KVKK notice

Last updated: 26 October 2026

This notice is being finalised. The data controller's legal name, address and contact details for requests will be added to the final version.

Under Article 10 of Türkiye's Personal Data Protection Law No. 6698 (KVKK), this notice explains for which purposes and on which legal grounds Growty processes your personal data, to whom it may be transferred, and your rights.

Data controller

The data controller is Growty. The legal name, address and contact details will be included in the final version of this notice.

Personal data processed

Identity and contact: name, email address, optional phone number, company and role.
Account and security: hashed password, sign-in attempts, session records, IP address, browser and device information, a log of important actions.
Waitlist request: the details you give in the growty.io form and the time of your consent.

Purposes

creating and managing your account and giving you single sign-on access to the Growty apps,
keeping information secure, preventing unauthorised access and recording important actions,
sending service emails (invitations, password resets, email change confirmations),
reviewing waitlist requests and contacting the person who applied.

How we collect it and legal grounds

Personal data is collected electronically and automatically through the Admin sign-in and account screens, the growty.io waitlist form and the use of the service.

Legal grounds: KVKK Article 5/2-c (establishing or performing a contract), 5/2-ç (complying with a legal obligation) and 5/2-f (legitimate interest, provided it does not harm your fundamental rights, in particular account security). Waitlist contact is based on the consent you give in the form.

Transfers

Personal data may be transferred, limited to the purposes above, to the providers we use (hosting and encrypted backups, email delivery, and AI providers when you use AI features). Some of these providers are abroad; the transfer basis under KVKK Article 9 will be explained in the final version.

Your rights under KVKK Article 11

By applying to the data controller, you have the right:

to learn whether your personal data is processed,
to request information about it if it is processed,
to learn the purpose of processing and whether it is used for that purpose,
to know the third parties in Türkiye or abroad to whom it is transferred,
to request correction if it is incomplete or inaccurate,
to request deletion or destruction under the conditions of Article 7 of the KVKK,
to request that correction, deletion or destruction be notified to the third parties it was transferred to,
to object to a result against you that arises solely from automated analysis of your data,
to claim compensation if you suffer damage because of unlawful processing.

Applications

You can send requests about your rights in writing; they are concluded within thirty days at the latest. The application address will be included in the final version.