# Legal documents and acceptance

> Where the Terms, Privacy policy, Acceptable use policy and DPA live, how each new version is announced, what you accept and when, and what we keep.

The legal documents that apply to your use of Zefily are published on the site, in English and Turkish. Each document is versioned: the page always shows the version in force, and a **Version history** lists every earlier version with its date and a short summary of what changed. Older versions stay readable at their own address, so you can see what applied at any date.

The documents are the [Terms of service](/terms), the [Privacy policy](/privacy), the [Acceptable use policy](/acceptable-use) and the [Data processing agreement](/dpa). Turkish pages have the same content under their Turkish addresses.

## Accepting at sign-up

The sign-up form asks you to accept the Terms of service and the Privacy policy. Zefily records which version you accepted, when, the language of the page you read and a keyed hash of the address you signed up from. The address itself is not stored with the record.

## When a document changes

Every new version is announced to the owners of each organization by e-mail. Changes are of two kinds:

- **Other changes** (wording, examples, corrections that do not alter your rights or duties) take effect when published and need no action from you. Owners are told.
- **Material changes** (new obligations, changed rights, a different way your data is used) take effect after a notice period that Zefily sets, 30 days by default. Owners are told when the change is published, so they have the whole period to read it.

When a material change takes effect, the panel asks each signed-in person to read the new version and accept it before the panel opens. Signing out is always possible from that page. Until a person accepts, they cannot use the panel.

## API tokens while a change is pending

API tokens keep working after a material change takes effect. Until the token's owner accepts the new version, every response carries a deprecation signal:

- `Deprecation` with the date the requirement took effect (RFC 9745),
- `Link: <…>; rel="deprecation"`, pointing to the page where the owner accepts,
- `X-Legal-Acceptance-Required` with the documents that wait for acceptance.

Nothing is refused. Once the owner accepts in the panel, the headers stop.

## What we keep

- The text of every version, in both languages, for as long as the service runs (it is public).
- For each acceptance: the account, the document and version number, the language, the time and a keyed hash of the IP address. Nothing else.
- Acceptances are deleted with the account. Staff see counts per version, and can export one version's acceptances as a CSV with the account id, version, language, time and hash, never a name or address.

## Changes to this page

When Zefily publishes a new version, the change summary appears on the document page and in the owners' e-mail, and the version history keeps it.

---
Source: https://zefily.com/docs/legal-documents