run by itself and can be started by your standard account only after a repair or version command from our server. Its files and the computer access key are stored in an administrator-only program data folder.
• Windows Defender exclusions are added, when possible, for the Agent folder and engine service task file. Setup continues if security software rejects the change.
• Synchronization files, capabilities, settings, and work instructions are replaced automatically with new versions from our server. The Agent engine, extensions, and Node.js may be upgraded to server-selected versions without separate approval. Executable downloads are signed and replaced only after signature verification.
• Agent engine settings are defined by our server, including which senders WhatsApp and Telegram accept and how automated replies behave, and are written to your computer.
• An elevated repair operation may run after a fault or version change. It may force-stop the engine, install components and versions, reinstall and start the background service, and refresh settings. Active work may be interrupted.
• The Agent can access files available to your Windows user account. It is not sandboxed and works with real documents in your folders.
• Our server may issue a deletion command for temporary files in the Agent workspace and intermediate files created during a run in the selected task folder but not included in the delivered output. Files are identified by name. Files that existed before the run, closing reports, and omission lists are not deleted. Disconnecting WhatsApp from the dashboard also removes the local WhatsApp session folder.

When you remove a computer from the dashboard, the Agent stops at its next synchronization. It removes scheduled work and the minute-by-minute sync task, signs out of local WhatsApp and Telegram sessions, resets the browser profile, stops the engine, and revokes the computer access key. An offline computer performs this when it reconnects. If WhatsApp was not disconnected first, the device may remain under Linked devices on your phone and require manual removal there.

Removal does not erase every trace. The Agent engine and folder, engine service task, any startup item, elevated repair task and program data, Defender exclusions, PATH changes, and installed third-party software remain. Some items may restart the engine after reboot. Contact hi@secretary.sh for complete removal instructions.

You confirm that you own or are authorized to use the computer, have any required permission for a corporate device, and will inform other users when necessary.

4. Operating scope and controls

SECRETARY follows the task text you write and approve. These technical limits help keep work within that scope:

• The Agent cannot run arbitrary commands. It can run only capabilities we publish and deliver as signed files; it cannot execute scripts it writes.
• In applications placed behind approval, write actions such as sending, creating, and deleting remain technically blocked until you approve them. Rejection closes the step without performing the action.
• Some actions do not wait for approval: actions in unprotected applications, live WhatsApp replies, and website actions explicitly requested in task text. Check approval settings before approving the task.
• A claim that a step finished is not enough; evidence is checked against records. A step without evidence is not treated as complete.
• The Agent can call tools only for applications you connected and cannot reach an unconnected application.
• External content, including documents, incoming messages, and web pages, is treated as data. Instructions embedded in that content are not executed.

These controls are designed and monitored carefully, but they do not provide an absolute guarantee.

5. Use of WhatsApp and Telegram

Nature of the connection. WhatsApp is connected by adding your computer to Linked devices through a QR code. This is not the official interface offered by WhatsApp to businesses and is not an integration approved by WhatsApp.

Risk of account restriction. WhatsApp terms prohibit bulk or automated messaging, unauthorized access, and certain non-personal uses. WhatsApp may restrict, suspend, or permanently close the connected account without warning, which may remove access to chats and contacts associated with the number. SECRETARY uses safeguards such as a random delay before replies, but cannot guarantee that restriction will not occur. You decide whether to connect WhatsApp and accept this risk.

Phone number. You may connect only a WhatsApp number that you own or are authorized to use. The Agent sends results and approval requests to the notification number in your profile or to Telegram.

Document collection. When collection is enabled, documents sent through WhatsApp are saved in sender-specific subfolders under the folder selected for the task.

Live replies. When reply mode is enabled, the Agent uses your task instructions and source files to send AI-generated replies from your WhatsApp account without obtaining separate approval for each message. These are not written by a human, reach the recipient as statements made on your behalf, and remain your responsibility. Requests requiring a protected application write action are forwarded to you instead.

Which senders are processed. If scope is limited to your contacts, messages from other numbers are not processed or answered. If you allow anyone, every sender may receive a reply and have documents saved; you are responsible for that choice. While WhatsApp is connected, a copy of the address book is kept on the computer. When you use contact selection, names and numbers are uploaded to our server as described in the Privacy Policy.

Permission and notice. You are responsible for having the right to contact recipients, informing them when required that AI reads and replies to messages, and establishing a lawful basis for processing their personal data.

Commercial electronic messages. Messages sent through the Agent may qualify as commercial electronic communications. Subject to legal exceptions, you are responsible under Turkish Law No. 6563 and related regulations for prior recipient consent, consent management through İYS, opt-out rights, and sender identification. The service may not be used for bulk or commercial messages to people who have not consented.

Telegram. The connection uses a bot you create and remains subject to Telegram terms and bot rules.

6. Work performed on websites

When requested in task text, the Agent can use its browser to open public sites, read pages, collect data across paginated tables and lists, download files, save pages as PDF or images, fill forms, and upload a local file. Submitting a form, placing an order, making a payment, sending a message, or deleting something occurs only when explicitly requested and does not wait for separate approval.

The Agent does not normally fill website sign-in forms. The exception is a supported site where you save credentials on your computer; the device signs in through a hidden browser and you enter any required code on Approvals. Password, card, and verification-code fields after sign-in are filled only with values written in task text. The Agent does not use electronic signatures, download programs or scripts, or open local device and network addresses. If it cannot learn a sign-in path, the work is marked incomplete. Existing Agent browser sessions may be used. These limits add protection but are not a complete firewall.

You choose which sites and data are used and how often. You are responsible for site terms, robots rules, access limits, personal-data law, copyright and database rights, and checking downloaded files for safety. Information obtained from websites is not guaranteed to be accurate or current.

7. Connected third-party applications

When you connect Gmail, Calendar, Slack, or another application, the Agent may read and write within the permissions you grant on that provider screen. Your account, fees, and credits with the application remain between you and its provider and are subject to its terms.

You may disconnect access from the dashboard or revoke it in the provider security settings. Connections can fail after session expiry, password changes, revoked permission, or policy changes. Tasks using that application pause until reconnection. We are not responsible for provider outages, interface changes, data loss, or an application becoming unsupported.

8. AI output and user review

SECRETARY uses AI models to perform tasks and break your instructions into steps. AI output can contain errors. Calculations may be wrong, documents misread, summaries incomplete, or replies unsuitable. The system checks outputs and omits inconsistent rows, but no control can prevent every error.

You must review task steps, folders, scope, and protected applications before approval and check Agent output before relying on it for decisions, payments, official filings, or communication to another person. The service does not provide accounting, legal, medical, or investment advice and is not a substitute for a qualified professional. You are responsible for approved actions.

9. Personal data: roles and obligations

The Privacy Policy explains how account data is processed.

For personal data you process through the Agent, including data about contacts, employees, customers, or people appearing in documents, emails, messages, and collected web pages, you are the data controller under Turkish Personal Data Protection Law No. 6698. We act as the data processor and process that data only on your instructions to provide the service.

As controller, you are responsible for a lawful basis, transparency notices, consent where required, conditions for international transfers because provider servers may be abroad, responses to data-subject requests, and registration with the Data Controllers Registry where required. Assess additional duties before using the Agent with sensitive data such as health information.

Under Article 12, you as controller and we as processor share responsibility for data-security measures. We apply the measures described in the Privacy Policy. You secure the computer, user account, connected accounts, and notification channels and prevent unauthorized access. This section and the Privacy Policy form the contractual framework for processing.

10. Acceptable use

The service may not be used to:

• Conduct unlawful activity or create, store, or transmit unlawful, threatening, degrading, discriminatory, or criminal content;
• Send commercial messages without consent, unsolicited bulk messages, chain messages, or automated mass messages;
• Harass, disturb, deceive, or impersonate another person;
• Access or attempt to access accounts, computers, systems, or data belonging to another person without permission;
• Infringe intellectual or industrial property, trade secrets, privacy, or personality rights;
• Collect data in breach of website terms, robots rules, or access limits, overload sites, or copy databases without permission;
• Collect or process personal data without a lawful basis or unlawfully monitor and profile people;
• Attempt to bypass sign-in barriers, paywalls, or other security and access controls;
• Create automations that violate the terms of WhatsApp, Telegram, or connected applications;
• Distribute malware; test service, installation, or Agent security without permission; reverse engineer; disable safeguards; share access keys; or create excessive load;
• Resell the service or provide it as a service to third parties.

11. Pricing, usage allowance, and payment

The service is offered through monthly subscriptions. Current plans, prices, computer limits, and monthly credit amounts appear on the pricing page and in the dashboard. Your subscription renews each period until canceled.

The payment provider acts as merchant of record. Subscription payments are processed by Polar as merchant of record. Polar handles payment collection, tax calculation, invoices, receipts, refunds, and chargebacks under the buyer terms accepted on its payment page. We grant your right to use the service under these terms. We do not receive card details. Invoices and receipts are available through the purchase email. Provider terms do not remove mandatory consumer rights under Turkish law.

How credits are used. AI calls and paid tools deduct their account price from monthly credits. That price is provider cost plus our service fee and appears for each row on Usage. The service-fee rate may change but is not applied retroactively. Support chat and the task setup wizard are free.

Period. After each successful periodic payment, credits equal the amount paid and the usage counter resets. Unused credits do not roll over. If you upgrade mid-period, the amount paid for the difference is added to current credits.

When credits run out. The Agent accepts no new work and tasks are removed from the computer. You are notified. Tasks are reinstalled at the next period or after an upgrade. No debt accrues, and access to files and the dashboard continues.

Payment issues. The Agent stops if payment fails or the provider pauses the subscription and resumes after payment succeeds. When a subscription ends, tasks and settings remain in the account.

Trial. New accounts start with limited trial credits and one computer. If you start a timed subscription trial on the payment page and do not cancel before it ends, the first plan payment is collected automatically and the paid subscription continues. Trial credit cannot be refunded or converted to cash.

12. Right of withdrawal, cancellation, and refunds

Consumer right of withdrawal. If you subscribe as a consumer, the Turkish Distance Contracts Regulation allows withdrawal within 14 days from the agreement date without reason or penalty. Exercise this right within the period by written notice to hi@secretary.sh.

The Regulation excludes services performed instantly online and services begun with consumer consent before the withdrawal period ends. These exceptions apply only when legally required prior information and consent conditions are met. Otherwise, the right continues as provided by law. Valid withdrawals are refunded by the payment provider to the original method within the legal period.

Canceling a subscription. Cancellation must be completed with the payment provider. Use the payment page linked in your purchase email or ask us at hi@secretary.sh. Cancellation stops the next renewal while service continues through the paid period. Cancel this way before closing the account.

Refunds. Subject to withdrawal rights and legal remedies for defective service, fees for past or current periods are non-refundable. Unused credit cannot be converted to cash or transferred, and remaining credit is removed when the account closes.

13. Service availability, maintenance, and support

We use reasonable care but do not guarantee uninterrupted or error-free operation, fitness for a particular purpose, or accurate AI output. Planned or emergency maintenance, version changes, and security updates may temporarily stop the dashboard or Agent. An engine update may interrupt a run, which resumes where possible.

Features, supported applications, AI models, and providers may change, and a feature may be removed. Tasks do not run while the computer is off, asleep, or offline. SECRETARY attempts to recover missed work after reconnection.

The AI support assistant replies first in dashboard support chat. Unresolved matters may be transferred to our team. The Privacy Policy explains team access for support purposes.

14. Suspension, termination, and account closure

Closing your account. You may close it from the dashboard at any time. Computers are removed from service, tasks stop, and remaining credit is deleted. Signing in again with the same Google account creates a new account. Closure does not itself delete stored data; the Privacy Policy explains retention and deletion requests. Section 3 lists software and changes remaining on the computer.

Our right to suspend or terminate. We may suspend or close an account or computer for a serious breach, prohibited use under Section 10, a threat to the service or other customers, nonpayment, or a legal requirement. Where circumstances permit, we will notify you and provide the reason.

15. Backups

You are responsible for backing up files on your computer. The Agent creates, moves, and removes some intermediate files in your folders, and setup deletes the previous installation folder. Maintain a current backup of important data.

16. Intellectual property

The software, capability files, instruction layers, dashboard, documentation, and SECRETARY brand belong to us or our licensors. During the subscription, you receive a non-exclusive, non-transferable, non-sublicensable right to use the service for your own work in accordance with these terms. Third-party and open-source software remains subject to its own licenses.

We claim no rights over your task text, files, or output created from your input, including reports, tables, documents, text, and images. We process them only as needed to provide the service. AI output is not guaranteed to be unique or free of third-party rights. You are responsible for having rights to input content and using output lawfully. We may use your suggestions and feedback to improve the service.

17. Confidentiality

Each party will use inherently confidential information learned through this agreement, including business data, commercial information, and access keys, only for the agreement and will not disclose it except where legally required. The Privacy Policy describes provider transfers and team access for support. This duty continues after the agreement ends.

18. Limitations of liability

Our liability is limited as described here to the extent allowed by Turkish law. Liability for intent and gross negligence is not limited under Article 115 of the Turkish Code of Obligations, and other liability that cannot legally be limited remains unaffected.

For ordinary negligence, we are not liable for indirect loss, lost profit or revenue, business interruption, reputational harm, or data loss. Unless caused by our fault, we are also not liable for loss arising from:

• Outages, restrictions, and decisions by connected applications, WhatsApp, Telegram, AI, payment and hosting providers, or websites, including restriction or closure of a WhatsApp account;
• Instructions in task text, actions you approve, and settings you choose, including replying to anyone;
• Use of AI output without review;
• A computer being off, asleep, or offline, or security and other software preventing the Agent from working;
• Files that were not backed up;
• Unauthorized access to your computer, dashboard, or connected accounts, whether within your control or not reasonably preventable by you.

Our total liability for ordinary negligence is limited to the subscription fees you paid during the 12 months before the event causing the loss.

If you are a consumer, these limitations do not remove remedies for defective services or mandatory rights under Law No. 6502. Conflicting limitations do not apply to you.

19. Your indemnification obligation

You agree to cover losses, administrative fines, and reasonable defense costs arising from third-party or public-authority claims caused by unlawful or prohibited use, failure to meet Sections 5, 6, 9, and 10, or messages and actions performed on your instructions through the Agent. For consumers, this obligation is limited to fault.

20. Force majeure

Neither party is liable for delayed or failed performance caused by events beyond reasonable control, including natural disasters, epidemics, war, terrorism, strikes, fire, major power or internet outages, cyberattacks, authority decisions, and widespread outages of AI, hosting, payment, or messaging infrastructure. Either party may terminate if force majeure lasts more than 30 days.

21. Notices

Notices may be sent to the account email, dashboard, or selected notification channel. You are responsible for keeping them accessible. Send notices to us, including withdrawal and cancellation, by email to hi@secretary.sh.

22. Changes to these terms

The service and these terms may change. Updates are published on this page with a revised date. Material adverse changes and plan price changes are emailed before taking effect. If you disagree, cancel and close the account before the effective date. Changes requiring explicit legal consent do not apply without it. Changes required by law, security, or dependent third-party services may take effect sooner.

23. Governing law and dispute resolution

This agreement is governed by the laws of the Republic of Türkiye. For disputes with commercial and professional customers, Istanbul courts and enforcement offices have jurisdiction, subject to mandatory mediation and other legal procedures.

Consumers may apply to consumer arbitration committees within annual monetary limits set by the Ministry of Trade, or to consumer courts for disputes above those limits after following required procedures, including mandatory mediation. Applications may be made where the consumer resides or the transaction took place. This right cannot be limited by contract.

24. Effective date and other provisions

These terms, the Privacy Policy, and payment-page terms form the entire agreement. If one provision is invalid, the others remain effective. You may not transfer rights or obligations under this agreement without our written consent. Failure to exercise a right does not waive that right.

These terms were published and took effect on September 14, 2026. For questions, contact: hi@secretary.sh