Terms of Service
Version: 4 October 2026
1. Parties and acceptance
These Terms are an agreement between Simpux Bilişim Ltd. Şti., Esentepe Mah. Talatpaşa Cad. No:5/1, 34394 Şişli / İstanbul, Türkiye ("Simpux", "we") and the organisation that creates or uses an EnterpriseBrew workspace ("Customer"). The person who accepts them confirms that they may bind the Customer. A signed order form or agreement takes precedence over these Terms where they differ.
2. Business use only
EnterpriseBrew is offered to businesses for their trade or profession, not to consumers. By accepting these Terms the Customer confirms that it acts in that capacity. Rules that protect consumers in distance contracts (Turkish Law No. 6502 and EU consumer law) therefore do not apply.
3. The service
EnterpriseBrew governs Homebrew package installation on the Customer's computers: it checks installs against the Customer's policies, serves packages through its cache, records what was installed, and checks installed versions against public vulnerability data. The managed service runs in the data region chosen when the workspace is created (EU or Türkiye). A self-hosted deployment is licensed on separate terms. The features available depend on the plan.
4. Accounts
The Customer is responsible for its administrators' credentials and for the users it invites, and for their compliance with these Terms. It tells us without delay at contact@simpux.com about any unauthorised use it learns of.
5. Customer data and data protection
The Customer owns the data it and its users put into the service ("Customer Data"). We process personal data in Customer Data only on the Customer's behalf, under the Data Processing Agreement, which forms part of these Terms. The Customer is the controller of that data. It is responsible for having a legal basis for it and for informing its developers and other users (for example under KVKK Art. 10 or GDPR Art. 13), including about install monitoring, device inventory and the recording of AI-agent installs.
6. Acceptable use
The Customer will not use the service to distribute malicious software, to access another customer's workspace or bypass the service's security controls, to load-test or scan it without our written consent, or in breach of applicable export control and sanctions law. Reverse engineering is allowed only as far as the law permits it despite this clause.
7. Third-party software and vulnerability data
Homebrew packages are third-party software under their own licences; we neither own nor warrant them. Vulnerability checks are made against the best available public data (such as OSV.dev, CISA KEV and NVD) and cannot guarantee that every vulnerability is caught. AI agents are recognised by the traces they leave; an agent that leaves none looks like a person. The package policy, not agent recognition, is what controls installs.
8. Fees
Fees are those shown when the plan is purchased. Paid plans are sold by Paddle as merchant of record, and Paddle's buyer terms govern payment, invoicing and taxes. We may change the free plan, or the fees for a renewal, with at least 30 days' notice.
9. Availability and support
We use commercially reasonable efforts to keep the service available and announce planned maintenance in advance. Any service level is set out in an order form.
10. Security
We protect the service and Customer Data with the measures described in the Data Processing Agreement and notify the Customer of personal data breaches as it provides.
11. Intellectual property
We own the service, including the portal, the command-line tool and the desktop app. During the subscription the Customer may install and use the command-line tool and the desktop app on its computers for use with the service. We may use feedback without obligation.
12. Confidentiality
Each party keeps the other's non-public information confidential and uses it only for this agreement, for as long as it remains confidential.
13. Switching and data export
This clause implements Chapter VI of the EU Data Act (Regulation (EU) 2023/2854). • The Customer may at any time ask to switch to another provider or to its own infrastructure (including EnterpriseBrew self-hosted), or to have its data exported, giving at most two months' notice. • After the notice period a transitional period of up to 30 days follows, during which we complete the export and keep the service running. If that is technically impossible we say so within 14 working days, explain why, and propose a period of no more than 7 months. • Exportable data: policies and rules, device groups, package sets, Brew Configuration, allowed taps, members and roles, the device and package inventory, install and admin audit logs, package requests, security alerts and SBOMs, in JSON or CSV through the portal and the API. • Excluded: data about the internal functioning of the service (cached package files, platform-wide vulnerability caches, our credentials and keys). • The Customer can retrieve its data for at least 30 days after the transitional period; then we erase it completely, including from backups as they expire. • We charge nothing for switching or export. • The agreement ends when the switch is complete; we confirm that in writing.
14. Term and termination
The agreement runs for the plan's billing period and renews until cancelled. The Customer may cancel at any time, effective at the end of the current period. Either party may terminate for a material breach not remedied within 30 days of notice. We may suspend access immediately where needed to protect the service or other customers, and for non-payment after notice. After termination clause 13 applies.
15. Warranties
Except as stated in these Terms, the service is provided "as is", to the extent the law allows.
16. Liability
Each party's total liability under this agreement is limited to the fees paid in the 12 months before the event giving rise to it. Neither party is liable for lost profits or indirect damage. These limits do not apply to wilful misconduct or gross negligence, to the Customer's payment obligations, or where the law does not allow liability to be limited.
17. Changes to these Terms
We announce material changes at least 30 days in advance by email to the workspace owner, and ask for renewed acceptance where needed. If the Customer does not agree it may cancel before the change takes effect.
18. Governing law and jurisdiction
These Terms are governed by the laws of the Republic of Türkiye. The courts and enforcement offices of Istanbul (Çağlayan) have jurisdiction, unless an order form says otherwise.
19. Notices
Notices to us: Simpux Bilişim Ltd. Şti., Esentepe Mah. Talatpaşa Cad. No:5/1, 34394 Şişli / İstanbul, Türkiye, contact@simpux.com. Notices to the Customer go to the workspace owner's email address.