DIDOSHE OS — Terms of Service

Last updated: 26 August 2026 Effective: These terms take effect the moment you open an account or continue using the Service.

---

1. Who is contracting with whom

1.1 DIDOSHE OS is operated by SCARPAX LLC (referred to below as "DIDOSHE", "we"). Address: 311 60th St Suite #206, West New York, NJ 07093, USA. Contact: info@didoshe.co

1.2 These terms are the contract between DIDOSHE and the person who subscribes to DIDOSHE OS on behalf of a business, together with that business (referred to below as the "Studio", "you").

1.3 The person who opens the account confirms that they are authorised to represent and bind that business. If an account is opened without authority, the individual who opened it is responsible for it.

1.4 You must be 18 or over to use the Service.

2. Definitions

We have tried to keep this simple. In this document:

• The Service: the software offered through os.didoshe.co and app.didoshe.co, and all related modules.
• Studio Data: all data the Studio enters into the Service or produces through it — including client records, appointments, staff details, sales, packages, stock, income and expense records, photographs, voice recordings and notes.
• End Client: the Studio's own client. They are the Studio's client, not DIDOSHE's.
• User: the people with access to the Studio account — the studio owner, managers and staff.
• Subscription Period: the period for which the fee is collected in advance (monthly or annual).

3. What the Service is and what it is not

3.1 DIDOSHE OS is cloud-based software for beauty salons and studios to run their day-to-day work. It is a subscription service; you are not sold a copy of the software, you are granted a right to use it.

3.2 The Service includes the following modules (which ones you get depends on your plan):

3.3 The Service is NOT the following and may not be used for these purposes:

• It is not accounting or tax software. See section 10 for detail.
• It is not a medical records system (EHR/HBYS). It is not designed for medical diagnosis, treatment decisions or patient file management.
• It is not a payment institution or a bank. No money is collected from the End Client on DIDOSHE's behalf. The payment, balance and package entries inside the Service serve to keep a record of the payments you take from your End Client through your own channels; DIDOSHE does not move the money. The Service does not collect money from your End Clients and does not provide a payment service; it only keeps a record of the collection you carry out yourself.
• It is not a backup service. See section 12.
• It is not a legal, medical or financial advice tool.

3.4 We may change the content, features and interface of the Service from time to time. If we remove a feature entirely, and that feature was expressly promised in the description of your plan, we will tell you at least 30 days before the removal date, and you can cancel your subscription before that date. If you do, the fee for the period you have prepaid and not yet used is refunded pro rata.

4. Account, users and security

4.1 You are responsible for keeping your account details accurate and up to date.

4.2 Password and access. Keeping your password confidential is your responsibility. Everything done through your account counts as done by you. Sharing one user account between several people is not allowed — every member of staff must have their own account.

4.3 The difference between the studio owner and staff. The studio owner or manager is responsible for creating staff accounts, setting their permissions, and closing access for staff who leave. DIDOSHE is not responsible for loss caused by failing to close the access of a member of staff who has left.

4.4 We recommend that you turn on two-factor authentication wherever it is offered.

4.5 DIDOSHE will never ask you for your password. If you get an email, message or call asking for your password, do not reply to it, and let us know.

4.6 If you notice unauthorised use of your account, tell us at info@didoshe.co without delay.

5. Free trial, subscription and payment

5.1 Free trial. A 30-day free trial is offered after sign-up. No credit card details are requested during the trial.

5.2 When the subscription starts. If you pick a plan and pay at the end of the trial, your subscription starts. If you do not pay, the account does not move to a paid period. In that case your data is kept for 30 days from the end of the trial and you can export it during that time; at the end of that period it is deleted.

5.3 Automatic renewal. Unless you cancel, the subscription renews automatically at the end of each period and is charged to your saved payment method. You can cancel in one click inside the app.

5.4 Payment. Payments are taken through Stripe. Your card details are not stored on DIDOSHE servers Your card details never reach DIDOSHE's infrastructure; the payment page opens on Stripe's own domain.. Stripe's own terms also apply to the payment.

5.5 Price changes. We may change the subscription fee. We will tell you the new price by email at least 30 days in advance, and it only applies from the next Subscription Period. If you do not accept the new price, you can cancel your subscription before it takes effect. If you keep paying after the notice, that counts as acceptance.

5.6 Taxes. Taxes payable under applicable law may be added to the prices shown. Your own business's tax obligations (including declaring the amounts you collect from End Clients) are yours.

5.7 If a payment fails. If a charge fails, we will let you know and try again. If payment is not completed within 7 days, we may suspend your account; your data is not deleted during suspension. If payment is not completed within 30 days, the subscription is terminated.

5.8 Refunds. Refund terms are set out in a separate document: the Refund and Cancellation Policy. That policy is an integral part of this contract.

6. What you may not do

6.1 You may not use the Service for:

• Any activity that breaks applicable law
• Uploading or sharing content that infringes third-party rights
• Attempts to disrupt or overload the Service, or to get around its security measures
• Reverse engineering, attempts to access the source code, automated data scraping
• Renting out, sub-licensing or reselling the Service as if it were your own product
• Accessing the Service in order to build a competing product
• Entering data belonging to your own End Clients into the system without their permission (section 7)

6.2 Prohibited types of business. The Service is designed for businesses providing beauty, care, hairdressing, spa and similar personal care services. It may not be used in the following areas: sale of prescription medicines, medical diagnosis and treatment services, gambling, adult services, weapons, narcotics, counterfeit goods, pyramid schemes and similar systems.

6.3 How you treat our people. Insults, threats, harassment or discriminatory language towards our support team are not acceptable. If that happens, we may end the conversation, limit the contact channels, and suspend the account if it happens again. This clause does not restrict your right to complain in writing, your data subject requests, or your legal remedies.

7. End Client data — permission is your responsibility

7.1 For the End Client data you enter into the Service, you are the data controller. For that data DIDOSHE is a data processor and acts only on your instructions. The details are set out in the Data Processing Agreement (DPA).

7.2 What that means: giving your End Client the required privacy notice, and obtaining explicit consent where it is needed, in order to collect and store their data and send them messages, is your obligation. DIDOSHE does not obtain these permissions on your behalf and assumes you have obtained them.

7.3 Special category data. Records such as allergies, skin conditions, medication taken, pregnancy, contraindication forms, and before/after photographs may count as special category personal data under KVKK m. 6 (Turkish Law No. 6698 on the Protection of Personal Data, art. 6) and GDPR art. 9. Before entering data like this into the Service, you must have obtained the explicit consent of the person concerned and be able to prove it. Administrative fines and compensation claims arising from a breach of this obligation are yours.

7.4 If you notice a record that belongs to the wrong person, you must correct it without delay.

7.5 Do not type card details into free-text fields. Writing credit card numbers, CVV codes or ID numbers into free-text fields such as client notes or appointment notes is not allowed.

8. WhatsApp and messaging

8.1 The WhatsApp reminder module sends messages on your behalf and on your instructions. In law, you are the sender of the message.

8.2 No delivery guarantee. Messages are sent through the Twilio and Meta (WhatsApp) infrastructure. Those services are not under our control. A message may fail to arrive for reasons such as:

• The End Client's number is not registered on WhatsApp, or has changed
• The End Client has blocked your business
• Meta rejects the message template or changes its category
• Quota, rate limits, quality drops or account restrictions on the Meta or Twilio side
• A telecoms outage, or the device being switched off

DIDOSHE is not responsible for any of these situations. We cannot be held liable for loss caused by an End Client not turning up because a reminder was not delivered, including lost revenue, subject to the limits in section 19 and the exceptions in section 19.3.

8.3 Permission is your responsibility. You must obtain the clear, prior permission needed to send a WhatsApp message to an End Client. The permission must cover the subject of the message and who the sender is. You must keep records of permission and be able to produce them on request.

8.4 No promotional content. DIDOSHE's reminder templates only contain information about an existing appointment. You may not add discounts, campaigns, a "book another appointment" call to action or similar promotional sentences to these templates. Adding them may turn the message into a commercial electronic message under Law No. 6563 (Turkish E-Commerce Law), and that brings obligations for İYS (Turkish Commercial Electronic Message Management System) registration, consent and the right to opt out — those obligations are yours.

8.5 Right to opt out. If an End Client says they do not want to receive messages, you must stop sending. The opt-out request must be actioned within 3 business days at the latest (Law No. 6563 (Turkish E-Commerce Law) art. 8 and İYS (Turkish Commercial Electronic Message Management System) practice). The Service gives you a way to record this When an opt-out request is received, stopping messages to that End Client is your responsibility.; keeping that record accurate and up to date is your responsibility.

8.6 If Meta or Twilio restricts or blocks your messaging account or your number, DIDOSHE is not obliged to get that decision reversed and is not responsible for any resulting loss.

8.7 The rules in this section apply in exactly the same way where reminders are sent by email. The Service currently uses only the WhatsApp and e-mail channels and does not send SMS.

9. Artificial intelligence features

9.1 The Service uses artificial intelligence in three places: reading expenses from a photo of a receipt, creating appointments by voice, and the morning voice briefing. These features are optional. You can use the whole Service without using any of them; you can do the same things by hand.

9.2 AI output can be wrong. Text, amounts, dates and other information produced by artificial intelligence should not be relied on without being checked independently. Output may be wrong, incomplete or misleading, or may not reflect the current position. The final check is always yours.

9.3 Known risks, feature by feature:

(a) Voice booking. The system can mishear what you say. It may record the wrong date, wrong time, wrong client, wrong service or wrong member of staff. A noisy room, an accent, background conversation and similar-sounding names all make mistakes more likely. You must visually check every appointment created by voice in the calendar. DIDOSHE is not responsible for double bookings, lost appointments or any resulting loss where that check was not done.

(b) Reading expenses from a photo of a receipt. The system may misread the amount, the date, the merchant or the VAT rate on the receipt. The error rate goes up with receipts that are creased, faded, only partly visible or handwritten. You must compare every record it reads against the original receipt before saving it. These records cannot be used in a tax return (section 10).

(c) Morning voice briefing. The briefing is a summary of the data in the system. It may contain information that is incomplete, summarised incorrectly or out of date. The briefing is not a decision-support tool; do not make business decisions based on the briefing — look at the underlying records.

9.4 Being told you are talking to an AI. In the voice features, the voice that greets you is produced by artificial intelligence; it is not a real person. There is no voice assistant that talks to End Clients on the public booking page. If such a feature is added, users in the European Union will be told clearly, at the start of the interaction, that they are interacting with artificial intelligence.

9.5 Your data being sent to AI providers. When you use these features, the relevant data is sent to artificial intelligence providers for processing. Which data goes where is explained in detail in the Privacy Policy. Our providers do not use this data to train models. This preference has been switched off in our account.

9.6 Health data warning. We recommend that you do not enter information about an End Client's health into the AI features. If data like this is entered, the explicit consent obligation in section 7.3 applies in full.

9.7 We may stop these features temporarily or permanently because of an outage, a quota limit or a policy change at our artificial intelligence providers.

10. Important warning about the Income and Expense module

10.1 The Income and Expense module is a simple record-keeping tool to help you follow your business's cash flow day to day.

10.2 This module is not accounting software. It does not do double-entry bookkeeping, it does not keep a chart of accounts, it does not produce statutory books, it does not calculate depreciation, and it does not carry out period-end procedures.

10.3 No output from this module may be used in a tax return, in an official filing, or in preparing financial statements. For your tax and accounting obligations you need to go to your accountant.

10.4 You are responsible for the accuracy, classification and completeness of the amounts in the module. Section 9.3(b) applies in particular to records read from a receipt by artificial intelligence.

10.5 DIDOSHE is not responsible for tax penalties, late-payment interest or similar sanctions arising from an error or omission in this module, subject to the limits in section 19 and the exceptions in section 19.3.

11. Appointment calendar and public booking page

11.1 Double bookings and lost appointments. Appointments may clash or be lost because of a software fault, a sync delay, an internet outage, user error, or several users working at the same time. You need to check the calendar regularly.

11.2 Lost profit. Lost revenue, lost profit, wasted staff time and reputational harm caused by an appointment being lost, clashing, saved at the wrong time or not reaching the End Client are not DIDOSHE's responsibility, within the limits in section 19.

11.3 Public booking page. The availability shown on the page where the End Client books their own appointment is based on the data in the system. You are responsible if a slot that is not actually free appears as available because of incorrectly set working hours, time off or resources.

11.4 The cancellation and no-show policy is yours. You decide whether to charge your End Client a cancellation fee, a deposit or a no-show fee. Making sure that policy complies with consumer law and is clearly explained to the End Client before the appointment is your obligation. DIDOSHE is not a party to that policy.

11.5 DIDOSHE is not a party to the service relationship between you and the End Client. You alone are responsible for the quality, safety and outcome of the service you provide.

12. Your data — ownership, export, backup

12.1 Studio Data belongs to you. DIDOSHE does not use this data for any purpose other than providing the Service to you, keeping it secure, fixing technical problems and meeting its legal obligations. We do not sell your data to third parties for marketing.

12.2 Exporting is your responsibility. The Service gives you tools to export your data. Taking a copy of your data into your own hands on a regular basis is your responsibility. We recommend doing this at least once a month.

12.3 Backups. We keep our own system backups Backups are taken as part of our infrastructure provider's standard backup service.. But those backups exist for our disaster recovery purposes; they are not an archiving service kept on your behalf, and they do not guarantee a restore to a particular point in time. We do not guarantee that a record you delete by mistake can be brought back.

12.4 After termination. When the subscription ends, you have 30 days to export your data. At the end of that period Studio Data is permanently deleted. Invoice and payment records are kept separately for the period required by law. For invoice and payment records this period is 10 years.

12.5 Data loss. We run the Service with reasonable care, but no cloud system is entirely free of the risk of data loss. If data is lost, our liability is limited to making reasonable efforts to reconstruct the data and to covering direct loss up to the cap in section 19.2; lost profit and lost revenue arising from data loss are excluded under section 19.1. If you have not met your export responsibility under section 12.2, that is taken into account when the loss is calculated.

13. Service continuity — no guarantee

13.1 There is no guarantee of uninterrupted operation. The Service is provided "as is" and "as available".

13.2 The Service runs on third-party infrastructure: Supabase (database), Vercel (hosting), Stripe (payments), Resend (email), Twilio and Meta (WhatsApp), Anthropic and ElevenLabs (artificial intelligence). An outage, drop in performance, policy change or service shutdown at any of these providers has a direct effect on the Service. DIDOSHE is not responsible for those outages, subject to the limits in section 19 and the exceptions in section 19.3.

13.3 We may carry out maintenance. We announce planned maintenance in advance as far as possible and try to do it outside busy hours. Urgent security patches may be applied without advance notice.

13.4 We do not give a general service level commitment or an automatic service credit for a period of downtime. For long outages, the pro-rata refund right in section 5.3 of the Refund and Cancellation Policy is reserved.

14. Beta and preview features

14.1 We may offer some features labelled "beta", "preview", "experimental" or similar.

14.2 These features are unfinished, may not work properly, may cause data loss, and may be changed or removed without notice. For beta features the disclaimer of warranties in section 18 applies even more broadly, and we are not responsible for loss arising from the use of these features, subject to the limits in section 19 and the exceptions in section 19.3.

14.3 You do not have to use beta features.

15. Intellectual property

15.1 The DIDOSHE OS software, its interface, design, brand and logo belong to DIDOSHE. This contract gives you only a non-transferable, non-exclusive right to use it for the duration of the subscription.

15.2 Studio Data and the content you upload to the Service (logo, photographs, service descriptions) belong to you. You give us permission to use it only to the extent and for the time needed to run the Service and provide it to you. That permission ends when the subscription ends and the data is deleted.

15.3 Photographs you upload. If a photograph shows an identifiable person, you must have obtained that person's permission for their image to be used. The burden of proving that permission is yours.

15.4 Feedback. We may use the suggestions and feedback you send us to improve the product, without that creating any obligation towards you.

15.5 We will ask for your separate written permission before naming you as a reference or using your logo in our marketing materials.

16. Third-party services

16.1 The Service works with the services listed in section 13.2 and with other integrations that may be added later. Those services are governed by their own terms.

16.2 If you choose to turn on a third-party integration, DIDOSHE is not responsible for how that service handles your data. In that situation your only remedy is to turn the integration off.

17. Suspension and termination

17.1 Your right to terminate. You can cancel your subscription at any time. Cancellation takes effect at the end of the current Subscription Period.

17.2 Our right to suspend. We may suspend your account for a reasonable period in the following cases:

• Non-payment (section 5.7)
• A material breach of this contract, in particular sections 6, 7 and 8
• Reasonable suspicion that your account's security has been compromised
• A technical situation that threatens the security of the Service or of other users
• A legal requirement or an order from an official authority

17.3 If we suspend your account, we will tell you and, where possible, give you time to put things right — unless security or legal reasons make that impossible.

17.4 Our right to terminate. We may terminate the contract if a material breach is not fixed within 14 days of notice, if breaches are repeated, in case of bankruptcy or liquidation, or in the case of a prohibited activity under section 6.2. If payment is not made, the specific periods in section 5.7 apply.

17.5 On termination, the data window in section 12.4 applies.

17.6 Even after the contract ends, the following sections stay in force: 12 (data), 15 (intellectual property), 18 (disclaimer of warranties), 19 (liability), 20 (indemnity), 21 (force majeure), 23 (assignment), 24 (governing law), 25 (other provisions), and any other provisions that by their nature should continue.

18. Disclaimer of warranties

18.1 The Service is provided "as is". Except where the law requires otherwise, we give no warranty of any kind, express or implied — including fitness for a particular purpose, uninterrupted operation, freedom from errors, security, or any particular result.

18.2 We do not promise that the Service will meet your business's specific needs, increase your revenue, or produce any particular result.

18.3 The information, suggestions and AI output in the Service are not a substitute for professional advice.

19. Limits on liability

19.1 We are never liable for the following losses: indirect loss, consequential loss, lost profit, lost revenue, lost business, lost clients, reputational harm, loss of anticipated savings, and wasted management time — even if we were told in advance that such losses were possible.

19.2 Overall liability cap. In any event, our total liability for all claims arising from this contract is limited to the subscription fees you actually paid us in the 12 months before the claim arose.

19.3 These limits do not apply in the following cases: our intent or gross fault, death or personal injury, fraud, and other liabilities that cannot be limited by law. (TBK m. 115 (Turkish Code of Obligations art. 115) is reserved.)

19.4 These limits apply whether the liability arises in contract, in tort, or on any other legal basis.

20. Indemnity

20.1 You agree to cover third-party claims, lawsuits, administrative fines and reasonable legal fees directed at DIDOSHE that arise from:

• Collecting or processing End Client data, or sending messages using that data, without the necessary permission
• A breach of the special category data obligation in section 7.3
• A breach of the messaging obligations in section 8 (including İYS, explicit consent and the right to opt out)
• Content you upload to the Service infringing third-party rights
• A breach of the prohibitions in section 6
• Claims arising from the service you provide to your End Client

20.2 If such a claim comes in, we will tell you without delay and coordinate the defence in a reasonable way.

21. Force majeure

We cannot be held liable if we are unable to meet our obligations for reasons outside our reasonable control — such as natural disaster, war, terrorism, epidemic, general strike, cyber attack, an order from an official authority, a general outage in the electricity or internet infrastructure, and outages at third-party infrastructure providers that are outside our control. If the situation lasts more than 30 days, either party may terminate the contract.

22. Changes

22.1 We may update these terms. We will give notice of material changes by email at least 30 days in advance.

22.2 If you do not accept a change, you can cancel your subscription before it takes effect. Continuing to use the Service after the effective date counts as acceptance.

22.3 The version in force is always published at https://os.didoshe.co/en/terms-of-service. Previous versions are kept in an archive.

23. Assignment

You may not transfer your rights under this contract without our written approval. We may transfer the contract in the case of a merger, acquisition or transfer of the business; if that happens, you will be notified.

24. Governing law and disputes

24.1 For Studios based in Türkiye: This contract is governed by Turkish law. Disputes fall under the jurisdiction of the Istanbul Central (Çağlayan) Courts and Enforcement Offices.

24.2 For Studios based in other countries: This contract is governed by the law of the State of New Jersey (USA), excluding its conflict of laws rules. Disputes fall under the jurisdiction of the New Jersey state and federal courts.

24.3 For Studios based in the European Union, rights arising from the mandatory consumer and data protection rules of their own country are reserved.

24.4 Let's talk first. Before going to court, we suggest you tell us about the dispute in writing and that we look for a solution in good faith for 30 days. This does not take away your right to go to court.

25. Other provisions

25.1 Severability. If one clause is held invalid, that does not affect the others.

25.2 Waiver. If we do not exercise a right, that does not mean we have given it up.

25.3 Entire agreement. This contract, together with its annexes (the Privacy Policy, the Cookie Policy, the Data Processing Agreement, the Refund and Cancellation Policy, the Account Deletion page), is the entire agreement between the parties.

25.4 Order of priority in case of conflict. On matters relating to the protection of personal data, the Data Processing Agreement takes priority. On all other matters the order is: Terms of Service > Refund and Cancellation Policy > other policies.

25.5 Notices. Notices to you are sent to the email address on your account. Notices to us go to info@didoshe.co.

25.6 Language. This agreement is provided in Turkish and English. If the two texts conflict, the Turkish text prevails for Studios established in Türkiye and the English text prevails for all other Studios.

26. Contact

SCARPAX LLC 311 60th St Suite #206, West New York, NJ 07093, USA Email: info@didoshe.co DIDOSHE OS does not currently have an appointed representative in Türkiye or the European Union.