Skip to content
SINAD iconSINADERP · Commerce · Accounting
PlatformProductsPricingResourcesCompany
Sign inBuild my plan
Legal Center

All legal documents in one place

Review the complete legal packet in the current site language. The documents are grouped into four clear sections so teams can find the right policy without scanning a long footer list.

This page follows the current product language automatically. Switch the site language to read the same legal packet in English, Arabic, or Turkish.

Quick sections

Terms & usePrivacy & data

Stay in the loop

Get product updates and new features

SINAD icon

SINAD

ERP · Commerce · Accounting

Sinad Core is the ERP foundation. Add Commerce, Factory, Product Specs, the AI Agent, and capacity packs as you grow.

info@larateks.com+90 (552) 636-34-00sinad.app

SINAD. Core ERP that grows with product add-ons.

Products

Sinad CoreSinad CommerceSinad FactorySinad Design (Beta)Sinad AI AgentPricingPlan Builder

Resources & Company

BlogCase studiesAboutContactSign in

Legal

Legal Center
Rights & requests
Turkey / KVKK

Full legal PDF

Download one PDF file that contains the full legal packet in the current language.

Legal contact

Use this contact point for legal notices, privacy requests, and document-related questions.

info@larateks.com+90 (552) 636-34-00sinad.app

Service operator

LARATEKS GIYIM IC VE DIS TIC. SAN. LTD. STI.

Terms & use

The main contractual rules for using the product, workspace, and related support channels.

User Agreement

Last updated: April 10, 2026

Acceptable Use Policy

Last updated: April 10, 2026

Privacy & data

How personal data is handled, what cookies are used, and how processor commitments are described.

Privacy Policy

Last updated: April 10, 2026

Full legal packet

Full legal packet / SINAD WholesaleERP

Download one PDF file that contains the full legal packet in the current language.

Last updated

Privacy Policy

April 10, 2026

SINAD WholesaleERP is provided by the service operator identified in the contact details below. This policy covers the public website, the ERP workspace, mobile experiences, onboarding, support, messaging, document sharing, and related business operations.

Controller and scope

This policy applies whenever we collect or use personal data through account creation, sign-in, support, commercial communication, WhatsApp or phone workflows, uploaded documents, image attachments, and day-to-day use of the ERP.

  • Operator: LARATEKS GIYIM IC VE DIS TIC. SAN. LTD. STI.
  • Address: OSB Mah. 23 Nolu Cad. No: 20, Kilis, Turkiye
  • E-mail: info@larateks.com
  • Phone: +90 (552) 636-34-00
  • Website: sinad.app
  • Tax office / number: Kilis V.D. / 608 107 89 21

Data we collect

We collect only the data reasonably needed to provide, secure, and improve the service.

Cookie Policy

Last updated: April 10, 2026

Data Processing Addendum

Last updated: April 10, 2026

Subprocessors

Last updated: April 10, 2026

Rights & requests

Where users can review privacy rights and the channels available for submitting requests.

Privacy Rights and Requests

Last updated: April 10, 2026

User Data Deletion Instructions

Last updated: June 6, 2026

Turkey / KVKK

Turkey-specific notices and optional explicit consent texts that apply when Turkish rules are relevant.

KVKK Clarification Text

Last updated: April 10, 2026

KVKK Explicit Consent Text

Last updated: April 10, 2026

  • Identity and account data such as name, work e-mail, role, company, password-related security events, and language or theme preferences.
  • Business records that users enter into the ERP, including customer, supplier, invoice, accounting, warehouse, notification, collection, and support data.
  • Communication data such as phone numbers, WhatsApp numbers, e-mail messages, call notes, support tickets, and message delivery status.
  • Files and media such as uploaded images, attachments, notification proofs, and shared business documents.
  • Technical and usage data such as session logs, device/browser information, IP-related security signals, cookies, local storage preferences, and diagnostics.

Why we use data

We use personal data to operate the ERP and the surrounding service relationship.

  • To authenticate users, maintain secure sessions, and enforce company security policies.
  • To create, store, print, share, and reconcile commercial and accounting records inside the platform.
  • To send operational notices, support responses, password resets, reminders, and workflow communications through approved channels.
  • To manage onboarding, demos, billing, compliance, auditing, fraud prevention, and service continuity.
  • To improve reliability, usability, and support quality through product analytics and diagnostics that are appropriate to the legal basis in use.

Legal bases and consent

Depending on the context, we process data because it is necessary to perform a contract, meet a legal obligation, protect legitimate business interests, establish or defend legal claims, or because a user has given an optional consent.

  • Operational ERP processing generally relies on contract, legal obligation, security, accounting, and legitimate-interest grounds.
  • Optional promotional communication, optional personalization, or optional analytics should rely on a separate consent where the law requires it.
  • For Turkish users, KVKK clarification and explicit consent are presented separately and are not merged into one blanket statement.

Sharing, service providers, and transfers

We may share personal data only with parties that need it for the relevant purpose and under appropriate safeguards.

  • Authorized personnel, implementation teams, and support staff acting on behalf of the operator.
  • Infrastructure and business processors such as hosting, database, authentication, e-mail, messaging, support, payment, and communication providers.
  • Professional advisers, auditors, or public authorities when disclosure is legally required or necessary to protect rights and security.
  • Corporate counterparties in a merger, acquisition, financing, or reorganization scenario, subject to lawful confidentiality and transition controls.

If a transfer outside the relevant jurisdiction requires an additional legal mechanism or explicit consent, we rely on that mechanism separately rather than assuming a general acceptance.

Retention and security

We retain data only for as long as needed for the stated purpose, the contract, support obligations, security review, and legal or accounting retention duties. We use access controls, least-privilege practices, authentication safeguards, logging, and provider-level security measures to reduce unauthorized access, misuse, or loss.

Your choices and rights

You may ask to access, correct, update, delete, restrict, or object to relevant processing where the law gives you that right. You may also withdraw any optional consent previously given. Requests can be sent to our contact channels described in the Privacy Rights page and the Turkish KVKK request flow, where applicable.

Last updated

User Agreement

April 10, 2026

These terms govern access to SINAD WholesaleERP, related support channels, demos, onboarding, and the public site provided by the service operator identified in the contact details below.

Acceptance and scope

By accessing the service, requesting a demo, signing in, or using a workspace, you agree to these terms, the privacy documents, and any commercial order form or implementation statement that applies to your account.

Accounts and access security

Users must provide accurate work information, keep credentials confidential, use only authorized accounts, and follow password, session, and access-control rules defined by the operator and the customer's workspace administrators.

Permitted use

The service may be used only for lawful business operations and approved internal or commercial workflows.

  • Do not misuse the service to upload unlawful content, malicious code, infringing material, or misleading records.
  • Do not attempt to bypass security, scrape restricted data, reverse engineer protected areas, or interfere with other customers.

Last updated

Cookie Policy

April 10, 2026

SINAD WholesaleERP uses cookies and similar local storage to keep the product secure, remember preferences, and support reliable operation across visits.

What we mean by cookies

In this policy, 'cookies' includes browser cookies, local storage, and comparable identifiers used by the site or app shell to keep sessions, language, theme, and product preferences working correctly.

Strictly necessary storage

These items are required for core service operation and security.

  • Authentication and refresh-session cookies.
  • Security-related preferences and session continuity controls.
  • Route protection, preview isolation, and safe sign-out behavior.

Functional preference storage

We use local storage or cookies to remember workspace language, theme, numbering choices, and sign-in conveniences such as the last work e-mail on the device.

Analytics and diagnostics

Last updated

Acceptable Use Policy

April 10, 2026

This policy defines prohibited and restricted uses of SINAD WholesaleERP and applies together with the User Agreement, security controls, and any order form or onboarding scope.

Business-purpose use only

The service is designed for legitimate commercial, operational, accounting, logistics, communication, and support workflows. You must use the platform only for lawful activity and only within the permissions, roles, and business scope granted to your workspace.

Prohibited content and conduct

The following uses are prohibited:

  • Uploading unlawful, infringing, deceptive, defamatory, violent, or malicious content.
  • Using the platform to distribute malware, phishing messages, spam, or unauthorized bulk communications.
  • Entering false business records, forged proofs, misleading invoices, or fraudulent financial data.
  • Attempting to bypass permissions, scrape restricted data, reverse engineer protected areas, or interfere with other tenants or users.
  • Using shared files, image uploads, attachments, e-mail, phone, or WhatsApp workflows in a manner that violates privacy, consent, employment, or commercial messaging laws.

Last updated

Data Processing Addendum

April 10, 2026

This addendum applies when a customer organization uses SINAD WholesaleERP to process personal data under the customer's instructions and data protection law requires controller-processor terms.

Roles and scope

For customer data submitted to the ERP workspace, the customer generally acts as the controller or equivalent business customer, and the operator acts as the processor or service provider for the hosted service. For account administration, billing, security logging, fraud prevention, and direct legal compliance data, the operator may act under its own independent legal obligations as described in the Privacy Policy.

Documented instructions and customer duties

We process customer data only to provide, secure, support, maintain, and improve the contracted service in line with documented customer instructions, the product configuration chosen by the customer, and mandatory legal obligations.

  • The customer remains responsible for the lawfulness, accuracy, and permitted scope of the data uploaded to the service.
  • The customer is responsible for user roles, workspace access control, notices to its own data subjects, and choosing lawful bases for its own processing and communications.

Last updated

Subprocessors

April 10, 2026

This page identifies core third-party processors or infrastructure providers that may handle personal data for the hosted service, depending on the tenant's enabled features.

Core hosted-service providers

The following providers may process limited categories of personal data on our behalf as part of the hosted service:

  • Supabase: authentication, hosted database, storage, session handling, and related platform infrastructure for workspace data and uploaded files.
  • Meta Platforms services / WhatsApp Business Platform: message transport, delivery events, and related identifiers when WhatsApp features are enabled for a tenant.
  • Stripe: subscription billing, checkout, payment event reconciliation, and related billing identifiers when external billing or checkout is enabled.

Customer-configured or optional integrations

Some tenants may enable optional channels or external business workflows that depend on customer-configured providers. Where the customer selects, controls, or connects such a provider, the customer is also responsible for validating that provider's legal suitability for its own use case and obtaining any required permissions or notices.

Last updated

KVKK Clarification Text

April 10, 2026

This clarification text is prepared under Law No. 6698 on the Protection of Personal Data and the Communique on the Procedures and Principles for Fulfilling the Obligation to Inform.

Identity of the data controller

SINAD WholesaleERP is provided by the service operator identified in the contact details below.

  • Operator: LARATEKS GIYIM IC VE DIS TIC. SAN. LTD. STI.
  • Address: OSB Mah. 23 Nolu Cad. No: 20, Kilis, Turkiye
  • E-mail: info@larateks.com
  • Phone: +90 (552) 636-34-00
  • Website: sinad.app
  • Tax office / number: Kilis V.D. / 608 107 89 21

Personal data categories and processing purposes

Your personal data may be processed to establish and manage the business relationship, operate the ERP, fulfill support and onboarding activities, maintain accounting and legal records, manage security and authorization, and deliver operational communications.

  • Identity and contact data.
  • User, role, and workspace access data.
  • Commercial, accounting, finance, warehouse, and transaction records entered into the ERP.

Last updated

KVKK Explicit Consent Text

April 10, 2026

This text covers only optional processing activities that legally require explicit consent. It is separate from the clarification obligation and is not bundled into a general blanket approval.

Voluntary and separate consent

Explicit consent must relate to a specific subject, be based on information, and be given freely. Refusing this optional consent does not prevent access to the core ERP functions needed for the contractual service.

Optional processing that may rely on consent

Where required by law, we may request explicit consent for optional processing activities such as:

  • Promotional or product-update communications by e-mail, phone, SMS, or WhatsApp.
  • Optional personalization or optional non-essential analytics.
  • Any separately disclosed optional workflow that cannot rely on another legal ground.

No blanket approval

This consent does not authorize every possible future processing activity. If a new optional activity needs consent, it should be described clearly and requested separately.

Last updated

Privacy Rights and Requests

April 10, 2026

This page explains how individuals can submit privacy-related requests, including KVKK applications where Turkish law applies.

Rights you may exercise

Subject to the applicable law and the role in which we process the data, you may request access, correction, completion, deletion, restriction, objection, portability where available, or withdrawal of optional consent.

How to submit a request

You can contact us through the operator contact channels below.

  • E-mail: info@larateks.com
  • Postal address: OSB Mah. 23 Nolu Cad. No: 20, Kilis, Turkiye
  • Commercial contact line: +90 (552) 636-34-00

What to include

To protect other users and company records, please include enough information for us to verify your identity and understand the request.

  • Your full name and the company or workspace relationship, if any.
  • The e-mail or phone number relevant to the request.

Last updated

User Data Deletion Instructions

June 6, 2026

This public page is the Data Deletion Instructions URL for Meta, Facebook, Instagram, and WhatsApp integrations connected to SINAD WholesaleERP.

Remove SINAD ERP from your Meta account

If you connected a Meta account, Facebook Page, Instagram professional account, or WhatsApp Business asset to SINAD ERP, you can revoke the connection from Meta's own account settings.

  • Open Facebook settings, then go to Settings & privacy > Settings > Apps and Websites.
  • Find the app named SINAD ERP, or the app name shown for this service, then choose Remove.
  • When Meta offers a data deletion option during removal, select it if you want Meta to notify us of the deletion request.
  • Direct signed-in path when available: https://www.facebook.com/settings?tab=applications

Request deletion from our systems

You can also send a deletion request directly to the operator contact below. To protect account security, send the request from the e-mail address or business contact associated with the workspace or Meta connection.

  • Do not use communication channels such as e-mail, phone, or WhatsApp through the platform in violation of privacy, consent, or commercial messaging rules.
  • Customer data responsibilities

    Customers remain responsible for the legality, accuracy, and authority behind the business data they upload or process through the ERP, including customer, supplier, employee, and communication records.

    • Customers must provide any notices or obtain any permissions required for the data they place in the system.
    • Customers are responsible for role assignment, account hygiene, record review, and lawful use of exports, attachments, and shared documents.
    • Where the platform processes third-party data on the customer's behalf, the customer must ensure that an appropriate legal basis exists.

    Uploads, integrations, and third-party channels

    Features that depend on external providers, such as authentication, e-mail, phone, WhatsApp, storage, or payment services, may also be subject to those providers' technical and legal requirements. Availability of such features can depend on configuration, verification, quotas, or provider policy changes.

    Commercial terms, suspension, and termination

    Subscription fees, implementation scope, support windows, and rollout commitments are defined in the commercial agreement. We may suspend or limit access where necessary to protect security, investigate misuse, enforce payment obligations, or comply with law. Termination does not erase obligations that survive by nature, including confidentiality, payment, audit, and lawful retention duties.

    Intellectual property, confidentiality, and updates

    The service, code, interface design, brand assets, and operator documentation remain the property of the operator or its licensors. Each party must protect confidential business information received from the other. We may update features, workflows, and legal documents over time; continued use after an effective update means the updated terms apply to future use.

    Where we use optional performance diagnostics or product analytics, we do so under the legal basis required for the relevant jurisdiction. For Turkish users, optional analytics or personalization should not be bundled into mandatory acceptance if consent is legally required.

    Managing storage

    You can control cookies and local storage through your browser settings. Blocking essential cookies may prevent sign-in, security validation, language retention, or reliable workspace navigation.

    Security and automation limits

    You may not test, overload, or attack the service without written authorization. Automated access, imports, API-like traffic, or external tools must stay within the supported product flows and must not degrade availability, integrity, or security for others.

    Customer responsibility for end-user data

    If you process personal data or business data belonging to customers, suppliers, employees, or contacts through the ERP, you are responsible for ensuring that your collection, notices, permissions, and communications are lawful. Where a communication channel requires opt-in, proof of consent, or channel-specific rules, you must satisfy those obligations before use.

    Enforcement

    We may investigate suspected misuse, suspend affected features, reject abusive transactions, remove unlawful content where necessary, or terminate access for serious or repeated violations. Security preservation, legal compliance, and protection of other customers take priority over uninterrupted access when abuse is suspected.

  • If the customer asks for a workflow that requires additional consent, notices, or transfer steps, the customer must ensure those prerequisites are met.
  • Confidentiality, security, and subprocessors

    Personnel acting on our behalf must be subject to confidentiality obligations. We apply role-based access controls, authentication safeguards, logging, and commercially reasonable technical and organizational measures appropriate to the service. Where we use subprocessors, they must be engaged for legitimate service purposes and bound to protect relevant data under appropriate contractual obligations.

    Assistance, incidents, and data lifecycle

    Taking into account the nature of the processing and the information available to us, we provide reasonable assistance for privacy requests, security issues, and legally required notifications that relate to the hosted service. Upon termination or valid customer instruction, customer data should be returned, exported, deleted, or placed beyond active use according to the product capabilities, retention schedule, and overriding legal obligations.

    Transfers, audits, and order of precedence

    If a transfer mechanism is required for a restricted cross-border transfer, it must be handled through the appropriate legal mechanism for that transfer. Reasonable compliance information may be provided upon legitimate request, subject to confidentiality, security, and scope limits. If a signed commercial agreement or statutory addendum imposes stricter data protection terms, that signed document controls over this public summary to the extent of the conflict.

    Scope limitation

    Not every subprocessor applies to every tenant or every user. Data shared with a provider should be limited to what is reasonably necessary for the feature being used, such as authentication, storage, billing, or WhatsApp delivery.

    Change management

    We may update this list when service architecture, billing flows, or communication channels materially change. The effective version and update date shown on this page should be used for legal reference and version tracking.

    Questions or objections

    Questions about this list may be sent to info@larateks.com. Contractual customers who require a stricter signed processor schedule should address that requirement through their commercial onboarding or data-processing addendum workflow.

  • Support, communication, ticket, and delivery records, including e-mail, phone, and WhatsApp contact details where used.
  • Technical logs, session data, cookies, device signals, and security events.
  • Uploaded files, images, attachments, and document proofs.
  • Recipients and transfer purposes

    Your personal data may be transferred, limited to the relevant purpose, to authorized personnel, technology and infrastructure suppliers, communication and support providers, professional advisers, auditors, and legally authorized public institutions or authorities.

    Where an international transfer requires an additional mechanism under applicable law, that mechanism is handled separately and is not assumed from this clarification alone.

    Collection method and legal reasons

    Personal data may be collected through website forms, sign-in screens, cookies and local storage, support requests, direct communications, document uploads, onboarding channels, integrations, and records entered by authorized users into the ERP.

    • Necessity for the establishment or performance of a contract.
    • Fulfillment of legal obligations in accounting, tax, audit, security, or similar fields.
    • Data processing made necessary for the establishment, exercise, or protection of a right.
    • Legitimate interests of the data controller, provided fundamental rights and freedoms are not harmed.
    • Explicit consent only where the law requires a separate optional consent.

    Retention and security

    Data is retained for the duration required by the processing purpose, contract, support needs, and legal retention obligations. Access is restricted according to role and need-to-know principles, with technical and organizational measures designed to support confidentiality, integrity, and availability.

    Rights under Article 11 and application methods

    Under KVKK, you may learn whether your data is processed, request information about the processing, learn the purpose and whether it is used accordingly, know third parties to whom it is transferred, request correction, request deletion or destruction where legal conditions are met, request notification of those actions to third parties, object to an adverse result arising from automated analysis, and request compensation where you suffer damage due to unlawful processing.

    Applications regarding these rights can be sent to info@larateks.com or by post to OSB Mah. 23 Nolu Cad. No: 20, Kilis, Turkiye. Detailed steps are described in the Privacy Rights page.

    Withdrawal of consent

    You may withdraw an optional consent at any time with future effect. Once withdrawal reaches the operator, the processing that depended only on that consent should stop for future activities to the extent required by law.

    Contact and records

    Questions or withdrawal requests can be sent to info@larateks.com. We may keep the minimum record needed to demonstrate that a consent was given, updated, or withdrawn.

  • A clear description of what you want us to do.
  • Any supporting details that help us locate the right records.
  • Response handling

    We review each request according to the applicable legal framework, the role in which the data is processed, and any security or accounting obligations that require retention. We may ask for additional information before completing the request and respond within the legally applicable period.

    Turkish KVKK pathway

    For requests under Turkish law, the data subject should first apply to the data controller. If the statutory conditions are met after that application stage, the person may then use the complaint mechanisms available before the Personal Data Protection Authority.

  • E-mail: info@larateks.com
  • Suggested subject: Meta data deletion request
  • Include your full name, company or workspace name, connected Page or Instagram account name if known, and the e-mail or phone number related to the request.
  • What we delete

    After verification, we delete or disconnect personal data that we hold because of the Meta connection, unless a legal, security, accounting, or dispute-retention obligation requires a limited record to remain.

    • Meta user identifiers, Page identifiers, Instagram professional account identifiers, WhatsApp Business identifiers, and connection metadata linked to the request.
    • Access tokens or token references used to operate the connected channel.
    • Message-routing configuration and webhook subscription records that are no longer needed after disconnecting the channel.
    • Support notes or onboarding records that are no longer required for the active service relationship.

    Business records entered by a customer workspace, such as invoices, customer ledgers, accounting entries, or messages controlled by that customer, may require a workspace-owner or company-level request and may be retained where law requires it.

    Timing and confirmation

    We review deletion requests according to the applicable legal framework and the role in which we process the data. We may ask for additional verification before deleting or disconnecting records. Once the request is completed, we confirm the result through the contact channel used for the request.

    Important limitation

    Removing SINAD ERP from Meta disconnects our app from your Meta account. It does not delete data that Meta keeps under its own policies, and it does not automatically delete records controlled by a separate customer company inside SINAD ERP. For those records, contact the relevant workspace owner or submit a company-level privacy request using the channels above.