🏢 BizNow - Právne dokumenty | Legal Documents

1. TERMS OF SERVICE & EULA

Introduction

This application is intended exclusively for self-employed individuals, legal entities and persons acting within their business or professional activity. The Service is not intended for consumers.

The contractual relationship arises between the Provider and the Customer, in particular upon registration or creation of a user account by an authorized person, selection of a pricing plan, creation of a company in the application or commencement of use of the Service for the Customer or its Organization.

By creating a user account, selecting a pricing plan, creating a company in the application or starting to use the Service, the authorized person confirms that they had the opportunity to review these Terms, understand them and agree to them on behalf of the Customer. If the Customer or authorized person does not agree to these Terms, the Service must not be used or activated for that Customer or Organization.

By creating or managing a company in the application, the User represents that the User is authorized to act on behalf of the Customer or the relevant Organization or is otherwise authorized to perform the relevant action on their behalf. The Customer is responsible for the accuracy of information provided by its Users and for actions performed by Users within the permissions assigned by the Customer or Organization.

If a trial period is provided upon registration or selection of a pricing plan, it is an introductory period without a monthly plan fee for the selected plan. The trial period always ends automatically on the last day of the applicable calendar month. The Provider may confirm a different trial length or an extension in the application, price list or an individual offer; any such trial or extension will likewise end exclusively on the last day of the applicable calendar month. The specific end date is displayed in the application or communicated by another appropriate means.

By selecting a pricing plan, the Customer acknowledges that after the trial period ends, use of the Service will continue as a paid monthly subscription under the selected plan, unless the affected Organization is deleted before the end of the trial period. The Subscription for a particular Organization may be terminated only by deleting that Organization, either directly in the application by an authorized person or by the Provider following a verified email request under Section 3A.

The contractual relationship between the Customer and the Provider lasts for the entire period of an active account, active Organization or active subscription, depending on which circumstance is relevant for the respective part of the Service.

The contractual relationship between the Customer and the Provider is governed by the applicable provisions of Act No. 513/1991 Coll., the Commercial Code, as amended.

If an account is created by a person outside the target group of the Service or by a person not authorized to act for the Customer or Organization, the Provider is entitled to refuse, restrict or cancel the account. The User represents that the Service is used within the business or professional activity of the Customer or Organization.

Version: 1.9
Effective Date: October 9, 2026

1.1 Service Provider

1.2 Definitions

• "Agreement" – legal relationship between the Provider and the Customer, arising in the manner set out in these Terms, in particular through registration or creation of an account by an authorized person, selection of a pricing plan, creation of an Organization in the application or commencement of use of the Service for the Customer.
• "Provider" or "Operator" – CyWo Tech, a. s., which provides the BizNow service.
• "Customer" – a legal entity or self-employed natural person with an assigned business identification number (IČO), whose identification details including IČO are recorded for the relevant Organization and who is the contractual party vis-à-vis the Provider for the Service supplied to that Organization. A User Account or a User acting for an Organization does not, by itself, make that User personally liable for the Organization’s Subscription unless that User is also the Customer.
• "BizNow" or "Service" - cloud based enterprise management system for managing finances, documents, clients, and employees
• "User" or "You" – a natural person using the Service on behalf of the Customer or Organization based on authorization granted by the Customer, Organization or an authorized person
• "Account" - a registered account of an individual User in the Service, independent of any particular Organization; one Account may provide access to multiple Organizations subject to the permissions granted
• "Organization" - a business entity recorded or managed in the Service to which the relevant data, settings, permissions and Subscription are linked
• "Owner" – the User Account holding the primary Owner role for a particular Organization, assigned to the User who created that Organization in the Service; the Owner manages the Organization within the permissions of that role.
• "Director" – a User role that may be added by the Owner after the Organization is created; it permits administration and changes within the permissions granted to that role in the Service.
• "Personal Data" - data defined in GDPR (EU Regulation 2016/679)
• "Subscription" - paid access to the Service for a specific Organization under the selected pricing plan
• "Data" - all information, documents and records entered by the User or Customer into the Service

If the Customer is a self-employed individual, the Customer may also be a User. Actions performed by Users within permissions assigned by the Customer or Organization are deemed, in relation to the Provider, to be actions of the Customer. Provisions of these Terms imposing an obligation on a User or granting a right in connection with an Organization or the Service apply accordingly to the Customer unless the nature of the provision indicates that it concerns only the individual User.

Individual Users, employees, clients, suppliers or other persons associated with the Customer are not separate parties to the Agreement and do not acquire separate contractual claims against the Provider under the Agreement unless mandatory law provides otherwise.

1.3 Acceptance of Terms

The Customer accepts these Terms through an authorized User, in particular by registering, creating an account, logging into the Service, selecting a pricing plan, creating an Organization in the application, explicitly confirming the Terms in the application, starting to use the Service or continuing to use the Service after having had the opportunity to review these Terms. Where a User performs an action on behalf of the Customer that requires authority to enter into or perform the Agreement, the User represents that the User has the necessary authority for that action.

Each User who creates an Account, logs into BizNow or starts using the Service thereby, after having had the opportunity to review these Terms, accepts these Terms individually to the extent applicable to the User’s use of the Service and undertakes to comply with them, regardless of the number of Organizations to which the User has access. Mere acceptance of these Terms does not make the User personally liable to pay an Organization’s Subscription unless that User is also the Customer.

2. SERVICE DESCRIPTION

BizNow is a SaaS (Software as a Service) platform providing:

• ✅ Income and expense management
• ✅ Document processing (invoices, receipts, delivery notes, deposits, cash documents)
• ✅ Client and supplier management
• ✅ Employee and payroll management
• ✅ Financial overviews and reports
• ✅ Organizational hierarchy (Companies → Branches → Cash registers)
• ✅ User permissions and access control
• ✅ PDF document and attachment storage

2A. AUTOMATED PROCESSING, OCR AND AI OUTPUTS

Automated processing, OCR, categorization, data extraction, reports, alerts and AI recommendations are auxiliary and informational. They may contain errors, inaccuracies or incomplete data.

The User is obliged to verify the accuracy of Service outputs before using them for accounting, tax, legal, financial or business purposes. The Service does not provide legal, tax, accounting or financial advice and does not replace professional assessment by an accountant, tax advisor, auditor, lawyer or other qualified professional.

The Provider is not liable for damage caused by the use of unverified, incomplete or incorrectly interpreted Service outputs. The User is responsible for the final verification of data, its export to accounting systems and compliance with their legal obligations.

The Provider does not use User data to train public AI models. If the method of AI/OCR processing changes materially, the Provider will inform the User in an appropriate manner.

2B. eINVOICE AND PAYMENT SUPPORT DOCUMENTS

Activation and use of the eInvoice functionality for a Slovak tax entity requires the selection and authorization of the digital postman through the Slovak Financial Administration portal or by another method required by applicable law or technical infrastructure. The User must provide the necessary cooperation, provide accurate identification data and keep any required authorizations, registrations and permissions valid. Until these requirements are fulfilled, activation or use of the eInvoice functionality may not be possible.

Activation and use of the eInvoice functionality are subject to successful verification of identity and authority to act on behalf of the Organization (KYC), carried out by the certified delivery service provider or on its behalf. The User must provide true and complete information, requested documents and the necessary cooperation. Until KYC has been successfully completed, activation, sending or receipt of eInvoices may be suspended or refused.

The User is responsible for the factual, accounting, tax and legal accuracy of the electronic invoice, for the correct configuration of the User’s organization and for reviewing the invoice before it is sent. The Provider is not liable for errors resulting from incorrect, incomplete or outdated data entered, uploaded or confirmed by the User.

Any automated technical or formal validation of an electronic invoice performed by BizNow, a certified delivery service provider or through the Peppol network does not constitute confirmation of the factual, accounting, tax or legal correctness of the invoice. The User remains responsible for these matters.

The availability of eInvoice functionality and its delivery status may depend on the certified delivery service provider, the Peppol network and third-party systems. Confirmation of technical delivery does not by itself constitute acceptance, accounting recognition or payment of the invoice by its recipient.

eInvoice statuses displayed in the Service are informational and are based on technical messages and confirmations made available to BizNow by the certified delivery service provider and the relevant infrastructure. The relevant status or confirmation received from the certified delivery service provider shall constitute the authoritative confirmation of technical sending or delivery; the User is responsible for paying reasonable attention to error statuses, warnings and undelivered documents.

The User is responsible for submitting or making a document available for processing with sufficient time before any statutory, contractual or business deadline. The Provider is not liable for a missed deadline where the User initiated processing or sending at a time that objectively did not allow sufficient technical processing and delivery, or where sending was prevented by incorrect or incomplete data, missing authorization, incomplete KYC, insufficient cooperation or an error status of which the User was notified.

In connection with the provision of eInvoice functionality, electronic invoices, data contained in them and data concerning their sending, receipt or delivery may be made available or transmitted to the certified delivery service provider, the Peppol infrastructure and competent public authorities, in particular the Financial Directorate of the Slovak Republic, to the extent necessary to provide the eInvoice functionality or required by applicable law.

During the term of the Agreement, the Provider may change the certified delivery service provider or other technical infrastructure used to provide eInvoice functionality, in particular for technical, security, operational, legal or commercial reasons, provided that the scope of the Service is not materially reduced without reasonable justification. If such a change requires a new authorization, registration or other cooperation from the User, the User must provide it within a reasonable period specified by the Provider.

Payment Support Documents and Read-Only Bank Data

Where BizNow displays bank account or transaction data, it does so on an informational read-only basis to the extent made available by the User and external providers. BizNow does not execute payments, hold funds or authorize payment transactions on behalf of the User.

Where BizNow generates a QR code, SEPA/XML file, bulk payment order or other payment support document, it is a technically generated document based on data available in the Service. Before confirming or sending a payment in the User’s bank, the User must verify in particular the recipient, account number/IBAN, amount, currency, reference or variable symbol, due date and all other payment details. The User is responsible for the final authorization and correctness of the payment.

To the maximum extent permitted by applicable law, the Provider is not liable for an incorrectly executed payment, duplicate payment, payment to an incorrect account or other damage where the User failed to verify the payment support data before authorizing the payment.

2C. EXTERNAL INTEGRATIONS AND THIRD-PARTY SERVICES

Certain Service functions depend on third-party software, APIs, data formats, banking interfaces, accounting systems, certified delivery service providers or other third-party services. The Provider does not guarantee their uninterrupted availability or permanent compatibility with the Service.

Third parties may change, restrict or discontinue their interfaces, formats, technical conditions, prices, rules or functionality without the Provider’s control. The Provider will use reasonable efforts to maintain supported integrations but is not required to maintain a specific integration or technical method of operation where its continued operation is not reasonably feasible for technical, security, legal, operational or economic reasons.

Where reasonably possible, the Provider may replace such integration with an alternative technical solution or modify the manner in which it operates. A change to or discontinuation of a third-party function shall not constitute a breach of the Agreement by the Provider where the Provider exercised reasonable professional care and did not, without reasonable cause, materially reduce the core scope of the paid plan.

3. PRICING PLANS AND PAYMENTS

The price, scope of features, document limits, number of locations, support level, document overage fees and any additional services are governed by the current price list published at https://biznow.eu, or by an individual price offer or order confirmed by the Provider.

The price list applicable at the time of the order or plan activation becomes part of the Agreement. In the event of a conflict, the order of documents set out in Section 8 of these Terms applies.

The Provider may change the price list prospectively. A change in the price of an existing paid subscription will generally be communicated to the Customer at least 30 days in advance, unless the change is required by law, a tax change or an individual agreement. If the Customer disagrees with the change, it may terminate the Subscription of the affected Organization before the change takes effect by deleting that Organization directly in the application or requesting its deletion by the Provider via email under Section 3A.

Payment Terms

• Payment Gateway: Stripe (third party)
• Billing: Monthly subscription and any applicable overage or additional fees under the current price list or individual agreement
• VAT: Added to price according to current legislation
• Payment Methods: Credit/debit card
• Automatic Renewal: Subscription automatically renews each month

The BizNow Subscription is linked to a specific Organization created in the application by an authorized person. The Customer, as the contractual party, is responsible for paying the Subscription fee and any additional fees under the Agreement. The Provider is entitled to charge for the Service after the trial period ends if the affected Organization is not deleted in accordance with Section 3A before the trial ends.

Monthly billing cycle: For each active Organization after its trial period has ended, the fixed monthly fee for the selected plan is billed in advance on the 1st day of the calendar month for that calendar month. An invoice issued on the 1st of the month includes the plan fee for the month beginning and any overage documents consumed in the immediately preceding calendar month. The fixed monthly plan fee is charged only for paid periods; no plan fee is charged during the trial, but any document overages are billed on the 1st day of the following calendar month. When the trial ends on the last day of a calendar month and the Organization remains active, the first paid period starts and the monthly fee is billed in advance on the 1st day of the immediately following month. The end date of the trial period is displayed in the Service.

Document Counting

Counted documents:

• ✅ Received invoices
• ✅ Issued invoices
• ✅ Cash documents
• ✅ Delivery slips
• ✅ Deposit invoices
• ✅ Salary documents
• ✅ Uploaded attachments

Not counted:

• ❌ System reports
• ❌ Excel exports
• ❌ PDF exports of overviews
• ❌ Data backups

Overage and Counter Reset

• Document count resets on the 1st day of each month
• Deleted documents are not counted
• The number of processed documents and any plan-limit overage are determined as of the last day of the calendar month; overage documents are billed according to the applicable price list or individual agreement on the invoice issued on the 1st day of the following month together with the fixed fee for that following month, if a fixed fee is then payable; during the trial period, documents exceeding twice the selected plan’s regular monthly document allowance are treated as overage documents
• Payment of billed fees is processed automatically through the Stripe payment gateway according to the Customer’s Subscription and payment method settings

Non-Payment and Service Suspension

3A. REGISTRATION AND ACCOUNT

Registration Requirements

To create an account you must:

• ✅ Be a self-employed individual over 18 years of age, a legal entity, or a person authorized to act on behalf of such entity
• ✅ Provide truthful, accurate and current information
• ✅ Have a valid email address
• ✅ Have the opportunity to review these Terms before using the Service
• ✅ Agree to Privacy Policy

Account Responsibility

A User Account is separate from the Organizations maintained in the Service. A User may manage or access multiple Organizations through one Account, including for different Customers, where the relevant permissions have been granted. Creating or retaining an Account does not in itself create a paid Subscription; each Organization’s Subscription is handled separately.

When an Organization is created, the User who created it receives the primary Owner role. After creating the Organization, the Owner may add other Users, including a Director whose ability to modify and administer the Organization is limited to the permissions assigned to that role. Owner and Director are application roles; the contractual Customer remains the identified business entity or sole trader with an IČO. Every existing Organization must have an assigned Owner and may not remain without that role.

The Customer is responsible for managing, granting and revoking its Users’ access and permissions and for actions performed within the permissions granted by the Customer or Organization. Each User must reasonably secure their login credentials and report suspected misuse without undue delay. This does not affect the Provider’s responsibility for its own obligations.

Organization Cancellation

The Organization may be deleted in the application by its Owner; deletion through the Provider following a verified email request is governed by the following paragraph. The BizNow subscription and Service billing are linked to the existence of a specific Organization in the application. Deleting one Organization does not delete the User Account or affect other Organizations accessible through that Account or their respective Subscriptions.

The Customer may terminate the Subscription for a particular Organization exclusively by deleting that Organization either (i) directly in the application by its Owner, or (ii) through the Provider following an email request by the Owner or another person demonstrably authorized to act on behalf of the Customer sent to support@cywo.tech. The request must sufficiently identify the Organization; before deleting it, the Provider may reasonably verify the identity and authority of the requester. When requesting deletion of an Organization by email, the Customer must ensure that a complete request is received at support@cywo.tech at least three (3) business days before the requested deletion date; this applies in particular where deletion is required before the end of the trial period or before the beginning of the next paid period. For the purposes of this notice period, a business day means a Monday through Friday that is not a non-working day under the laws of the Slovak Republic. If no requested deletion date is specified, the Provider will process the request without undue delay following verification, but is not required to complete the deletion in less than three (3) business days after receipt of a complete request. The Provider shall process a duly received and verified request without undue delay, taking into account the requested deletion date. If the request is received later or lacks the information required for verification, deletion before the end of the trial period or the beginning of the next paid period is not guaranteed. Until the Organization is actually deleted, its Subscription remains active under the Agreement, subject to the billing adjustment in the event of the Provider's delay set out in the following paragraph. The three (3) business-day advance notice does not apply to deletion of an Organization carried out by an authorized person directly in the application. Deleting the Organization terminates the associated Service and Subscription on the date of deletion. Sending an email request does not itself technically delete the Organization; logging out or deleting an individual User Account does not cancel its Subscription.

If the Owner or another person demonstrably authorized to act for the Customer submits a complete request to delete an Organization at least three (3) business days before the requested deletion date, the requester has the necessary authority, and the Provider fails to delete the Organization on the requested date for reasons attributable to the Provider, the Customer is not obliged to pay the Subscription fee for a new paid period that would have been avoided had the Organization been deleted on time. If a fee for such a period has already been charged, invoiced or paid, the Provider shall make the appropriate billing adjustment, including issuing a corrective document where required, and refund any payment improperly received without undue delay. This rule also applies where the requested deletion should have occurred before the trial period ended. The Provider remains entitled to fees duly incurred before the requested deletion date. A delay attributable to the Provider does not, in itself, cause the Organization to be technically deleted earlier; however, Subscription billing is governed by this paragraph.

If an Organization is deleted during the trial period by either method under this Section, that trial period ends and no paid Subscription arises for the deleted Organization thereafter.

If an Organization is deleted during a paid period by either method under this Section, the associated Subscription ends on the date of deletion. Due to the nature of monthly subscriptions, fees already paid or invoiced for the current period are not refunded unless the Provider and Customer agree otherwise or a billing adjustment applies due to the Provider's delay under this Section. We therefore recommend considering deletion of an Organization shortly before the end of the current paid period.

Organization deletion is irreversible. Deleting an Organization permanently removes its registration in the Service, settings, User assignments and access permissions for that Organization, documents, data, attachments and other linked content; individual User Accounts remain intact. The Customer is responsible for exporting the data and documents that must be retained before deleting the Organization; switching rights requested in advance are governed by Section 5E.

User Account Cancellation

A User cannot delete their User Account directly in the application. A User may request deletion of their Account at any time only by sending a request to the Provider at: support@cywo.tech; the Provider performs the deletion. Cancellation of a User Account does not in itself constitute cancellation of a Subscription or deletion of any Organization to which the User has access. To terminate the Subscription of an affected Organization, that Organization must be separately deleted under Section 3A, either directly in the application or by the Provider following an express and verified request to delete the Organization. Merely requesting the cancellation of a User Account does not cancel a Subscription.

If the User is the Owner of at least one existing Organization, the User Account cannot be deleted while the User remains the Owner of such an Organization. Since an Organization cannot exist without an Owner, every Organization owned by the User must first be deleted separately under Section 3A before the User Account can be deleted. Requesting deletion of an Account does not, in itself, request deletion of Organizations or cancellation of their Subscriptions. Data subject rights and the Provider’s obligations under the GDPR remain unaffected.

After receipt of a complete request to cancel a User Account and deletion of all Organizations for which the User is the Owner, the Account will be cancelled no later than the last day of the calendar month in which those conditions were met. If those conditions were met during the last three days of a calendar month, the account will be cancelled no later than the last day of the following calendar month.

3B. SERVICE USAGE

Permitted Use

You may use BizNow for:

• ✅ Managing your company finances
• ✅ Processing business documents
• ✅ Generating reports and overviews
• ✅ Managing clients and employees
• ✅ Exporting data for accounting purposes

Prohibited Use

Consequences of Violation

Violation of these terms may result in:

• ⚠️ Immediate account blocking
• ⚠️ Data deletion in the cases and according to the procedures set out in these Terms or required by applicable law
• ⚠️ Legal action
• ⚠️ Ban on future registration

3C. INTELLECTUAL PROPERTY

Service Ownership: All rights to BizNow (code, design, logo, trademark) are property of CyWo Tech, a. s.

License for Customer: For the duration of the Agreement, the Provider grants the Customer a non-exclusive, non-transferable right to use BizNow under these Terms through Users holding the relevant permissions.

Rights to Data: Data of the Customer and Organization remains data of the Customer or the relevant Organization; the Provider does not claim ownership of the Customer’s business information, documents or records beyond the rights necessary to provide the Service and comply with legal obligations.

We have the right to:

• Process your data to provide the Service
• Create anonymized statistics (without user identification)
• Backup data for technical purposes

3D. CUSTOMER RESPONSIBILITY AND THIRD-PARTY CLAIMS

The Customer represents and warrants that it and its Users are authorized to upload, store, process and use data, documents and personal data entered into the Service on its behalf or within its Organization, and that the Customer has the applicable legal basis or other necessary authority for such processing.

The Customer is responsible for the lawfulness of instructions and content entered into the Service by the Customer or its authorized Users and for compliance with third-party rights, including personal data protection, trade secrets, copyright and other intellectual property rights.

To the extent permitted by applicable law, the Customer shall compensate the Provider for damage and reasonably incurred costs directly caused by the Customer’s or its authorized User’s breach of these obligations or by a legitimate third-party claim arising from unlawful content or instructions of the Customer or its authorized User. This provision shall not apply to the extent the damage was caused by the Provider’s own breach of obligations.

4. LIMITATION OF LIABILITY

5. DATA PROTECTION (GDPR)

Details about personal data protection can be found in Privacy Policy.

5A. DATA SECURITY

Security Measures

• 🔒 Appropriate technical and organizational measures: The Provider protects the Service and User data with measures appropriate to the nature of the processed data and related risks.
• 🔒 Encryption in transit: Communication with the Service is protected using SSL/TLS.
• 🔒 Authentication: Access to the Service is protected by a user account and password, and potentially by additional mechanisms available in the application.
• 🔒 Data separation: The Service uses technical mechanisms to separate data of individual organizations and users.
• 🔒 Backups: The Provider performs technical backups to the extent necessary for operation and restoration of the Service.
• 🔒 Own AI/OCR processing: Automated document processing is carried out through the Provider’s own software/hardware or own/customized models, not through public AI services such as OpenAI or Claude AI.

Technical backups are primarily maintained for continuity and recovery of the Service following a technical incident and do not constitute an individual archival service for the User or a guarantee that every historical version of an individual document will remain available.

Your Responsibilities

Security Incident

In the event of a security incident or personal data breach, the Provider will proceed in accordance with applicable laws, in particular GDPR. Where the Provider acts as a processor, it will notify the Customer and, where applicable, the relevant controller through the Customer without undue delay after becoming aware of the incident. Where the Provider acts as a controller, it will assess the risk of the incident and fulfil any notification obligations towards the supervisory authority and data subjects under GDPR.

5B. DATA RETENTION AND DELETION

General Rule

Data assigned to a specific company is retained while the company exists in the Service. The Provider does not provide a statutory archiving service for the User’s accounting records. The User is responsible for the timely export, retention and archiving of the User’s accounting, tax and other documents for the periods required by applicable law. The User’s legal obligation to retain its own accounting or tax records does not create an obligation for the Provider to retain such data after termination of the Service or deletion of the company from the Service.

The Service is not intended to serve as the User’s sole or statutory archive of accounting, tax or other documents. The User is responsible for retaining originals or independent copies, outside the Service, of documents that the User is required to retain by law or that are material to the User’s business.

Unified Data Retention Table

Deletion of Organization by Authorized Person

If an Organization is deleted by an authorized person in the application or by the Provider following a verified request under Section 3A, database records assigned to that company will be removed from the production database and files stored in the Service storage, in particular PDF documents, invoices, attachments, images and other uploaded files, will be deleted from the production storage without undue delay. Deleting an Organization is irreversible and may include removal of its registration, settings, User assignments and access permissions for that Organization, documents, attachments and other content linked to that Organization; it does not delete individual User Accounts or other Organizations. Some technical database data may remain temporarily contained in automatic database backups of the infrastructure provider for up to 7 days; these backups are not intended for individual restoration of data of a deleted company at the User’s request.

Before deleting an Organization, the Customer must ensure export of the data, documents and records that must be retained for accounting, tax, legal or internal purposes. If the Customer intends to exercise switching rights under Section 5E, it must request that process before manually deleting the Organization; a duly initiated switching process is governed by the periods stated in Section 5E.

User Account Deletion upon Request

The Provider deletes an individual User Account following the User’s request submitted to support@cywo.tech. If the User is the Owner of existing Organizations, deletion of those Organizations under Section 3A is a precondition to deleting the Account; deleting the Account does not affect other Organizations to which the User merely has access or their Subscriptions. After receiving a complete request and fulfillment of the precondition, the Provider will delete the Account no later than the last day of the calendar month in which those conditions were met. If those conditions were met during the last three days of a calendar month, account cancellation may be performed no later than by the end of the following calendar month.

Unpaid Subscription

• After 21 days of delay, the company may be switched to read-only mode and uploading or creating new documents may be restricted.
• If the delay continues, the Provider may subsequently fully block access to the company.
• If the subscription is not renewed within 3 months from the first restriction of the Service, the Provider may, after prior notice, permanently delete the company and all data, documents, invoices, attachments and other content uploaded to or created in the Service by the User. The User is responsible for the timely export and archiving of data and documents that the User is required to retain under applicable law. Deletion does not apply to data and documents that the Provider is required to retain in its own name under applicable law, in particular the Provider’s own accounting, invoicing and tax records, or to data whose retention is necessary for the protection or enforcement of the Provider’s legal claims.

Right to Account Deletion

You may request that the Provider delete your individual User Account at any time by contacting support@cywo.tech. You cannot delete your Account directly in the application; Account deletion does not delete Organizations or terminate their Subscriptions.

If you are the Owner of one or more Organizations, all Organizations you own must first be deleted under Section 3A before your Account can be deleted. Separate requests under the GDPR are handled in accordance with applicable law.

5C. SERVICE AVAILABILITY (SLA)

Target Uptime

The Provider will use reasonable efforts to maintain Service availability at 99.5% monthly uptime. This value represents an availability target, not a guaranteed SLA, unless otherwise agreed with the Customer in writing.

Planned Maintenance

• 📅 The Provider will use reasonable efforts to announce planned maintenance in advance, generally at least 48 hours in advance where circumstances allow.
• ⏰ Maintenance is usually performed outside normal business hours or during lower Service load.
• ⏱️ In necessary cases, maintenance may be performed without prior notice, especially for security or operational reasons.

Unplanned Outages

In the event of an outage, the Provider will, according to its technical capabilities, work to restore the Service and inform Users in an appropriate manner, especially in the case of longer or significant outages.

SLA Exclusions

• Planned maintenance and security interventions.
• Outages caused by third parties, infrastructure, networks, payment gateways or services outside the Provider’s reasonable control.
• Incidents caused by the User’s configuration, device, network or intervention.
• Force majeure events, cyberattacks outside the Provider’s reasonable control, power outages, natural disasters, war events or actions of public authorities, provided that their consequences were not caused by the Provider’s breach of its obligations.

5D. CHANGES TO TERMS

CyWo Tech, a. s. may amend these Terms, in particular due to changes in law, Service functionality, business model, security requirements or technical infrastructure.

Notification

The Customer will generally be informed of material changes that adversely affect existing Customer rights or obligations at least 30 days in advance by an appropriate means, in particular by email to its designated contact, an in-app notification or publication of the updated Terms on the Provider’s official website.

Where earlier effectiveness is necessary due to a legal obligation, decision of a public authority, security incident, vulnerability, protection of the Service or Users, a change of a critical third-party provider or another urgent reason, the change may become effective earlier or immediately. The Provider will inform the Customer without undue delay where circumstances allow.

Acceptance of Changes

If the Customer disagrees with a material change, it may terminate the Subscription of the affected Organization before the change becomes effective by deleting that Organization directly in the application or by requesting the Provider to delete it via a verified email request under Section 3A. Continued use of the Service by an authorized person after the change becomes effective constitutes the Customer’s acceptance of the new Terms to the extent permitted by applicable law.

5E. SWITCHING PROVIDER AND DATA PORTABILITY (EU DATA ACT)

This Section governs the Customer’s rights and the Provider’s obligations when switching providers of data processing services to the extent Regulation (EU) 2023/2854 (Data Act) applies to the Service. These switching terms form part of the Agreement and are made available to the User in a manner that allows them to be stored and reproduced.

Switching Request

The Customer or a User with the relevant permission may request to switch to another provider of data processing services, to port all exportable data and digital assets to the User’s own on-premises ICT infrastructure, or to erase the User’s exportable data and digital assets. A request may be submitted through a function available in the Service or to support@cywo.tech; when switching to another provider, the User will provide the information necessary to identify the destination provider and reasonable cooperation.

The maximum notice period for initiation of the switching process will not exceed two months. Where the Agreement or selected plan permits a shorter period, the shorter period applies.

Transitional Period and Assistance

After the applicable notice period, the Provider will enable the switching process without undue delay and in any event no later than within the mandatory maximum transitional period of 30 calendar days. During the transitional period the Agreement remains applicable and the Provider will, to a reasonable extent, assist the User and third parties authorized by the User, act with due care to maintain continuity of the Service functions, provide information on known risks to continuity, and maintain an appropriate level of security for data being transferred and temporarily retained.

If completion of the switching process within 30 calendar days is technically unfeasible, the Provider will notify the User within 14 working days of receiving the request, state the reasons and indicate an alternative transitional period not exceeding seven months. The User also has the right to extend the transitional period once for a period the User considers appropriate for its own purposes, to the extent required by the Data Act.

Exportable Data and Digital Assets

For the purposes of this Section, the User’s exportable data means input and output data, including relevant metadata, directly or indirectly generated by the User’s use of the Service, excluding assets or data protected by intellectual property rights or constituting trade secrets of the Provider or a third party. Categories of exportable data include:

• company identification, organizational and User-entered configuration data to the extent transferable under applicable law,
• data relating to clients, suppliers, contact persons, employees and other business partners stored by the User,
• documents, invoices, cash receipts, delivery notes, advance and payroll documents, attachments and other content uploaded or created by the User,
• structured or extracted document data, categorizations, User-created settings, templates and other data generated through use of activated Service functions,
• bank and transaction data available to the User in the Service to the extent transferable under the relevant integration, applicable law and technical capabilities,
• output data and relevant metadata relating to the User’s data to the extent they meet the definition of exportable data under the Data Act.

To the extent permitted by applicable law, excluded categories include in particular the Service’s source code and executable components, algorithms, internal models and model parameters, internal architecture, security mechanisms, internal operational or security data and logs that do not constitute the User’s exportable data, aggregated or anonymized statistics, and other data or digital assets protected by intellectual property rights or trade secrets of the Provider or third parties. Such exclusions must not prevent or unduly delay a switching process required by law.

Formats, Interfaces and Technical Information

The Provider will enable an export of the User’s exportable data in supported machine-readable formats. Current procedures, supported methods and formats, known technical limitations and relevant information on data structures and interoperability are made available in the Service, technical documentation or on BizNow’s official website and, upon request, will be provided to the User before the switching process begins.

To the extent required by directly applicable law, the Provider will make the relevant open interfaces and necessary technical information available to the User and the relevant destination provider free of charge for the purposes of data portability and interoperability. The Provider does not guarantee that a third-party destination service will be able to import all data, preserve its presentation or reproduce BizNow functionality where such result depends on the destination provider or its technical solution.

ICT Infrastructure Jurisdiction and International Access

Information on the location and jurisdiction of the ICT infrastructure used and on relevant subcontractors is set out in this document, in particular in the sections on personal data protection and subcontractors. The Provider implements appropriate technical, organizational and contractual measures to protect data, including non-personal data, against unauthorized access or transfer by authorities of third countries and assesses the lawfulness and scope of any legally binding request in accordance with applicable law. Where legally permitted, access is limited to what is necessary and available legal and technical measures are used to protect the data.

Retrieval Period, Erasure and Charges

After the agreed transitional period ends, the User will be provided with a period of at least 30 calendar days to retrieve the exportable data, unless a longer period is required by law or individually agreed. Following successful completion of the switching process and expiry of that period, the Provider will erase the exportable data and digital assets, except for data that the Provider is required to retain in its own name under applicable law or that must be retained for the protection of legal claims, or where the parties agree on a later erasure date.

The Provider does not charge a separate fee for the standard switching process or the standard export of exportable data. Regular Service fees remain payable during the notice and transitional periods in accordance with the Agreement. Separately ordered professional, integration or migration services beyond the statutory switching process may be charged only under a separate agreement and to the extent permitted by applicable law.

6. TERMINATION

Termination by Customer

The Customer, acting through the Owner of the relevant Organization or another person demonstrably authorized to act on its behalf, may terminate the Subscription for that Organization only by deleting that Organization under Section 3A, either by deletion in the BizNow application by its Owner or through the Provider following a verified email request to delete the Organization sent to support@cywo.tech. An email request to delete an Organization is subject to the three (3) business-day advance notice under Section 3A. The Subscription ends on the Organization's deletion date; logging out or deleting a User Account does not terminate the Subscription.

If the Organization is deleted before the trial period ends, no paid Subscription starts for it. If it is deleted during a paid period, fees already paid or invoiced for that period are not refunded unless the Provider and Customer agree otherwise or a billing adjustment applies due to the Provider's delay under Section 3A. Before deleting an Organization, the Customer must export data required for retention under Section 5B; rights when switching providers is requested in advance under Section 5E remain unaffected.

Termination by Provider

We may terminate your access in case of:

• ❌ Violation of Terms of Service
• ❌ Continued payment default under the non-payment regime set out in Section 3
• ❌ Illegal activity
• ❌ Service abuse

Notice: 14 days in advance (except serious violation).

Service Termination

CyWo Tech, a. s. reserves the right to discontinue BizNow as a whole. Where objectively possible, the Provider will:

• 📧 provide at least 90 days’ notice of the planned discontinuation,
• 💰 refund the pro-rata portion of prepaid and unused subscription fees where the discontinuation was not caused by the Customer’s breach or by an authorized User’s actions for which the Customer is responsible under these Terms, and
• 📥 provide a reasonable opportunity to export data to the extent technically available.

The 90-day period does not apply where compliance is objectively impossible, in particular due to a legal obligation or decision of a public authority, a serious security incident, force majeure or sudden unavailability of critical third-party infrastructure. In such a case, the Provider will inform the Customer and enable data export to a reasonable extent as soon as circumstances allow.

7. DISPUTE RESOLUTION

Governing Law and Dispute Resolution

The contractual relationship between the Provider and the Customer is governed by the laws of the Slovak Republic, in particular, but not exclusively, Act No. 513/1991 Coll., the Commercial Code, as amended. The courts of the Slovak Republic having subject-matter and territorial jurisdiction shall have exclusive jurisdiction over disputes arising out of the Agreement or in connection with the Service, unless mandatory law or directly applicable European Union law provides otherwise. Proceedings before Slovak courts are governed by the applicable procedural laws, in particular Act No. 160/2015 Coll., the Civil Dispute Procedure Code, as amended.

Out-of-Court Resolution

Before initiating court proceedings, we recommend:

1. Contact our support: support@cywo.tech
2. Mediation (Slovak Chamber of Commerce and Industry)
3. Negotiation between authorized representatives of the contractual parties with the aim of resolving the dispute amicably

8. MISCELLANEOUS

Entire Agreement

These Terms together with the price list, confirmed order, any individual agreement, Privacy Policy and any data processing agreement constitute the agreement between the Customer and the Provider concerning the use of the Service.

Order of Documents

In the event of a conflict between an individual written agreement, confirmed order or price offer, price list and these Terms, the individual written agreement shall prevail, followed by the confirmed order or price offer, followed by the price list and then these Terms, unless expressly agreed otherwise.

Delivery of Notices

Notices by the Provider to the Customer may be delivered by email to the contact address designated by the Customer or its authorized User, by in-app notice, or by publication on the Provider’s official website where appropriate to the type of notice. An email notice is deemed delivered when sent unless the Provider receives an automatic non-delivery message or mandatory law provides otherwise. The Customer is responsible for keeping its contact email address accurate and up to date.

Invalidity of Provisions

If any provision is invalid or unenforceable, this does not affect the validity of the remaining provisions. The invalid or unenforceable provision shall be replaced by a provision that most closely reflects its purpose.

Assignment of Rights and Agreement

The Customer may not assign or transfer rights or obligations arising from the Agreement to a third party without the Provider’s prior written consent. The Provider may assign or transfer the Agreement or rights and obligations arising from it to an affiliated entity, legal successor, or purchaser of the Service, business or relevant part of the business, provided that the Customer’s rights under the Agreement and mandatory applicable law are not materially reduced.

Temporary Suspension of the Service

The Provider reserves the right to temporarily restrict or interrupt the provision of the Service for technical, security, legal or operational reasons. The User will be informed of any material restriction in an appropriate manner where circumstances allow.

Language Version

In case of conflict between Slovak and English versions, the Slovak version prevails. The English version serves as a reference translation.

Effectiveness of Terms

For new Customers, these Terms take effect upon publication on the Provider’s official website or acceptance in the application, but not earlier than any later stated effective date. For existing Customers, the updated Terms apply in accordance with the amendment procedure in Section 5D, to the extent permitted by applicable law.

Effective Date: October 9, 2026
Version: 1.9

2. PRIVACY POLICY (GDPR COMPLIANT)

Version: 1.5
Effective Date: October 9, 2026

1. DATA CONTROLLER AND PROCESSOR

Name: CyWo Tech, a. s.
Company ID: 51 462 699
Registered Office: Pri Tureckom kopci 769/9, Most pri Bratislave 900 46, Slovak Republic
Email: support@cywo.tech
Contact for personal data protection matters: support@cywo.tech
Web: https://cywo.tech

Roles in Personal Data Processing

The Customer is responsible for ensuring an appropriate legal basis and authorization for processing personal data entered into the Service by the Customer or its authorized Users to the extent that it acts as controller or processor in respect of that processing.

2. WHAT PERSONAL DATA WE PROCESS

Registration Data:

• Name and surname (or company name)
• Email (for login and communication)
• Password (securely hashed through the authentication infrastructure used by the Service)
• IP address (during registration and login)

Organization Data:

• Company name, Company ID, Tax ID, VAT number
• Address (registered office)
• Contact details
• Logo and stamp (optional)
• Bank accounts

Business Data:

• Clients: Company names, IDs, tax numbers, addresses
• Employees: Names, positions, salaries
• Invoices: Document numbers, amounts, VAT
• Uploaded files: PDF invoices, attachments

3. WHY WE PROCESS YOUR DATA

Note: The Provider’s accounting and invoicing data is retained based on legal obligations under accounting and tax laws. Data uploaded into the Service is generally processed by the Provider on the documented instructions of the relevant controller communicated by the Customer or authorized User.

4. WHO HAS ACCESS TO YOUR DATA

Processors and Subcontractors

AI/OCR Processing

BizNow uses its own or customized LLM/OCR models and its own software/hardware. User data is not sent to public AI services such as OpenAI, Claude AI or similar public AI platforms as part of standard OCR/AI processing and is not used to train public AI models.

4A. DATA PROCESSING AGREEMENT (DPA)

This section constitutes a data processing agreement under Article 28 GDPR where CyWo Tech, a. s. processes personal data on behalf of the Customer or the relevant Organization as processor or, where the Customer itself acts as processor, as a further processor.

5. DATA TRANSFER OUTSIDE EU

5.1 Data Storage and Processing

The Provider aims to store and process User data within the European Union or the European Economic Area where permitted by the used infrastructure and contractual settings of subcontractors.

5.2 Exceptions and Technical Support

Some subcontractors, especially payment, email or support services, may process limited data outside the EU/EEA. In such cases, the Provider will ensure appropriate safeguards under GDPR, in particular standard contractual clauses or another valid transfer mechanism where required.

6. HOW LONG WE RETAIN DATA

6.1 During Active Account or Company

Data is retained during the active account, existence of an active company or provision of the Service to the extent necessary to provide the Service.

6.2 Unified Data Retention Table

Legal basis for technical logs and access records: the Provider’s legitimate interest under Article 6(1)(f) GDPR, in particular Service security, prevention of misuse, diagnostics and protection of legal claims.

6.3 Legal Claims

If there is a court dispute, complaint, security incident, tax audit or other legal reason, data may be retained for the period necessary to resolve the matter and protect rights and legitimate interests.

7. YOUR RIGHTS UNDER GDPR

The rights in this section belong to natural persons who are data subjects. Where the Provider acts only as processor or further processor, requests are handled by the relevant controller and the Provider assists that controller through the Customer.

7.1 Right of Access (Art. 15)

You have the right to know:

• ✅ What data we have about you
• ✅ How we use it
• ✅ Who we provide it to
• ✅ How long we retain it

How to request: Send an email to support@cywo.tech
Response: Without undue delay and no later than within one month of receipt of the request. Where permitted by GDPR, this period may be extended by a further two months taking into account the complexity and number of requests; the data subject will be informed of the extension and the reasons for it within one month of receipt of the request.

7.2 Right to Rectification (Art. 16)

You can correct:

• ✅ Inaccurate profile data
• ✅ Incorrect organization data
• ✅ Contact information

How: in your account settings or by email

7.3 Right to Erasure - "Right to Be Forgotten" (Art. 17)

You can request deletion:

• ✅ When data is no longer necessary
• ✅ If you withdraw consent (marketing)
• ✅ If processing was unlawful

Exception (we cannot delete):

• ❌ Invoices issued by the Provider and the Provider’s own accounting and tax records that the Provider is required to retain in its own name under applicable law, generally for 10 years
• ❌ Data necessary for the protection or enforcement of the Provider’s legal claims

How: Email to support@cywo.tech with request

7.4 Right to Data Portability (Art. 20)

To the extent Article 20 GDPR applies, you have the right to obtain an export of the User’s exportable data in supported machine-readable formats and, where the statutory conditions are met, to request transmission of such data to another controller.

The specific scope and format of the export depends on the type of data, the Service features activated and the technically supported export options. This provision is without prejudice to the User’s specific switching rights under Section 5E of these Terms.

How: Through an available export function in the Service or by email to support@cywo.tech.

7.5 Right to Restriction of Processing (Art. 18)

You can request suspension of processing:

• ⏸️ While we verify data accuracy
• ⏸️ If you object to processing
• ⏸️ While a legal dispute is resolved

Consequence: During restriction, data is processed beyond storage only where permitted by Article 18 GDPR.

7.6 Right to Object (Art. 21)

You can object to:

• ❌ Marketing (immediate cessation)
• ❌ Profiling (if performed)
• ❌ Processing based on legitimate interest

Scope: The right to object under Article 21 GDPR concerns in particular processing based on legitimate interests or public interest; it does not as such apply to processing based on performance of a contract.

7.7 Right to Withdraw Consent (Art. 7(3))

You can withdraw anytime:

• 📧 Consent to marketing emails
• 📧 Consent to newsletter
• 📧 Consent for particular personal data processing that is based on consent

How: For marketing, use the “Unsubscribe” link in an email or the available settings; for other consents, contact the Provider at support@cywo.tech.

7.8 Right to Lodge a Complaint (Art. 77)

If you suspect GDPR violation:

8. DATA SECURITY

8.1 Technical Measures

• 🔒 SSL/TLS encryption of data transmission
• 🔒 User authentication and access rights management
• 🔒 Technical separation of data of individual organizations
• 🔒 Backup and recovery to the extent necessary for Service operation
• 🔒 Monitoring and security measures appropriate to risks and technical capabilities
• 🔒 Own AI/OCR processing without sending client data to public AI services such as OpenAI or Claude AI

8.2 Organizational Measures

• 👤 Access to data only by authorized persons and only to the extent necessary for providing the Service or support
• 👤 Confidentiality obligations for persons with access to data
• 👤 Internal procedures for security incidents
• 👤 Reasonable control and management of subcontractors

8.3 Backup

The Provider performs technical backups to the extent necessary for operation and restoration of the Service. If deleted data is temporarily contained in technical backups, it is retained for up to 7 days unless longer retention is required by a legal claim, security incident or legal obligation.

8.4 Security Incident

In the event of a personal data breach, the Provider will proceed in accordance with GDPR. Where it acts as a processor, it will notify the Customer and, where applicable, the relevant controller through the Customer without undue delay after becoming aware of the incident. Where it acts as a controller, it will assess the risk of the incident and fulfil any notification obligations towards the supervisory authority and data subjects.

9. PERSONS UNDER 18 AND PERSONAL DATA

10. CHANGES TO PRIVACY POLICY

10.1 Right to Change

We may update this policy when:

• 📋 Laws change (GDPR, Slovak regulations)
• 📋 New service features
• 📋 Technology changes

10.2 Change Notification

We will communicate updates to this Privacy Policy in a manner proportionate to the nature of the change, using one or more of the methods listed below. For material changes, we will provide notice reasonably in advance where circumstances permit; for urgent legal, security or technical changes, we may notify without undue delay even after implementing the change. Mandatory information obligations and data subject rights under the GDPR remain unaffected.

• 📧 Email (as appropriate to the nature of the change)
• 🔔 In-app notification
• 📄 New version on website: https://cywo.tech

10.3 Effect of Changes

The updated Privacy Policy applies from its effective date. This Privacy Policy is informational in nature and its publication does not by itself replace the data subject’s consent where consent is required by applicable law. If a change in personal data processing requires the data subject’s consent, the Provider will obtain such consent separately.

11. CONTACT

General Privacy Questions

📧 Email: support@cywo.tech
🌐 Web: https://cywo.tech

Exercising GDPR Rights

📧 Email: support@cywo.tech
Please include:

• Your name and account email
• Specific right (access, deletion, etc.)
• Reason for request (optional)

Response: Without undue delay and no later than within one month of receipt of the request. Where permitted by Article 12(3) GDPR, this period may be extended by a further two months; the data subject will be informed of the extension and the reasons for it within one month of receipt of the request.

GDPR Complaints

12. FINAL INFORMATION

Effective Date: October 9, 2026
Version: 1.5
The full Privacy Policy can be found in the relevant policy document

3. COOKIE POLICY

Version: 1.3
Effective Date: September 28, 2026

1. WHAT ARE COOKIES

Cookies are small text files stored in your browser that allow websites to "remember" your settings and preferences.

2. WHAT COOKIES WE USE

Legal regime: Consent to the storage of or access to information through strictly necessary technical cookies is not required where such cookies are necessary for transmission of a communication or for providing a service explicitly requested by the User, in accordance with Section 109(8) of Slovak Act No. 452/2021 Coll. on Electronic Communications, as amended. Where personal data is processed through such cookies, the appropriate legal basis under GDPR applies, in particular performance of a contract or legitimate interest in the security and proper operation of the Service depending on the specific purpose of processing.

3. STRIPE COOKIES (Payments)

When paying via Stripe, Stripe cookies may be used for payment processing and fraud prevention.

More information: https://stripe.com/cookies-policy
Stripe Privacy Policy: https://stripe.com/privacy

4. SUPABASE COOKIES (Backend)

Supabase uses cookies for authentication:

More information: https://supabase.com/privacy

5. HOW TO MANAGE COOKIES

5.1 Blocking Cookies in Browser

You can disable cookies in your browser settings:

• Chrome: Settings → Privacy and security → Cookies
• Firefox: Options → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Cookies
• Edge: Settings → Privacy → Cookies

5.2 Deleting Cookies

You can delete cookies:

• In browser settings → Clear browsing data
• Using shortcut: Ctrl + Shift + Delete (Windows) or Cmd + Shift + Delete (Mac)

If the Provider starts using analytics, marketing or profiling cookies in the future, it will use them only after obtaining the relevant User consent where required by applicable law.

6. CHANGES TO COOKIE POLICY

If we change cookie usage, we will update this page and inform you:

• 📧 By email (for significant changes)
• 🔔 By in-app notification

7. CONTACT

Questions regarding cookies:

📧 Email: support@cywo.tech
🌐 Web: https://cywo.tech

Effective Date: September 28, 2026
Version: 1.3
Full Cookie Policy can be found in the the relevant policy document