Data Retention Policy
Effective date: July 27, 2026
This policy sets out how long Nahag+ retains different categories of personal data, and the criteria used to determine retention periods, in line with the data-minimization and storage-limitation principles of GDPR/UK GDPR and PIPEDA.
1. Retention Schedule
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account information | While the account exists; deleted within 30 days of an account-deletion request | Allows account recovery window; then deleted/anonymized |
| Resume uploads | Until the user deletes it; deleted within 30 days of a deletion request | User-controlled |
| Job descriptions submitted | 90 days after last account activity | Operationally needed only for active tailoring sessions |
| Interview transcripts | 90 days | Supports feedback review and progress tracking |
| Voice recordings | 30 days by default; user may delete earlier | Minimizes retention of sensitive audio data |
| AI-generated feedback reports | Until account deletion; deleted within 30 days of deletion request | Tied to underlying resume/interview data |
| Billing records | 7 years | Tax and financial recordkeeping requirements |
2. Deletion Requests
You may request deletion of specific data categories or your full account at any time via support@nahagplus.com or in-app account settings. We will process deletion requests within the timeframe required by applicable law (generally within 30 days), except where retention is required by law (e.g., billing/tax records).
3. Anonymization and Aggregation
Where feasible, rather than deleting certain analytics data outright, we may anonymize or aggregate it such that it can no longer reasonably identify you, at which point it is no longer treated as personal data.
4. Backups
Deleted data may persist temporarily in encrypted backups for a limited period before being permanently purged, consistent with standard disaster-recovery practices.