Card Storage and Automatic Payment Authorization

1. Parties

The Company: the seller and merchant that provides the Riseluc service and starts renewal payments. The Company's legal name, address, tax, MERSİS and contact details are given at the start of this section.

iyzico: İyzi Ödeme ve Elektronik Para Hizmetleri A.Ş., an electronic money institution licensed under Turkish Law No. 6493. It stores the card and processes the payment.

Cardholder (you): the owner of the card or a person using it with the owner's permission.

This authorization is the written consent you give for the collection of periodic payments under Article 23 of Law No. 5464 on Bank Cards and Credit Cards and Article 25(1) of the Regulation on Bank Cards and Credit Cards. It is an annex to the Distance Service Sales Agreement and prevails on charges to the saved card.

• Distance Service Sales Agreement

2. Who stores which information

The Company uses information about your card only to process payments and to show it to you on the Plan page; it does not sell it, does not use it for advertising or marketing, and does not share it with any third party other than iyzico. The infrastructure provider that hosts the Company's database is listed in the Subprocessor List.

• Card number, expiry date and cardholder name: stored by iyzico. The Company does not see or store them.
• Security code (CVC): not kept in card storage. The Company does not see or store it.
• Card keys generated by iyzico (card user key and card token): stored by the Company encrypted with AES-256-GCM, never written to any record, log or alert message, and used only to start payments and to delete the card.
• Last four digits of the card, card network (for example Visa, Mastercard), card type, issuing bank, expiry month and year: stored by iyzico and the Company. The Company shows them on the Plan page as “•••• 1234”.

• Subprocessor List

3. When the card is saved

3.1. Your card is saved, and automatic renewal is turned on, in iyzico's payment form with 3D Secure verification for these payments: buying a plan, the “Extend” payment on the Plan page, and the payment for moving a subscription from the previous payment provider to Riseluc. When you change your card, the new card replaces the old one through a verification payment of 1 TRY (1 US dollar for payments in US dollars); for this, you accept this authorization again with a separate checkbox before the payment form opens.

3.2. In a payment that does not save the card, even if you save your card in the iyzico form, a card not linked to automatic renewal is deleted at iyzico by the Company.

3.3. If the card cannot be saved in the payment form (iyzico does not return a card key), your payment is valid but automatic renewal is not turned on; your plan ends at the end of the period you have paid for and we remind you by email beforehand.

3.4. In the following payments the card is not saved and automatic renewal is not turned on; we remind you by email before the plan period ends:

• Add-on pack purchases.
• Payments whose next renewal is annual in US dollars.
• Payments whose renewal amount is 30,000 TRY or more (such an amount is not charged without 3D Secure).
• Payments placed under review or whose amount does not match the order summary.
• A plan upgrade difference paid through the payment form.

4. Which charges this authorization covers

The Company makes only the following charges to your saved card and no other charge. A downgrade or a switch from annual to monthly billing applies from the next renewal and does not create a refund.

• Renewal. When: when the paid period (monthly or annual) ends, at the start of the new period. Amount: the Pricing page price on that day with any discount granted to you; VAT included for Turkish lira. The amount and date of the first renewal are shown in the order summary.
• Collection retry. When: on days 1, 3, 7 and 14 after a failed renewal, and when you update your card. Amount: the price of the period that could not be charged.
• Plan upgrade difference. When: only when you accept the upgrade on the Plan page with a separate approval. Amount: the difference shown on the confirmation screen.
• Card verification. When: when you change your card; the new card is entered in iyzico's payment form. Amount: 1 TRY (1 US dollar for payments in US dollars); cancelled or refunded right away.

5. Notifications

5.1. When the payment is approved, a copy of the order summary, the Pre-Contract Information Form, the Distance Service Sales Agreement and the Cancellation, Refund and Subscription Renewal Policy is sent to your email address. This authorization can always be read on this page; the date of the text version you accepted is kept in the consent record.

5.2. For annual subscriptions, a reminder with the amount and date is sent 14 days before the renewal.

5.3. A change in price or terms is announced by email and in the dashboard at least 30 days in advance and applies from the first renewal after the notice. If you cancel before that renewal, the new amount is not charged.

5.4. After each successful charge, a payment email showing the amount, the card and the iyzico payment number is sent; its link opens the Plan page, where you can turn off automatic renewal. The invoice is sent separately by email and appears on the Plan page. If a charge is declined, you are informed by email the same day.

6. 3D Secure and debit cards

6.1. The first payment in which the card is saved and the card change payment are verified with 3D Secure. Renewals, plan upgrade differences and collection retries are charged without 3D Secure on the basis of this authorization.

6.2. Some banks may decline a charge made without 3D Secure, especially on debit cards. If your card requires 3D Secure for every payment, there is no automatic retry; you will be asked to update your card.

7. If a charge is declined

7.1. You are informed by email the same day and the charge is retried on the days in section 4. For some decline reasons (for example, if the card has expired or is closed to online purchases) there is no automatic retry; you are expected to update your card.

7.2. Your paid access stays open for 3 days from the end of the period and then pauses until the payment goes through. Your data is not deleted. If the retry on day 14 also fails, the subscription is cancelled and your account returns to the free plan.

7.3. During this time you can update your card on the Plan page; the open payment is retried with the new card right away.

7.4. If a charge cannot be made for a reason on the Company's side (for example, a technical outage), your access is kept open; if this lasts 14 days, automatic renewal turns off, your plan ends and you are informed by email.

8. Changing or removing the card and withdrawing the authorization

8.1. You can change or remove your card on the Plan page at any time. When you remove it, the card is deleted at iyzico, automatic renewal turns off and your paid access continues until the end of the period you have paid for.

8.2. You can also withdraw the authorization by writing to info@riseluc.com; when your request is processed, automatic renewal is turned off. Withdrawal applies only to future charges. The fastest way is the “Turn off auto-renewal” or “Remove card” option on the Plan page.

8.3. While a charge is pending or under review, the card cannot be removed; you can remove it once the charge is settled.

8.4. When you cancel the subscription (“Turn off auto-renewal”), the card stays stored at iyzico, so you can continue the subscription before the period ends without filling in a new payment form. If you want the card deleted, use “Remove card”. When your account is deleted, the card is also deleted at iyzico.

8.5. When the payment for a current or not yet started period is refunded in full, or a chargeback is decided against the Company, automatic renewal turns off on its own.

8.6. The Company's record of a removed card (last four digits, card type, bank and the encrypted keys, which can no longer be used) is marked as closed and is never used for a charge again; this record is deleted when your account is deleted.

9. Authorized use of the card

You declare that the card belongs to you or that you use it with the cardholder's permission. If your card is stolen or lost, tell your bank and info@riseluc.com straight away. iyzico may place a charge to the saved card under review on suspicion of fraud; while the review is ongoing, the period is not extended but your access is not cut off.

10. Records and personal data

10.1. The Company keeps the record of your consent at checkout (date and time, text version, order summary, IP address and browser information) as evidence of the contract. The IP address and browser information are deleted 540 days after the consent or 12 months after your account is deleted, whichever comes first. The record may be provided to your bank and to iyzico in a dispute or chargeback review; you can also ask for a copy.

10.2. Card keys and card details are processed on the legal basis of the formation and performance of a contract (Law No. 6698 on the Protection of Personal Data, Art. 5(2)(c)). Details are in the KVKK Privacy Notice; iyzico's processing is covered by iyzico's privacy policy.

• KVKK (Turkish GDPR) Privacy Notice
• iyzico privacy policy

11. Consent

This authorization is formed when you tick the separate card storage and automatic payment checkbox at checkout and complete the payment in iyzico's payment form. In a payment that saves the card and when you change your card, the payment form does not open until this box is ticked.

At checkout, the box is shown together with the seller's legal name, the amount charged today, and the renewal amount, interval and date. You can withdraw this authorization at any time in the ways set out in section 8.

• Pre-Contract Information Form
• Cancellation, Refund and Subscription Renewal Policy