Privacy policy

In force from 5 September 2026. The legally binding version of this notice is the Polish one, available at Polityka prywatności.

1. Controller

The controller of personal data related to the createprogress.pl website, CP Studio accounts and billing is Karol Januszczak PlatyBit, ul. Dworskie Ogrody 11/3, 35-214 Rzeszów, Poland, VAT ID (NIP) 6871974665, REGON 389944685. Contact: kontakt@createprogress.pl, +48 726 552 076.

2. Purposes and legal bases

We process account data to provide the service (Art. 6(1)(b) GDPR), billing data to meet accounting and tax obligations (Art. 6(1)(c) GDPR), correspondence and security logs on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

3. Data entered by a studio

Data of a studio’s own clients entered into the panel is processed on behalf of that studio as a processor; the studio remains the controller. A separate data processing agreement governs this.

4. Payments

Online payments are handled by PayPro S.A. (Przelewy24), ul. Pastelowa 8, 60-198 Poznań, Poland. Card details are entered only in the operator’s infrastructure; we never receive or store card numbers.

5. Recipients and transfers

Data is shared only with providers necessary to run the service: Supabase (database and authentication, EU region), Cloudflare, Inc. (application delivery), PayPro S.A. (payments), our mail provider and accounting office. Transfers outside the EEA related to Cloudflare, Inc. are based on the European Commission’s standard contractual clauses and the Data Privacy Framework.

6. Retention

Account data: for the term of the contract and 30 days afterwards. Invoices and billing data: 5 years from the end of the tax year. Complaints and withdrawal statements: 6 years. Technical logs: up to 12 months.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland. We do not carry out profiling or automated decision-making.

8. Cookies

This website uses no analytics, marketing or tracking cookies. The application panel uses only browser storage strictly necessary to keep you signed in and to run the offline (PWA) cache.