Privacy notice

This notice explains how Growthmarkt™ processes personal data collected through growthmarkt.com, in line with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR).

Who is responsible

The data controller is Growthmarkt™. Contact: contact@growthmarkt.com.

What we collect

Through the demo request form: your name, work email, company, role, company size, your message, and your consent choices.
When you create an account or are invited to the Growthmarkt™ app: your name and email, your company's name and profile, your audit answers and notes, where you say your evidence is kept, and the results. We do not use passwords.
If you ask us to call you in the app: the phone number you give.
When you sign in: we email you a one-time code. We store only a keyed fingerprint of that code, together with short-lived counters that limit how many codes can be requested.
Technical data that our hosting provider processes to deliver the site, such as IP address and request logs. To prevent abuse of sign-in and of the demo request form, we use a fingerprint of your IP address, not the address itself, for one hour.
Only if you accept analytics in the cookie notice: the pages you read on growthmarkt.com and in the app, how you arrived, your device and browser type and your approximate location, collected by Google Analytics. See Cookies.

Why we use it, and on what basis

To respond to your demo request and arrange the demo; your request is also sent by email to our team. Basis: steps taken at your request before a possible contract.
To provide the app: your account, your company's audits, results and roadmap. Basis: performance of the service you or your company asked for.
To send you updates about Growthmarkt™, only if you tick the updates box. Basis: your consent, which you can withdraw at any time.
To handle a purchase, access or call request you make in the app; the request is also sent by email to our team. Basis: steps taken at your request before a possible contract.
To understand how the website and the app are used, with Google Analytics. Basis: the consent you give in the cookie notice, which you can withdraw at any time.
To operate and secure the site and the app, including sign-in codes and limits on repeated requests. Basis: our legitimate interest in a secure, working service.

Who processes it for us

Netlify (website hosting).
Google Firebase (app sign-in, database and demo requests).
Google Analytics and Google Tag Manager (usage statistics for the site and the app; only with your consent).
Resend (sending sign-in codes, invitations and notifications by email; EU region).
Google Workspace (our team's email).

These providers may store data outside Türkiye and the EU, including in the United States. Transfers are made under the safeguards required by applicable law.

How long we keep it

We keep demo request data for no longer than 24 months after your request, unless you ask us to delete it sooner. A sign-in code stops working after 10 minutes; its fingerprint and the abuse counters are deleted within a day.

We keep app accounts and audit records while your company uses Growthmarkt™. Completed audits are kept unchanged so that your score history stays reliable. When your company stops using Growthmarkt™, or you ask us, we delete them.

Inside your company, the growth owner’s answers and notes stay with the growth owners. The executive sponsor and observers see the results, the roadmap and where the evidence lives, not the individual answers. Growthmarkt™ staff see company names, profiles and scores to run the service.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing, and to withdraw consent. Under KVKK Article 11 and the GDPR you also have the right to complain to the Turkish Personal Data Protection Authority or to your local supervisory authority. Write to contact@growthmarkt.com.

Last updated: 9 November 2026