← Back to home

Annex D: Acceptable Use and Security Rules

Last updated: 8 November 2026 · Version 2026.11

This English version is provided for convenience. In case of any discrepancy between the English and Turkish versions, the Turkish version prevails.

This text is Annex D to the Unisentra Software Service (SaaS) Subscription and Use Agreement. For new subscriptions it takes effect on the date the Agreement is accepted; for existing subscriptions it takes effect 30 days after the notice given under Article 21.2 of the Agreement.

This Annex forms an integral part of the Unisentra Software Service (SaaS) Subscription and Use Agreement (the "Agreement") concluded between the Parties, pursuant to Articles 5 and 9 of the Agreement. The Customer shall communicate these rules to its users; under Article 13.7 of the Agreement the Customer is responsible for any conduct of its users contrary to these rules.

D.1 Accounts and Access

• Each user account belongs to a single natural person. Sharing accounts and using shared accounts (for example "warehouse", "till2") is prohibited. The Provider technically limits the simultaneous use of the same account from different devices (one desktop and one mobile session).
• Two-factor authentication is mandatory for accounts with administrator rights. The Customer may make two-factor authentication mandatory for all users through the security policy setting in the Software.
• The account of personnel who leave is deactivated on the same day; permissions are granted at the minimum level required by the user's role.
• Passwords are not shared and are not kept in writing. A user who receives a suspicious login notification changes their password immediately and informs the Customer's administrator.
• API keys and the credentials of integrators and marketplaces are entered only by an authorised administrator; the Software stores this information in encrypted form and does not display it on screen.

D.2 Prohibited Use

The Customer and its users may not use the Software to:

• carry out transactions contrary to the law, public order or the rights of third parties, or issue false or misleading documents;
• spread malicious software, attempt unauthorised access, search for security vulnerabilities (except tests permitted under Article 19.3 of the Agreement), exceed session or request limits, or collect data by automated means;
• copy the Software, reverse engineer it, attempt to access its source code or examine it in order to develop a similar product;
• rent the Software to third parties, offer it as a service bureau or grant sub-licences;
• place an unreasonable load on the infrastructure of the Provider or of other customers (bulk data transfers are carried out with the tools provided by the Provider);
• use the Provider's trademarks and logos without permission;
• carry out transactions contrary to the agreements and policies of connected marketplaces; create fake orders, fake ratings or reviews, or send buyers products they did not order ("brushing");
• list or sell products that infringe intellectual property rights, or use the Software for that purpose;
• use buyer personal data received from marketplaces for anything other than invoicing, delivery and returns, process it for marketing or transfer it to third parties.

D.3 Electronic Messages and Notifications

• The e-mail, WhatsApp and Telegram notification functions of the Software operate with the Customer's own accounts. When sending commercial electronic messages to recipients, the Customer itself fulfils its obligations under Law No. 6563 on the Regulation of Electronic Commerce and in relation to the Message Management System (İYS) (obtaining consent, honouring the right to refuse).
• Bulk messages are sent only to the Customer's opted-in recipient lists. In the event of a complaint about unsolicited messages, the Provider may suspend the relevant function.

D.4 External System Connections

• Marketplace, bank, carrier, payment and e-document connections are set up under the Customer's own agreements and authorisations. Functions that write data to these systems (sending stock and prices, automatic pricing, automatic invoicing and similar) are switched off by default; the Customer is responsible for the consequences of enabling them.
• The Customer complies with the terms of use of external systems. The Provider is not responsible for the outages, data errors or policy changes of these systems.

D.5 Content and Data

• The Customer is responsible for ensuring that the files and images it uploads comply with copyright and personality rights.
• The reasonable use limit of the file storage for each Customer Environment is 20 (twenty) GB. If this limit is exceeded, additional storage is offered under the Provider's tariff in force.
• The Customer agrees not to upload real personal data to trial and demonstration environments.

D.6 Security Incidents and Notification

If it is suspected that a user account has been compromised, that unusual transactions have been carried out or that data has been lost, the Customer's administrator reports the situation to the Provider through the Support screen as Priority 1 (Critical). Where it deems necessary, the Provider may temporarily lock the relevant account.

D.7 Provider's Rights in the Event of a Breach

In the event of a breach of this Annex, the Provider may suspend the relevant user or function, require the Customer to remedy the breach and, in the event of a serious or continuing breach, terminate the Agreement under Article 16.2. Unless there is a security or legal necessity, the Customer is informed before suspension.

If a breach of the agreements or policies of a connected marketplace is suspected, the Provider may suspend the relevant marketplace connection and, where required by the developer agreement between the Provider and that marketplace, report the matter to that marketplace.

D.8 Amendments

This Annex may be updated in accordance with Article 21.2 of the Agreement.