User Data Deletion Instructions — NastepnyEtap.pl
Last Updated: May 8, 2026
1. Introduction
Under Article 17 of the GDPR ("right to erasure" / "right to be forgotten"), you have the right to request the deletion of your personal data from NastepnyEtap.pl. This document describes the available methods for deleting your account and data, and explains what happens to your data after a deletion request is submitted.
Data Controller: Przemysław Dudek, operating NastepnyEtap.pl as an unregistered business activity.
Contact: prywatnosc@nastepnyetap.pl
2. Method 1 — In-App Account Deletion (Recommended)
This is the fastest and fully automated method.
Step 1: Log in to the application
Go to app.nastepnyetap.pl and sign in to your account.
Step 2: Go to Settings
Click your name or profile icon in the top-right corner, then select Settings.
Step 3 (optional): Download a copy of your data
Before deleting your account, you can download an archive of your data in JSON format. In the Danger Zone section, click the "Download my data (JSON)" button. The file contains your account data, analysis history, and payment information (CV files are not included).
Step 4: Delete your account
In the Danger Zone section, click the "Delete Account" button. A confirmation dialog will appear. Click "Yes, Delete My Account" to permanently delete your account.
What happens after confirmation?
Deletion is immediate and irreversible. This action cannot be undone.
3. Method 2 — Email Deletion Request
If you cannot log in to the application or prefer to submit a written request, send an email to:
prywatnosc@nastepnyetap.pl
Subject: Data Deletion Request — [your email address]
Your message should include:
- The name associated with your account
- The email address used during registration
- A clear request to delete your account and all associated data
Identity verification: For security reasons, we will reply asking you to confirm the request from the email address registered in the service. We do not process requests sent from addresses not associated with the account.
Processing time: Email requests are processed within 30 calendar days of identity verification, in accordance with Article 12 of the GDPR.
4. What Gets Deleted and When?
| Data Category | Deletion Timeline |
|---|---|
| Account data (name, email, password) | Immediately upon deletion confirmation |
| Analysis results (AI reports) | Immediately upon deletion confirmation |
| Payment history (metadata) | Retained for the period required by law (tax/accounting obligations) |
| CV files and job descriptions (our servers) | Within 30 days of upload (regardless of account deletion) |
| AI sub-processor logs (OpenAI) | Up to 30 days from the date of processing, per OpenAI's API data retention policy (DPA) |
Important note regarding OpenAI: CV files and job descriptions submitted for analysis are processed by OpenAI Ireland Ltd. (using OpenAI LLC infrastructure in the USA) under a Data Processing Agreement (DPA) with the model training opt-out (API Opt-out) enabled. OpenAI may retain data in their logs for up to 30 days from the date of processing. Deleting your account in our service does not cause immediate deletion of data from OpenAI's infrastructure within that time window. For more information, see OpenAI's Privacy Policy.
5. Data We Cannot Delete
The following data may be retained despite a deletion request, where required by law:
- Payment transaction metadata — retained for the period required by tax and accounting regulations (typically 5 years).
- Anonymized statistical data — aggregated data that cannot be used to identify a specific individual may be retained indefinitely.
6. Deletion Confirmation
After deleting your account through the application, you will be automatically logged out. For email requests, we will send a confirmation of completion to the email address associated with your account.
7. Your Other Rights (GDPR)
In addition to the right to erasure, you also have the right to:
- Access (Art. 15) — you may request a copy of your data
- Data portability (Art. 20) — JSON data export available in Settings
- Rectification (Art. 16) — you can update your data in Settings → Profile
- Restriction of processing (Art. 18) — contact us by email
- Object to processing (Art. 21) — regarding profiling and processing based on legitimate interest
To exercise any of the above rights, contact us at: prywatnosc@nastepnyetap.pl
8. Complaint to the Supervisory Authority
If you believe that the processing of your data violates GDPR, you have the right to lodge a complaint with:
President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
Online complaint form: https://uodo.gov.pl/pl/83/155
9. Contact
Controller: Przemysław Dudek
Address: ul. Radwańska 40/42 m. 316, 93-574 Łódź, Poland
Email: prywatnosc@nastepnyetap.pl