Supplier terms of use. Your documents are yours; you choose who sees them.

1.1. These terms are between your company, which supplies raw materials, packaging or similar products (Supplier, "you"), and Wennes Biyoteknoloji Limited Şirketi (Unique Alphabet®, "we"; identification details in the Privacy notice and on the Contact page). The person who signs in to Raw Portal or uploads a document represents that they are authorised to act for the company.

1.2. A Customer is a company that uses the platform under the Terms of use. The Terms of use are between the Customer and us; you are not a party to them. These terms are separate and specific to you.

1.3. Definitions: Request — a document a Customer asks you for about a specific product of yours (SDS, TDS, CoA, allergen statement, IFRA certificate and similar). RawLink — the link to a request that reaches you by email. Document — a file you upload to Raw Portal and the information in it. Raw Portal — the supplier portal at portal.uniquealphabet.com, which you sign in to with your email address and which shows the requests you have received and your Document Library. Document Library — the place where you upload documents independently of requests and link them to your raw materials. Tier — the setting that decides who can see a document (§04). Network — Customers on the platform that use the same raw material but have not sent you a request directly. Sharing — sending your documents from Raw Portal to your own customers who do not use Unique Alphabet® (§10A).

1.4. These terms govern your use of the platform as a supplier only. If you come as a company that contract-manufactures a brand's product, a separate text applies to that role (Contract Manufacturing and Brand Access Terms). A company using both roles accepts both texts separately.

1.5. The platform is offered to businesses. Your company accepts these terms for its commercial activity and represents that it does not do so as a consumer within the meaning of Turkish Law No. 6502.

2.1. You sign in to Raw Portal not with a password but with a single-use sign-in link we send to your email address. The link is valid for 15 minutes and can be used once; once opened, a session of at most 90 days starts on that device.

2.2. The session lasts until you sign out, close it from the session list in Raw Portal, 90 days pass, or we end it for security reasons. You can see your open sessions in Raw Portal and close them one by one.

2.3. Your identity is your email address. Anyone with access to that address can sign in to Raw Portal, so the security of the address and its inbox is your responsibility. If you use a shared mailbox (e.g. info@ or quality@), anyone with access to it can act for your company; do not pass the sign-in link or the session on to anyone else.

2.4. Every action taken through Raw Portal or a RawLink is deemed to be taken on behalf of your company. If you think there has been unauthorised access, close your sessions and write to dev@uniquealphabet.com straight away; we will close your sessions and, if needed, stop sending new links to the address.

2.5. The RawLink in a Customer's request email takes you to that request in Raw Portal without a password: the link works once and only for the address the request was sent to (the same trust as §2.1). Documents are uploaded only in Raw Portal; we do not process or keep documents you attach to a reply to the request email, and we send you a short reply with a Raw Portal link.

2.6. You can sign up yourself. You do not need a Customer request to use Raw Portal: you enter an email address on your company's domain on the sign-in page, and your account opens when you open the link we send. New accounts cannot be opened with addresses at free email providers (Gmail, Outlook, Yandex and similar); signing in with an address that has received a Customer request is not affected. On your first sign-in you enter your company name; you represent that the company name and the address belong to your company (§1.1).

3.1. When a Customer asks you for a document, the request reaches you by email and appears in the Requested list in Raw Portal. You decide which document to send to which request; sending a document to a request means delivering a copy of it to that Customer.

3.2. You can upload your documents to the Document Library independently of requests, one by one or in bulk. We accept PDF files only. For each document we suggest its type, the raw material of yours it belongs to and its version (§08); you confirm or correct the suggestion. We do not read the values inside the document or write them anywhere ourselves: we store the document and pass it on according to the tier you choose. A confirmed document is linked to your raw material and lets you answer open requests for that raw material with one click.

3.3. Who sees a document in the Library depends on its tier (§04). A document in the "Requesting customers only" tier is not visible to any Customer until you send it to a request.

3.4. You are not obliged to respond to a request. What is requested and whether the document is needed are matters of the commercial relationship between you and the Customer; we are not a party to that relationship.

3.5. You accept these terms on your first sign-in or your first upload through a RawLink. The acceptance record holds the version of the text, the time, the email address and a digest of the IP address.

3.6. Auto-send when a request comes in. You can turn this setting on for a document in the Library or for all your current documents; it is off by default. When it is on and a Customer asks for that document, we send it to that request without waiting for your separate approval: turning the setting on means giving your sending decision under §3.1 in advance. We send only on an exact match: the raw material in the request is the raw material of yours the document is linked to; the type is requested and not yet received; you have one current document of that type; and the document has no validity or detail warning. Whenever we cannot be sure, we do not send the document; it waits for your approval. We notify you of every automatic send by email and in Raw Portal. You can turn the setting off at any time with one click; turning it off works going forward, and copies already sent stay with the Customer under §11.2. Turning the setting on and off is recorded. While your account is suspended (§14), no automatic sending takes place.

4.1. Every document has a tier:

• Shared in the network: the document can be found by all Customers on the platform that use the same raw material, and they can use it in their own product files. Personal details are hidden as described in §07.4.
• Requesting customers only: the document is delivered only to the Customers of the requests you send it to. No other Customer sees the document or that it exists.
• Count only: the document is not shown to any Customer; it is used, without its content being opened to anyone, only in our functions that match raw materials and count how many companies in the network use your product.

4.2. The default tier depends on the document type:

• SDS (safety data sheet) and TDS (technical data sheet): "Shared in the network". These are commercial documents prepared to be given to everyone who buys your product; providing an SDS to recipients is already required by law (EU Regulation 1907/2008 REACH Article 31 and its Turkish counterpart).
• CoA (certificate of analysis), IFRA certificate, allergen statement and other documents specific to a lot or to a particular customer: "Requesting customers only".
• A document whose type cannot be determined: "Requesting customers only".

4.3. The default is a suggestion; the final choice is yours. You see the tier for each document when uploading and can change it before you confirm; you can also change it later with one click from the document's row. If an SDS or TDS contains information you want only your own customers to see (e.g. a composition percentage), move it to "Requesting customers only". A change applies from that moment on (§11.2).

4.4. A document in the "Shared in the network" tier does not appear in the network until our team has matched and approved it as belonging to your raw material. The "verified" label in the network describes that match; it does not mean that we have verified that the document's content is correct, current or compliant (§07).

4.5. The network tier depends on your acceptance of the current version of these terms. If the terms change, until you accept the new version the default for documents you newly upload is "Requesting customers only" and no new network sharing opens; documents you previously opened to the network stay under the version you accepted (§15).

4.6. Network sharing is part of the value the platform offers its Customers: Customers can find the current document for a raw material without sending you a separate request each time, and you upload the same document only once.

5.1. You see the name of the Customer that sends you a request; the request comes in that Customer's name. The "Companies using it" information in the Document Library lists only the companies that sent you a request and received the document through it.

5.2. You do not see the name of a Customer that uses your document through the network. You can see how many companies use it; if that number is below 5, "more than one" is shown instead of the exact count, and at 5 or above the exact count is shown.

5.3. You never see a Customer's formula, product names, or the percentage or product in which it uses your product. That information belongs to the Customer; showing it to you would breach our agreement with the Customer.

5.4. Customers in the network see that the document belongs to your company (your company name); they do not see who the other Customers seeing your document in the network are.

6.1. Your documents and the information in them are yours. You give us only the right to store them, show them according to the tier you choose, deliver them to requests and to Sharing recipients, and carry out the operations described in these terms. We do not use them for anything else, including training AI models.

6.2. When a document is delivered to a requesting Customer, to the network or to a Sharing recipient, the recipient sees it as you uploaded it. You decide, through the tier and through the choice of document, which document and to whom you show information you consider a trade secret, such as composition percentages, purity values or manufacturing information. Because the default for SDSs and TDSs is "Shared in the network", change the tier when uploading an SDS or TDS that contains such information (§4.3). If you do not want any Customer to see a piece of information, keep the document containing it in the "Count only" tier or upload a document that does not contain it.

6.3. To protect your trade secrets: a document in the "Requesting customers only" tier goes only to the Customers you send it to; only documents in the "Shared in the network" tier go to Customers in the network; no Customer's formula is shown to you or to other Customers; access is logged. If you think a document has reached someone against your choice, write to dev@uniquealphabet.com; we will investigate and tell you the outcome.

6.4. The requests a Customer sends you, its product names and its company details are the Customer's commercial information. You use them only to respond to the request.

7.1. When uploading a document and confirming its tier, you represent that: the document relates to your own product or a product you sell; you are authorised to share it in that tier and to send it through Sharing; and this does not infringe the confidentiality or intellectual property rights of a manufacturer, distributor or other third party. If you distribute another manufacturer's document (as a distributor), you also represent that you have that manufacturer's permission.

7.2. You are responsible for the document being correct, current and valid. If a document is out of date or wrong, upload a new one and remove the old one; a Customer may send you a renewal request for a document whose validity date has passed (§10).

7.3. We do not review, verify or approve the content of documents. The Customer receiving a document decides itself whether to use it in its product file, and bears the consequences of that use.

7.4. You inform your employee whose name, email, telephone number or signature appears on the document (quality officer, the competent person responsible for the SDS, technical contact, etc.) about this processing. Do not put unnecessary personal data in a document. In a document shown in the network, the person's role ("Quality Officer") replaces their name, your corporate mailbox (if any) replaces a personal email address, the signature image is not shown and a note "signed original available" is added. This masking cannot be turned off. To a Customer that sent you a request directly, and to your own Sharing recipients, we deliver the document as you uploaded it.

7.5. If these representations are untrue, you are liable for the resulting damage under the general rules of law.

8.1. To identify a document you upload, we look only at the file name and the text of the first page, and suggest its document type, raw material and version to you. We do not read, extract or write into any calculation the values inside the document (composition, allergens, IFRA limits and similar).

8.2. The suggestion is shown only to you: it is not saved until you confirm or correct it, and it does not go to any Customer. If the suggestion is wrong, correcting it is in your hands; your document always prevails.

8.3. If the file name and text are not enough to identify a document, we may send the text of the first page to our AI provider (Anthropic, PBC, USA) for a short classification. The provider does not train models on this data and deletes it within 30 days at the latest. As of 7 November 2026, the standard contract and notification to the Turkish Data Protection Board required by Article 9 of the Turkish data protection law (KVKK) for this transfer have not been completed; a written request has been made to the provider. If you do not want this, write to dev@uniquealphabet.com; we switch it off for your documents and suggestions are then made from the file name only.

9.1. Who is responsible for the personal data in documents (your employee's name, email, signature) depends on where the document sits:

9.2. Processing on your behalf. We process documents in the Document Library and your Sharing recipients' addresses only on your instructions: storing, displaying, classification suggestions (§08), delivering to the requests, tier and recipients you choose, and deleting. The provisions of the Data Processing Agreement on confidentiality and staff (§4), security measures (§5), breach notification (§7) and sub-processors and Annex A (§8) apply to this data towards you as well, reading "Supplier" for "Customer". The data is stored in Türkiye (Istanbul); it may go abroad only for the first-page classification in §8.3.

9.3. Joint responsibility in the network. Because we decide, through our own matching function, which Customers in the network your document is shown to, we are joint controllers for that operation (KVKK Article 3; Turkish Data Protection Board principle decision 2021/1303). We also run the network function for our own purpose, as part of the service we offer the platform's Customers; the "instructions only" rule in §9.2 therefore does not apply to this processing. We share responsibilities as follows:

• You take on: the document's tier (leaving the default unchanged is also a choice); informing your employee named in the document no later than when it is opened to the network (Turkish Communiqué on the Duty to Inform, Article 6); not putting unnecessary personal data in the document; updating the document when your employee leaves or the information changes.
• We take on: the matching; the masking in §07.4; showing the document only to Customers that use the same raw material; security; describing this processing in our own Privacy notice; answering requests concerning the network function.
• Legal basis: for the minimal data shown in the network (role, corporate mailbox), KVKK Article 5(2)(f); for individuals in the EU or the UK, GDPR Article 6(1)(f) — the legitimate interest of you, the Customers and us in identifying the source of a document in the supply chain.
• Requests: the individual named in the document may apply to either of us. Forward a request you receive about the network function to hello@uniquealphabet.com within 5 business days at the latest; we forward to you, within the same time, a request we receive that needs your decision. Requests are answered within 30 days (KVKK Article 13).
• We provide the essence of this arrangement to the individual on request.

9.4. For Suppliers and their employees in the EU or the UK, this section is written to meet the processor (Article 28) and joint controller (Article 26) provisions of the GDPR and UK GDPR. Personal data is processed in Türkiye; for transfers from the EU to Türkiye, the standard contractual clauses in Data Processing Agreement §9.5 also apply towards you for the data we process on your behalf.

10.1. We send you the following emails: a Customer's request; reminders on that Customer's behalf for an unanswered request; a Customer's renewal request for a document whose validity date has passed or is about to; if you use Raw Portal, a digest of pending requests; automatic sending notices (§3.6); sign-in links and security notices.

10.2. These are transactional messages and contain no promotion. Reminders stop automatically when the request is completed or the Customer closes it. If you do not want reminders for a particular request, tell the Customer that sent it.

10.3. Unless you give separate consent in Raw Portal with an unticked box, we do not send you Unique Alphabet® promotional messages. If you have consented, you can unsubscribe free of charge through the link in every message.

10.4. We use the contact details (name, email) a Customer entered about you only to deliver that Customer's requests to you.

10A.1. What: you can send documents in your Library from Raw Portal to your own customers and business contacts who do not use Unique Alphabet®: an access email goes to the recipient's address, or you forward a link you copy with your own email. The recipient downloads the documents you selected from the page behind the link.

10A.2. Who can send: any Supplier that has verified its Raw Portal account through the email link and accepted these terms; you do not need to have come through a Customer request (§2.6).

10A.3. Sender identity: the email is sent from raw.uniquealphabet.com, separate from the platform's emails, with the sender name "Your company via Raw Portal" and your email as the reply-to address. The template is fixed; the note you may add is at most 300 characters and cannot contain links. The email and the download page state that the documents were sent with Raw Portal.

10A.4. Limits: the number of recipients per day is limited, and lower in the first days of a new account; the same set of documents goes to the same recipient at most once a week; the link is valid for 30 days and you can cancel it at any time; only permitted file types and sizes can be sent.

10A.5. Your responsibility: you send only to recipients with whom you have a business relationship and who have a legitimate reason to receive the document; you represent that you obtained the recipients' addresses lawfully and are entitled to send them this message; you do not use Sharing as a promotional or bulk email tool. The content of the sending and your relationship with the recipient are your responsibility; requests and complaints from recipients are directed to you.

10A.6. Blocking: every email gives the recipient a one-click option to "block this sender". No further Sharing email from you goes to a recipient who blocks you; you cannot lift the block. To apply blocks we keep a record of the blocking address and the sender (as controller, under KVKK Article 5(2)(f), to carry out the recipient's wish).

10A.7. Abuse: if the bounce or complaint rate exceeds a threshold, your sending stops automatically. Recipients and third parties can reach us through "Report abuse" on the download page; we may disable access to content reported as unlawful while we investigate and, in serious or repeated cases, close Sharing or your Raw Portal access (without prejudice to the obligations Turkish Law No. 5651 places on hosting providers).

10A.8. No support: we do not provide support to Sharing recipients. The email and the download page say "reply to the sender with any questions"; questions about the documents and their content come to you. We are only the technical intermediary.

10A.9. Recipients' data: recipient addresses and delivery results are processed on your behalf (§9.2); we do not use them for promotion or any other purpose. The download page shows the recipient a short notice about this processing and a link to our Privacy notice. The time and IP address at which a recipient opens the download page are kept for 1 year to monitor abuse.

10A.10. Sharing is part of these terms; it is free of charge and subject to the liability limits in §12. We may change or discontinue it with prior notice.

11.1. You can delete a document from the Library, change its tier, detach it from a request, or cancel a Sharing link.

11.2. These actions work going forward. When you lower the tier or withdraw a document from the network, new access stops; but the copy held by a Customer that received the document through a request, or took it from the network into its own file, before that moment, and the calculations and reports it produced from it, are not withdrawn. Those copies are part of that Customer's product information file, which the Customer may be legally required to keep (e.g. EU Regulation 1223/2009 Article 11: ten years after the last batch is placed on the market). If you want them deleted, contact the Customer concerned; we pass requests we receive on to it. A file a Sharing recipient has downloaded also stays with the recipient.

11.3. You can close your Raw Portal account from Raw Portal or by writing to dev@uniquealphabet.com. On closure, documents in your Library and your Sharing recipient lists are deleted within 30 days; your network documents return to the "Requesting customers only" tier at the moment of closure; open Sharing links are closed; copies delivered to Customers remain as described in §11.2.

11.4. Retention periods: acceptance records and the log of tier changes, 10 years for evidence; IP addresses in sign-in, session and download records, 1 year; email delivery records, 3 years; block records, for as long as the block lasts; the copy at the AI provider, at most 30 days (§8.3). Details are in the Privacy notice.

11.5. We may also end these terms, giving at least 30 days' notice, in the event of a serious breach or one that continues despite written warning (§14), or if we discontinue the relevant service altogether.

12.1. We operate the platform with care. We are not responsible for the content of your documents (§07), for how a Customer uses your document, or for the relationship between you and a Customer or your Sharing recipients.

12.2. Except for our intent or gross negligence, damage to life or health, and other liability that the law does not allow to be limited, our total liability of every kind arising from these terms and from your use of the platform as a supplier — whether for breach of contract, tort or any other legal ground, including a document reaching an unauthorised person, being misclassified, being unavailable, a Sharing email not arriving, or a loss — is limited to 5,000 TL for a Supplier established in Türkiye and €150 for a Supplier established outside Türkiye, and covers only your direct loss.

12.3. With the same exceptions, we are not liable for loss of profit, loss of reputation, loss of market share, business interruption or other indirect loss.

12.4. Our liability to you for the acts of our hosting, infrastructure, email and AI providers is subject to the same limits.

12.5. These limits reflect that this service is provided to you free of charge (§13).

Responding to requests, Raw Portal, the Document Library, the sharing tiers and Sharing are free of charge for Suppliers. If we ever offer a paid supplier feature, it will come with a separate acceptance and a price shown in advance; today's free functions will not be charged retroactively.

Do not use Raw Portal for anything unlawful, to upload malware, to probe or overload our systems, to reach other companies' data, or to send unsolicited promotion. If we receive a reasonable notice that a document belongs to someone else, is fake or was shared without authority, we may remove it from the network and from Sharing while we investigate and, in serious cases, suspend Raw Portal access; unless the law prevents it, we tell you why in writing.

We announce changes to these terms in Raw Portal and by email at least 30 days before they take effect. A change to your detriment takes effect only when you expressly accept it in Raw Portal; if you do not, your existing documents and their tiers continue to be processed under the version you accepted, only no new network sharing opens (§4.5), and you can close your account at any time. Changes in your favour and changes required by law may apply immediately.

These terms are governed by the law of the Republic of Türkiye; for a Supplier established outside Türkiye, this is the parties' choice under Article 24 of Turkish Law No. 5718 on Private International and Procedural Law. For disputes with Suppliers that are merchants, under Article 17 of the Turkish Code of Civil Procedure (Law No. 6100), and with Suppliers established outside Türkiye, under Article 47 of Law No. 5718, the İstanbul (Çağlayan) Courts and Enforcement Offices have exclusive jurisdiction. For Suppliers that are not merchants, the statutory rules on jurisdiction apply. Where the law requires it, mediation is sought before a lawsuit is filed.

These terms are published in Turkish and English; if the two texts differ, the Turkish text prevails. We send notices in Raw Portal and to the email address you sign in with; the parties accept this as a valid means of notice. Raw Portal is a free service and does not include support: questions about requests and documents go to the Customer that sent the request, and questions about Sharing go to the sender. For account security, abuse and personal data requests: dev@uniquealphabet.com and hello@uniquealphabet.com; for formal notices, our registered electronic mail (KEP) address wennesbiyoteknoloji@hs01.kep.tr.

Acceptance box (first Raw Portal sign-in and RawLink upload): "I accept the Supplier terms of use on behalf of my company." — with a link to the terms. No summary next to the box (S-35).