Payment Module and Sub-Merchant Terms

This English version is a translation provided for convenience. If the English and Turkish versions conflict, the Turkish version prevails.

This text is an integral annex to the Terms of Use. Terms defined in the Terms of Use have the same meaning in this Annex. In the event of a conflict between this Annex and the Terms of Use, this Annex applies to matters relating to online payments.

1. Scope

This Annex sets out the terms for the use of the Payment Module, which enables the Business to collect deposits or prepayments online from customers (End Users) who book appointments through the Planfly booking page, the embedded booking page or the widget.

The Payment Module is used with the Accept payments with iyzico (Planfly sub-merchant) method: payments are collected by iyzico, which is licensed by the Central Bank of the Republic of Türkiye (TCMB), and transferred to your business. The Business is registered with iyzico Ödeme Hizmetleri A.Ş. ("iyzico") as a sub-merchant linked to Mobiza Teknoloji's marketplace account. Connecting the Business's own payment institution account may be offered in the future; once it is offered, the relevant section of this Annex applies.

iyzico is also referred to in this Annex as the "Payment Institution".

2. Planfly's Role

Under the Payment Module, Mobiza Teknoloji provides technical infrastructure only and acts as an intermediary service provider within the meaning of Law No. 6563 on the Regulation of Electronic Commerce (6563 sayılı Elektronik Ticaretin Düzenlenmesi Hakkında Kanun).

• Mobiza Teknoloji is not a payment institution within the meaning of Law No. 6493 on Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions (6493 sayılı Ödeme ve Menkul Kıymet Mutabakat Sistemleri, Ödeme Hizmetleri ve Elektronik Para Kuruluşları Hakkında Kanun) and does not provide payment services.
• Amounts collected from the End User are not pooled in Mobiza Teknoloji's bank account or balance at any stage; collection and transfer to the Business are carried out by the Payment Institution.
• The provider, seller and invoice issuer of the service that is the subject of the appointment is the Business. Mobiza Teknoloji is not a party to the service contract between the End User and the Business; however, the obligations that mandatory legislation imposes on the intermediary service provider are reserved (see Section 7).

3. "Accept payments with iyzico" (iyzico Marketplace, Planfly sub-merchant)

3.1. Sub-Merchant Registration

To use this method, the Business applies through the Payment Module settings. The information provided in the application is forwarded to iyzico for sub-merchant registration.

• Persons without a tax registration are registered as individual (PERSONAL); sole proprietorships and self-employed professionals (psychologists, dietitians, physiotherapists, etc.) as sole proprietorship (PRIVATE_COMPANY); and limited and joint-stock companies as limited or joint-stock company (LIMITED_OR_JOINT_STOCK_COMPANY). A Business that registers as an individual is responsible for assessing whether its activity requires tax registration under tax legislation and for completing any required registrations.
• The business type cannot be changed after iyzico registration. The Business is responsible for the consequences of selecting the wrong type.
• The Business accepts and declares that it has provided its trade name, tax office, tax identification number, the Turkish national ID number (T.C. kimlik numarası) of its authorized person, its MERSİS (Central Registry System) number, if any, its tax status, contact details and IBAN completely and accurately, and that the IBAN is registered in its own trade name (in its own name for individuals and sole proprietorships).
• iyzico may, under its own regulatory and risk policies, request additional information, documents or verification, and may reject or suspend the registration. Mobiza Teknoloji is not responsible for such decisions by iyzico.
• If any of its information changes, the Business updates it without delay in the Payment Module settings.

3.2. Collection, Approval and Transfer

• The End User pays on iyzico's secure payment page.
• For each payment, the Business's share is recorded on the payment item. The share is calculated by deducting from the amount paid the iyzico transaction fee, the 1% e-commerce withholding tax (stopaj), if applicable, and the Planfly service fee, if any. After the payment, the actual transaction fee is read from iyzico, and the share is adjusted to that amount before approval.
• Mobiza Teknoloji deducts from each payment the Planfly service fee (if any) shown to the Business in the "Fees" section of the Payment Module settings. The service fee is calculated at the rate in effect when the payment is initiated; rate changes are notified to the Business before they take effect and do not affect payments already received. Where no service fee applies, the marketplace's share covers only the iyzico transaction fee and the withholding tax to be declared.
• The payment item is approved once the period set in the admin panel (24 hours by default) has passed after the appointment time, provided there is no cancellation or complaint. After approval, iyzico transfers the Business's share to the Business's IBAN according to its own payout schedule.
• For payments that are subject to a complaint, objection or withdrawal notice from the End User, approval may be held until the request is resolved.
• For cancellations, late cancellations and no-shows, refunds are made through the payment item; iyzico reduces the Business's share in proportion to the amount refunded. The exact amount transferred to the Business is shown on the Payments page according to iyzico's payout report.
• If a transfer to the IBAN is returned by the bank, the Business is notified and updates its IBAN in the Payment Module settings.

3.3. Transaction Fee and Invoicing

• The iyzico transaction fee and the Planfly service fee, if any, are deducted from your earnings and invoiced to you monthly by Mobiza Teknoloji.
• The 1% e-commerce withholding tax, if applicable, is withheld and declared by Mobiza Teknoloji; the withholding details are included in the Business's monthly payout statement. A Business that declares an exemption is responsible for the accuracy of its declaration.
• The Business can download its monthly payout statement as a CSV file or print it from the Payments page.

3.4. Refunds, Chargebacks and Recourse

• Refunds are made through the Payment Institution to the card used for the payment. iyzico's refund window is 365 days from the payment date.
• For chargebacks and disputes initiated by the cardholder with their bank, the obligation to submit documents and to bear the outcome lies with the Business.
• Where, under the legislation, Mobiza Teknoloji is held jointly and severally liable to the End User or is required to make a payment to the End User, Mobiza Teknoloji has the right to claim the amount it paid and its reasonable expenses from the Business and to ask the Payment Institution to set these off against the Business's shares that have not yet been approved.

4. Connecting Your Own Payment Institution Account

This method is not offered yet. Once it is offered, the following terms apply.

• For collections made with the Business's own iyzico or PayTR account, commissions, transfer times, refunds, chargebacks and all similar matters are governed by the agreement between the Business and the Payment Institution.
• The Business is responsible for the accuracy and confidentiality of its API keys and store information. This information is stored encrypted in Planfly, and only its last four characters are shown in the dashboard.
• The Business declares the Planfly booking page address as a sales channel in its own Payment Institution account.
• PayTR: In PayTR, only one notification address (Notification URL) can be defined per store. To accept payments with PayTR through Planfly, the Business sets the notification address in the PayTR panel to the Planfly address shown in the Payment Module settings. If that address is used by another system, Planfly payments are verified with a delay through status queries. Mobiza Teknoloji is not responsible for delays caused by an incorrectly set notification address.

5. Card Data and Security

• Card details are entered only on the Payment Institution's hosted payment page (the iyzico payment page or the PayTR iframe); they are not transmitted to Planfly's servers or to the Business, and they are not stored.
• Mobiza Teknoloji verifies payment callbacks through signature and hash verification and by matching the amount and order number, and processes each notification only once.
• Payment pages are served with a strict content security policy.

6. The Business's Obligations to the End User

6.1. Information and Contract

• For every appointment with online payment, the Preliminary Information Form and the Distance Service Agreement, filled in with the Business's details, are shown to the End User before payment, the End User's acceptance is recorded, and a copy is sent by email.
• The Business is responsible for ensuring that its trade name, MERSİS, tax, address and contact details, service descriptions, prices and VAT rates are accurate and up to date. Prices are shown to the End User including VAT.

6.2. Invoicing

You issue the invoice or self-employment receipt (serbest meslek makbuzu) (e-Archive, e-Invoice or e-SMM) to your customer for the full amount your customer pays; do not issue the invoice to Mobiza Teknoloji. The payment institution's transaction fee and the Planfly service fee, if any, are deducted from your earnings and invoiced to you monthly by Mobiza. The 1% e-commerce withholding tax, if applicable, is withheld and declared; the withholding details are included in your report. The document type and the date of issue are determined by the tax legislation that applies to you.

6.3. Right of Withdrawal

• In distance service contracts, the End User's right of withdrawal lasts 14 days from the day the contract (the appointment) is concluded. If the End User cancels within this period and before the appointment starts, the full amount paid is refunded, regardless of the Business's cancellation policy.
• The exception in Article 15(1)(g) of the Distance Contracts Regulation (Mesafeli Sözleşmeler Yönetmeliği) applies only to accommodation, transport, car rental, food and beverage supply, and entertainment or leisure services that must be provided on a specific date. Hair salon, barber, beauty care, health, therapy and similar services do not fall under this exception. The Business may select this exception only if its service genuinely falls within this scope; all liability arising from an incorrect declaration lies with the Business.

6.4. Deposit and Cancellation Policy

• The deposit is earnest money (bağlanma parası) within the meaning of Article 177 of the Turkish Code of Obligations (Türk Borçlar Kanunu) No. 6098; it is deducted from the service price and, as a rule, does not constitute a penalty clause (cezai şart).
• In the Payment Module settings, the Business may set a policy only within the following limits: a free cancellation window of up to 72 hours at most; and, for late cancellations and no-shows, a proportional deduction that does not exceed the deposit amount.
• If the Business cancels the appointment, the full amount paid is refunded in all cases. The Business may not set additional conditions that amount to unfair terms against the End User; the additional notes field cannot restrict the rights under this Annex and the legislation.
• Refunds are made within 14 days at the latest from the cancellation or withdrawal notice.

6.5. Sector-Specific Legislation

For health services, veterinary services and similar regulated professions, compliance with the professional rules and legislation on prepayment, price display and advertising is the Business's responsibility.

7. Mobiza Teknoloji's Obligations as an Intermediary Service Provider

As an intermediary service provider, Mobiza Teknoloji:

• ensures that the preliminary information is presented to the End User and, to the extent provided by the legislation, is jointly responsible with the Business,
• provides on the appointment management page an always-accessible form through which the End User can submit a withdrawal notice and complaints; instantly confirms the notice with a reference number and forwards it to the Business immediately,
• for withdrawal notices submitted within the withdrawal period and before the appointment starts, cancels the appointment and initiates the refund,
• keeps the records of payment and cancellation transactions for at least 3 years,
• under the "Accept payments with iyzico" method, is jointly responsible with the Business, to the extent provided by the legislation, for refunds to be made to the End User.

8. Fees

The Payment Module is available on the paid plans specified in the plan features. The iyzico transaction fee and the Planfly service fee (if any) applied under the "Accept payments with iyzico" method are shown in the "Fees" section of the Payment Module settings. For methods that use the Business's own Payment Institution account, the Payment Institution's fees are governed by the agreement between the Business and the Payment Institution.

9. Plan Changes, Suspension and Termination

• If the Business moves to a plan that does not include the Payment Module, no new online payments are accepted; refunds, transfers and records of payments received before then continue to be processed.
• Mobiza Teknoloji may suspend the Payment Module with prior notice or, in urgent cases, immediately, in the event of a breach of legislation, fraudulent or suspicious transactions, a high volume of complaints, a rising chargeback rate, a request from the Payment Institution or a breach of this Annex.
• If the Payment Institution closes the sub-merchant registration or the Business's own account becomes inaccessible, the relevant method cannot be used.

10. Personal Data

• For the payment transaction data of the Business's customers (amount, date, payment number, last four digits of the card, refund details), the Business is the data controller and Mobiza Teknoloji is the data processor.
• The Payment Institution is an independent data controller with respect to carrying out the payment service and its own legal obligations.
• The identity, tax and IBAN details provided in the "Accept payments with iyzico" application are transferred to iyzico for sub-merchant registration and stored encrypted in Planfly. For details, see the KVKK Privacy Notice.

11. Limitation of Liability

Mobiza Teknoloji is not responsible for the Payment Institution's service interruptions, transfer delays or decisions made as a result of its risk assessment, or for transactions relating to the Business's own account. The Business indemnifies Mobiza Teknoloji for any losses it suffers and any amounts it is required to pay to End Users as a result of the Business's conduct in breach of this Annex or the legislation.

12. Acceptance and Version

This Annex is accepted electronically when applying for "Accept payments with iyzico" or when connecting the Business's own Payment Institution account. The accepted version, the date of acceptance and the IP address are recorded. Mobiza Teknoloji may update this Annex in accordance with the procedure set out in the Terms of Use.