Acceptable Use Policy

Version: v1 — last updated: 2026-04-25.

⚠ English translation in preparation. This is an unofficial reference translation of the canonical Turkish Kabul Edilebilir Kullanım Politikası. In case of conflict, the Turkish version is authoritative and binding. A reviewed translation will replace this notice.

The following rules apply when using Hoca. Violation can result in account suspension, content deletion, and where necessary legal action.

Prohibited content

• Unauthorized processing of copyrighted material — someone else's book, lecture notes, article, slides, or video without rights
• Child sexual abuse material (CSAM) — zero tolerance; reported directly to authorities
• Terrorist propaganda, incitement to violence, hate speech
• Fraud, identity theft, deep-fake content — particularly voice cloning to imitate someone else's voice
• Personal data disclosure — PDFs containing medical/financial/biometric data of others without consent
• Spam, malware, phishing — distributing Hoca outputs maliciously

Prohibited usage patterns

• Multi-tenant ToS violation: attempting to use the operator's local claude -p subscription in hosted Hoca without BYOK. (Already blocked by MULTI_TENANT=1; bypass attempts result in account closure.)
• Building services: using Hoca as the backend of your own service and reselling to third parties.
• Quota evasion: automated /auth/register loops, multi-account creation, rate-limit bypass attempts.
• Credit abuse: demo mode / zero-balance exploits; gross misuse of the free tier.

Voice clone specific rules

Voice clone technology is high-risk; special rules apply:

1. Only your own voice or that of a person from whom you have explicit consent. "Explicit consent" means the person knows that their voice will be cloned in Hoca and approves in writing.
2. No celebrity impersonation — unauthorized cloning of politicians, journalists, artists is prohibited, even as parody.
3. The same sha256 across multiple accounts is auto-flagged (shown with a badge in the admin panel); the admin has disable authority.
4. Unauthorized voice use for erotic / demeaning content results in immediate ban + DMCA-like procedure.

Automated abuse protection

• Same PDF hash (future) across multiple accounts → admin warning
• Voice sha256 dedup — dup_user_count > 1 → potential copyright warning badge
• Rate-limit — slowapi 5–30/min
• Subprocess timeout — jobs exceeding 1 hour are killed (JOB_TIMEOUT_SECONDS)
• Credit quotas — race-free atomic UPDATE (negative balance is impossible)

Consequences of violation

Complaint channels

• DMCA / takedown: /legal/takedown form
• General violation complaint: abuse@hoca.example.com
• Account suspension appeal: appeals@hoca.example.com