🏢 BizNow - Právne dokumenty | Legal Documents

1. TERMS OF SERVICE & EULA

Introduction

This application is intended exclusively for self-employed individuals, legal entities and persons acting within their business or professional activity. The Service is not intended for consumers.

The contractual relationship between the user and the provider arises in particular upon user registration, creation of a user account, selection of a pricing plan, creation of a company in the application or commencement of use of the Service.

By creating a user account, selecting a pricing plan, creating a company in the application or starting to use the Service, the user confirms that they had the opportunity to review these Terms, understand them and agree to them. If the user does not agree to these Terms, the user is not entitled to use the Service, create a company in the application or use or activate the selected plan.

By creating a company in the application, the user declares that they are authorized to act on behalf of such company or are authorized to create and manage the company in the Service. The user is responsible for the accuracy of the information provided when creating the company and for all actions performed within that company in the Service.

If the user is granted a trial period upon registration or selection of a pricing plan, such trial period represents a free introductory period for the selected plan. The duration of the trial period and its end date are displayed to the user in the application or communicated by another appropriate means.

By selecting a pricing plan, the user acknowledges that after the trial period ends, use of the Service will continue as a paid monthly subscription under the selected plan, unless the user cancels the subscription before the end of the trial period, in particular by deleting the company in the application or by sending a cancellation request to support@cywo.tech, or unless otherwise agreed with the provider.

The contractual relationship between the user and the provider lasts for the entire period of an active account, active company or active subscription, depending on which circumstance is relevant for the respective part of the Service.

The contractual relationship between the user and the provider is governed by the applicable provisions of Act No. 513/1991 Coll., the Commercial Code, as amended.

If an account is created by a person outside the target group of the Service, the Provider is entitled to refuse, restrict or cancel the account. The User represents that the Service is used within the User’s business or professional activity.

Version: 1.3
Effective Date: September 28, 2026

1.1 Service Provider

1.2 Definitions

• "Agreement" – legal relationship between Operator and User, which arises in the manner set out in these Terms, in particular by registration, selection of a pricing plan, creation of a company in the application or commencement of use of the Service.
• "Operator" – CyWo Tech, a. s., which provides the BizNow service.
• "BizNow" or "Service" - cloud based enterprise management system for managing finances, documents, clients, and employees
• "User" or "You" – a person using the Service
• "Account" - registered user account in the Service
• "Organization" - User's business entity registered in the Service
• "Personal Data" - data defined in GDPR (EU Regulation 2016/679)
• "Subscription" - paid access to the Service according to the chosen pricing plan
• "Data" - all information, documents and records entered by the User into the Service

1.3 Acceptance of Terms

The User expresses consent to these Terms in particular by registering, creating an account, logging into the Service, selecting a pricing plan, creating a company in the application, starting to use the Service or continuing to use the Service after having had the opportunity to review these Terms. By performing these actions, the User also confirms that if they do not agree to these Terms, they will not use the Service, create a company in the application or use the selected plan.

2. SERVICE DESCRIPTION

BizNow is a SaaS (Software as a Service) platform providing:

• ✅ Income and expense management
• ✅ Document processing (invoices, receipts, delivery notes, deposits, cash documents)
• ✅ Client and supplier management
• ✅ Employee and payroll management
• ✅ Financial overviews and reports
• ✅ Organizational hierarchy (Companies → Branches → Cash registers)
• ✅ User permissions and access control
• ✅ PDF document and attachment storage

2A. AUTOMATED PROCESSING, OCR AND AI OUTPUTS

Automated processing, OCR, categorization, data extraction, reports, alerts and AI recommendations are auxiliary and informational. They may contain errors, inaccuracies or incomplete data.

The User is obliged to verify the accuracy of Service outputs before using them for accounting, tax, legal, financial or business purposes. The Service does not provide legal, tax, accounting or financial advice and does not replace professional assessment by an accountant, tax advisor, auditor, lawyer or other qualified professional.

The Provider is not liable for damage caused by the use of unverified, incomplete or incorrectly interpreted Service outputs. The User is responsible for the final verification of data, its export to accounting systems and compliance with their legal obligations.

The Provider does not use User data to train public AI models. If the method of AI/OCR processing changes materially, the Provider will inform the User in an appropriate manner.

2B. eINVOICE AND PAYMENT SUPPORT DOCUMENTS

Use of the eInvoice functionality may require the selection, authorization or other designation of the digital postman through the Slovak Financial Administration portal or by another method required by applicable law or technical infrastructure. The User must provide the necessary cooperation, provide accurate identification data and keep any required authorizations, registrations and permissions valid. Until these requirements are fulfilled, activation or use of the eInvoice functionality may not be possible.

The User is responsible for the factual, accounting, tax and legal accuracy of the electronic invoice, for the correct configuration of the User’s organization and for reviewing the invoice before it is sent. The Provider is not liable for errors resulting from incorrect, incomplete or outdated data entered, uploaded or confirmed by the User.

Any automated technical or formal validation of an electronic invoice performed by BizNow, a certified delivery service provider or through the Peppol network does not constitute confirmation of the factual, accounting, tax or legal correctness of the invoice. The User remains responsible for these matters.

The availability of eInvoice functionality and its delivery status may depend on the certified delivery service provider, the Peppol network and third-party systems. Confirmation of technical delivery does not by itself constitute acceptance, accounting recognition or payment of the invoice by its recipient.

In connection with the provision of eInvoice functionality, electronic invoices, data contained in them and data concerning their sending, receipt or delivery may be made available or transmitted to the certified delivery service provider, the Peppol infrastructure and competent public authorities, in particular the Financial Directorate of the Slovak Republic, to the extent necessary to provide the eInvoice functionality or required by applicable law.

During the term of the Agreement, the Provider may change the certified delivery service provider or other technical infrastructure used to provide eInvoice functionality, in particular for technical, security, operational, legal or commercial reasons, provided that the scope of the Service is not materially reduced without reasonable justification. If such a change requires a new authorization, registration or other cooperation from the User, the User must provide it within a reasonable period specified by the Provider.

Payment Support Documents and Read-Only Bank Data

Where BizNow displays bank account or transaction data, it does so on an informational read-only basis to the extent made available by the User and external providers. BizNow does not execute payments, hold funds or authorize payment transactions on behalf of the User.

Where BizNow generates a QR code, SEPA/XML file, bulk payment order or other payment support document, it is a technically generated document based on data available in the Service. Before confirming or sending a payment in the User’s bank, the User must verify in particular the recipient, account number/IBAN, amount, currency, reference or variable symbol, due date and all other payment details. The User is responsible for the final authorization and correctness of the payment.

To the maximum extent permitted by applicable law, the Provider is not liable for an incorrectly executed payment, duplicate payment, payment to an incorrect account or other damage where the User failed to verify the payment support data before authorizing the payment.

3. PRICING PLANS AND PAYMENTS

The price, scope of features, document limits, number of locations, support level, document overage fees and any additional services are governed by the current price list published at https://biznow.eu, or by an individual price offer or order confirmed by the Provider.

The price list applicable at the time of the order or plan activation becomes part of the Agreement. In the event of a conflict, the order of documents set out in Section 8 of these Terms applies.

The Provider may change the price list prospectively. A change in the price of an existing paid subscription will generally be communicated to the User at least 30 days in advance, unless the change is required by law, a tax change or an individual agreement. If the User disagrees with the change, the User may cancel the subscription before the change becomes effective.

Payment Terms

• Payment Gateway: Stripe (third party)
• Billing: Monthly subscription and any applicable overage or additional fees under the current price list or individual agreement
• VAT: Added to price according to current legislation
• Payment Methods: Credit/debit card
• Automatic Renewal: Subscription automatically renews each month

The BizNow subscription is linked to a specific company created by the user in the application. The provider is entitled to charge the price for the Service after the trial period ends if the user does not delete the company, cancel the subscription or agree otherwise with the provider before the trial period ends.

Document Counting

Counted documents:

• ✅ Received invoices
• ✅ Issued invoices
• ✅ Cash documents
• ✅ Delivery slips
• ✅ Deposit invoices
• ✅ Salary documents
• ✅ Uploaded attachments

Not counted:

• ❌ System reports
• ❌ Excel exports
• ❌ PDF exports of overviews
• ❌ Data backups

Overage and Counter Reset

• Document count resets on the 1st day of each month
• Deleted documents are not counted
• Overage is billed at end of month
• Payment is processed automatically via Stripe

Non-Payment and Service Suspension

3A. REGISTRATION AND ACCOUNT

Registration Requirements

To create an account you must:

• ✅ Be a self-employed individual over 18 years of age, a legal entity, or a person authorized to act on behalf of such entity
• ✅ Provide truthful, accurate and current information
• ✅ Have a valid email address
• ✅ Have the opportunity to review these Terms before using the Service
• ✅ Agree to Privacy Policy

Account Responsibility

The User is solely responsible for the account, its content, data and uploaded documents.

Company Cancellation

You may cancel any company within your account at any time. The BizNow subscription and Service billing are linked to the existence of a specific company in the application.

Deleting a company in the application also terminates the provision of the Service and the subscription linked to that company. By deleting the company, the possibility of further paid use of the Service for that company ends.

If the user deletes the company during the trial period, the trial period for that company ends and no paid subscription arises for the deleted company after the trial period.

If the user deletes the company during a paid period, the subscription for that company ends on the date of deletion, while already paid or invoiced subscription fees for the current period are not refunded due to the nature of the monthly subscription, unless the provider and the user agree otherwise. We therefore recommend cancelling a company at the end of a calendar month.

Company deletion is irreversible. Deleting a company permanently removes the company registration in the Service, its settings, users assigned to the company, documents, data, attachments and other content linked to that company. Before deleting a company, the user is responsible for exporting all data, records and documents that the user needs to retain.

Account Cancellation

You may cancel your account at any time by sending a request to: support@cywo.tech.

After receipt of the account cancellation request, the account will be cancelled no later than on the last day of the calendar month in which the request was sent. If the request is sent during the last three days of a calendar month, the account will be cancelled no later than on the last day of the following calendar month.

3B. SERVICE USAGE

Permitted Use

You may use BizNow for:

• ✅ Managing your company finances
• ✅ Processing business documents
• ✅ Generating reports and overviews
• ✅ Managing clients and employees
• ✅ Exporting data for accounting purposes

Prohibited Use

Consequences of Violation

Violation of these terms may result in:

• ⚠️ Immediate account blocking
• ⚠️ Data deletion
• ⚠️ Legal action
• ⚠️ Ban on future registration

3C. INTELLECTUAL PROPERTY

Service Ownership: All rights to BizNow (code, design, logo, trademark) are property of CyWo Tech, a. s.

User License: We grant you a non-exclusive, non-transferable, revocable license to use BizNow in accordance with these terms.

Data Ownership: Your data remains your property. We make no claim to your business information, documents or records.

We have the right to:

• Process your data to provide the Service
• Create anonymized statistics (without user identification)
• Backup data for technical purposes

3D. USER RESPONSIBILITY AND THIRD-PARTY CLAIMS

The User represents and warrants that the User is entitled to upload, store, process and use all data, documents and personal data entered into the Service and that the User has the necessary legal basis, consents or other authorizations for such processing.

The User is responsible for the lawfulness of the User’s instructions, the content of uploaded data and compliance with third-party rights, in particular personal data protection rules, trade secrets, copyright and other intellectual property rights.

To the extent permitted by applicable law, the User shall compensate the Provider for damage and reasonably incurred costs arising in direct causal connection with the User’s breach of these obligations or with a legitimate third-party claim caused by unlawful content or instructions of the User. This provision does not apply to the extent the damage was caused by the Provider’s own breach of obligations.

4. LIMITATION OF LIABILITY

5. DATA PROTECTION (GDPR)

Details about personal data protection can be found in Privacy Policy.

5A. DATA SECURITY

Security Measures

• 🔒 Appropriate technical and organizational measures: The Provider protects the Service and User data with measures appropriate to the nature of the processed data and related risks.
• 🔒 Encryption in transit: Communication with the Service is protected using SSL/TLS.
• 🔒 Authentication: Access to the Service is protected by a user account and password, and potentially by additional mechanisms available in the application.
• 🔒 Data separation: The Service uses technical mechanisms to separate data of individual organizations and users.
• 🔒 Backups: The Provider performs technical backups to the extent necessary for operation and restoration of the Service.
• 🔒 Own AI/OCR processing: Automated document processing is carried out through the Provider’s own software/hardware or own/customized models, not through public AI services such as OpenAI or Claude AI.

Your Responsibilities

Security Incident

In the event of a security incident or personal data breach, the Provider will proceed in accordance with applicable laws, in particular GDPR. Where the Provider acts as a processor, it will notify the relevant client as controller without undue delay after becoming aware of the incident. Where the Provider acts as a controller, it will assess the risk of the incident and fulfil any notification obligations towards the supervisory authority and data subjects under GDPR.

5B. DATA RETENTION AND DELETION

General Rule

Data assigned to a specific company is retained while the company exists in the Service. The Provider does not provide a statutory archiving service for the User’s accounting records. The User is responsible for the timely export, retention and archiving of the User’s accounting, tax and other documents for the periods required by applicable law. The User’s legal obligation to retain its own accounting or tax records does not create an obligation for the Provider to retain such data after termination of the Service or deletion of the company from the Service.

Unified Data Retention Table

Company Deletion by User

If the User manually deletes a company, database records assigned to that company will be removed from the production database and files stored in the Service storage, in particular PDF documents, invoices, attachments, images and other uploaded files, will be deleted from the production storage without undue delay. Company deletion is irreversible and may include deletion of the company registration, settings, users assigned to the company, documents, attachments and other content linked to that company. Some technical database data may remain temporarily contained in automatic database backups of the infrastructure provider for up to 7 days; these backups are not intended for individual restoration of data of a deleted company at the User’s request.

Before deleting a company, the User is obliged to export all data, documents and records that the User needs to retain for accounting, tax, legal or internal purposes.

Account Cancellation upon Request

After receiving a request to cancel an account, the Provider will cancel the account no later than on the last day of the calendar month in which the request was received. If the request is received during the last three days of a calendar month, account cancellation may be performed no later than by the end of the following calendar month.

Unpaid Subscription

• After 21 days of delay, the company may be switched to read-only mode and uploading or creating new documents may be restricted.
• If the delay continues, the Provider may subsequently fully block access to the company.
• If the subscription is not renewed within 3 months from the first restriction of the Service, the Provider may, after prior notice, permanently delete the company and all data, documents, invoices, attachments and other content uploaded to or created in the Service by the User. The User is responsible for the timely export and archiving of data and documents that the User is required to retain under applicable law. Deletion does not apply to data and documents that the Provider is required to retain in its own name under applicable law, in particular the Provider’s own accounting, invoicing and tax records, or to data whose retention is necessary for the protection or enforcement of the Provider’s legal claims.

Right to Account Deletion

You may request deletion of your account at any time by sending a request to support@cywo.tech.

5C. SERVICE AVAILABILITY (SLA)

Target Uptime

The Provider will use reasonable efforts to maintain Service availability at 99.5% monthly uptime. This value represents an availability target, not a guaranteed SLA, unless otherwise agreed with the User in writing.

Planned Maintenance

• 📅 The Provider will use reasonable efforts to announce planned maintenance in advance, generally at least 48 hours in advance where circumstances allow.
• ⏰ Maintenance is usually performed outside normal business hours or during lower Service load.
• ⏱️ In necessary cases, maintenance may be performed without prior notice, especially for security or operational reasons.

Unplanned Outages

In the event of an outage, the Provider will, according to its technical capabilities, work to restore the Service and inform Users in an appropriate manner, especially in the case of longer or significant outages.

SLA Exclusions

• Planned maintenance and security interventions.
• Outages caused by third parties, infrastructure, networks, payment gateways or services outside the Provider’s reasonable control.
• Incidents caused by the User’s configuration, device, network or intervention.
• Force majeure events, cyberattacks, power outages, natural disasters, war events or actions of public authorities.

5D. CHANGES TO TERMS

CyWo Tech, a. s. may amend these Terms, in particular due to changes in law, Service functionality, business model, security requirements or technical infrastructure.

Notification

The User will generally be informed of material changes that adversely affect existing User rights or obligations at least 30 days in advance by an appropriate means, in particular by email, in-app notification or publication of the new version on the Provider’s official website.

Where earlier effectiveness is necessary due to a legal obligation, decision of a public authority, security incident, vulnerability, protection of the Service or Users, a change of a critical third-party provider or another urgent reason, the change may become effective earlier or immediately. The Provider will inform the User without undue delay where circumstances allow.

Acceptance of Changes

If the User disagrees with a material change, the User may cancel the subscription before the change becomes effective. Continued use of the Service after the change becomes effective constitutes acceptance of the new wording to the extent permitted by applicable law.

5E. SWITCHING PROVIDER AND DATA PORTABILITY (EU DATA ACT)

This Section governs the User’s rights and the Provider’s obligations when switching providers of data processing services to the extent Regulation (EU) 2023/2854 (Data Act) applies to the Service. These switching terms form part of the Agreement and are made available to the User in a manner that allows them to be stored and reproduced.

Switching Request

The User may request to switch to another provider of data processing services, to port all exportable data and digital assets to the User’s own on-premises ICT infrastructure, or to erase the User’s exportable data and digital assets. A request may be submitted through a function available in the Service or to support@cywo.tech; when switching to another provider, the User will provide the information necessary to identify the destination provider and reasonable cooperation.

The maximum notice period for initiation of the switching process will not exceed two months. Where the Agreement or selected plan permits a shorter period, the shorter period applies.

Transitional Period and Assistance

After the applicable notice period, the Provider will enable the switching process without undue delay and generally no later than within the mandatory maximum transitional period of 30 calendar days. During the transitional period the Agreement remains applicable and the Provider will, to a reasonable extent, assist the User and third parties authorized by the User, act with due care to maintain continuity of the Service functions, provide information on known risks to continuity, and maintain an appropriate level of security for data being transferred and temporarily retained.

If completion of the switching process within 30 calendar days is technically unfeasible, the Provider will notify the User within 14 working days of receiving the request, state the reasons and indicate an alternative transitional period not exceeding seven months. The User also has the right to extend the transitional period once for a period the User considers appropriate for its own purposes, to the extent required by the Data Act.

Exportable Data and Digital Assets

For the purposes of this Section, the User’s exportable data means input and output data, including relevant metadata, directly or indirectly generated by the User’s use of the Service, excluding assets or data protected by intellectual property rights or constituting trade secrets of the Provider or a third party. Categories of exportable data include:

• company identification, organizational and User-entered configuration data to the extent transferable under applicable law,
• data relating to clients, suppliers, contact persons, employees and other business partners stored by the User,
• documents, invoices, cash receipts, delivery notes, advance and payroll documents, attachments and other content uploaded or created by the User,
• structured or extracted document data, categorizations, User-created settings, templates and other data generated through use of activated Service functions,
• bank and transaction data available to the User in the Service to the extent transferable under the relevant integration, applicable law and technical capabilities,
• output data and relevant metadata relating to the User’s data to the extent they meet the definition of exportable data under the Data Act.

To the extent permitted by applicable law, excluded categories include in particular the Service’s source code and executable components, algorithms, internal models and model parameters, internal architecture, security mechanisms, internal operational or security data and logs that do not constitute the User’s exportable data, aggregated or anonymized statistics, and other data or digital assets protected by intellectual property rights or trade secrets of the Provider or third parties. Such exclusions must not prevent or unduly delay a switching process required by law.

Formats, Interfaces and Technical Information

The Provider will enable an export of the User’s exportable data in supported machine-readable formats. Current procedures, supported methods and formats, known technical limitations and relevant information on data structures and interoperability are made available in the Service, technical documentation or on BizNow’s official website and, upon request, will be provided to the User before the switching process begins.

To the extent required by directly applicable law, the Provider will make the relevant open interfaces and necessary technical information available to the User and the relevant destination provider free of charge for the purposes of data portability and interoperability. The Provider does not guarantee that a third-party destination service will be able to import all data, preserve its presentation or reproduce BizNow functionality where such result depends on the destination provider or its technical solution.

Retrieval Period, Erasure and Charges

After the agreed transitional period ends, the User will be provided with a period of at least 30 calendar days to retrieve the exportable data, unless a longer period is required by law or individually agreed. Following successful completion of the switching process and expiry of that period, the Provider will erase the exportable data and digital assets, except for data that the Provider is required to retain in its own name under applicable law or that must be retained for the protection of legal claims, or where the parties agree on a later erasure date.

The Provider does not charge a separate fee for the standard switching process or the standard export of exportable data. Regular Service fees remain payable during the notice and transitional periods in accordance with the Agreement. Separately ordered professional, integration or migration services beyond the statutory switching process may be charged only under a separate agreement and to the extent permitted by applicable law.

6. TERMINATION

Termination by User

You may cancel subscription at any time:

• In account settings
• By email to support@cywo.tech
• Effective: At end of current billing period

Termination by Provider

We may terminate your access in case of:

• ❌ Violation of Terms of Service
• ❌ Continued payment default under the non-payment regime set out in Section 3
• ❌ Illegal activity
• ❌ Service abuse

Notice: 14 days in advance (except serious violation).

Service Termination

CyWo Tech, a. s. reserves the right to discontinue BizNow as a whole. Where objectively possible, the Provider will:

• 📧 provide at least 90 days’ notice of the planned discontinuation,
• 💰 refund the pro-rata portion of prepaid and unused subscription fees where the discontinuation was not caused by the User’s breach, and
• 📥 provide a reasonable opportunity to export data to the extent technically available.

The 90-day period does not apply where compliance is objectively impossible, in particular due to a legal obligation or decision of a public authority, a serious security incident, force majeure or sudden unavailability of critical third-party infrastructure. In such a case, the Provider will inform the User and enable data export to a reasonable extent as soon as circumstances allow.

7. DISPUTE RESOLUTION

Governing Law and Dispute Resolution

The contractual relationship between the Provider and the User is governed by the laws of the Slovak Republic, in particular, but not exclusively, Act No. 513/1991 Coll., the Commercial Code, as amended. The courts of the Slovak Republic having subject-matter and territorial jurisdiction shall have exclusive jurisdiction over disputes arising out of the Agreement or in connection with the Service, unless mandatory law or directly applicable European Union law provides otherwise. Proceedings before Slovak courts are governed by the applicable procedural laws, in particular Act No. 160/2015 Coll., the Civil Dispute Procedure Code, as amended.

Out-of-Court Resolution

Before initiating court proceedings, we recommend:

1. Contact our support: support@cywo.tech
2. Mediation (Slovak Chamber of Commerce and Industry)
3. Negotiation between authorized representatives of the contractual parties with the aim of resolving the dispute amicably

8. MISCELLANEOUS

Entire Agreement

These Terms together with the price list, confirmed order, any individual agreement, Privacy Policy and any data processing agreement constitute the agreement between the User and the Provider concerning the use of the Service.

Order of Documents

In the event of a conflict between an individual written agreement, confirmed order or price offer, price list and these Terms, the individual written agreement shall prevail, followed by the confirmed order or price offer, followed by the price list and then these Terms, unless expressly agreed otherwise.

Delivery of Notices

Provider notices may be delivered by e-mail to the address listed in the User account, by in-app notice or by publication on the Provider’s website. A notice sent by e-mail is deemed delivered at the moment of sending unless the Provider receives an automatic non-delivery message. The User is responsible for the accuracy and validity of their e-mail address.

Invalidity of Provisions

If any provision is invalid or unenforceable, this does not affect the validity of the remaining provisions. The invalid or unenforceable provision shall be replaced by a provision that most closely reflects its purpose.

Assignment of Rights

The User is not entitled to assign any rights or obligations arising from these Terms to a third party without the Provider’s prior written consent.

Temporary Suspension of the Service

The Provider reserves the right to temporarily restrict or interrupt the provision of the Service for technical, security, legal or operational reasons. The User will be informed of any material restriction in an appropriate manner where circumstances allow.

Language Version

In case of conflict between Slovak and English versions, the Slovak version prevails. The English version serves as a reference translation.

Effectiveness of Terms

These Terms become effective on the date of publication on www.cywo.tech or another official website of the Provider and replace all previous versions.

Effective Date: September 28, 2026
Version: 1.3

2. PRIVACY POLICY (GDPR COMPLIANT)

Version: 1.3
Effective Date: September 28, 2026

1. DATA CONTROLLER AND PROCESSOR

Name: CyWo Tech, a. s.
Company ID: 51 462 699
Registered Office: Pri Tureckom kopci 769/9, Most pri Bratislave 900 46, Slovak Republic
Email: support@cywo.tech
Contact for personal data protection matters: support@cywo.tech
Web: https://cywo.tech

Roles in Personal Data Processing

The User is responsible for ensuring that personal data uploaded to or processed in the Service is processed on an appropriate lawful basis and in accordance with applicable laws.

2. WHAT PERSONAL DATA WE PROCESS

Registration Data:

• Name and surname (or company name)
• Email (for login and communication)
• Password (securely hashed through the authentication infrastructure used by the Service)
• IP address (during registration and login)

Organization Data:

• Company name, Company ID, Tax ID, VAT number
• Address (registered office)
• Contact details
• Logo and stamp (optional)
• Bank accounts

Business Data:

• Clients: Company names, IDs, tax numbers, addresses
• Employees: Names, positions, salaries
• Invoices: Document numbers, amounts, VAT
• Uploaded files: PDF invoices, attachments

3. WHY WE PROCESS YOUR DATA

Note: The Provider’s accounting and invoicing data is retained based on legal obligations under accounting and tax laws. Data uploaded by the User into the Service is generally processed by the Provider as processor according to the User’s instructions.

4. WHO HAS ACCESS TO YOUR DATA

Processors and Subcontractors

AI/OCR Processing

BizNow uses its own or customized LLM/OCR models and its own software/hardware. User data is not sent to public AI services such as OpenAI, Claude AI or similar public AI platforms as part of standard OCR/AI processing and is not used to train public AI models.

4A. DATA PROCESSING AGREEMENT (DPA)

This section constitutes a data processing agreement under Article 28 GDPR for cases where CyWo Tech, a. s. processes personal data on behalf of the User as processor.

5. DATA TRANSFER OUTSIDE EU

5.1 Data Storage and Processing

The Provider aims to store and process User data within the European Union or the European Economic Area where permitted by the used infrastructure and contractual settings of subcontractors.

5.2 Exceptions and Technical Support

Some subcontractors, especially payment, email or support services, may process limited data outside the EU/EEA. In such cases, the Provider will ensure appropriate safeguards under GDPR, in particular standard contractual clauses or another valid transfer mechanism where required.

6. HOW LONG WE RETAIN DATA

6.1 During Active Account or Company

Data is retained during the active account, existence of an active company or provision of the Service to the extent necessary to provide the Service.

6.2 Unified Data Retention Table

Legal basis for technical logs and access records: the Provider’s legitimate interest under Article 6(1)(f) GDPR, in particular Service security, prevention of misuse, diagnostics and protection of legal claims.

6.3 Legal Claims

If there is a court dispute, complaint, security incident, tax audit or other legal reason, data may be retained for the period necessary to resolve the matter and protect rights and legitimate interests.

7. YOUR RIGHTS UNDER GDPR

7.1 Right of Access (Art. 15)

You have the right to know:

• ✅ What data we have about you
• ✅ How we use it
• ✅ Who we provide it to
• ✅ How long we retain it

How to request: Send an email to support@cywo.tech
Response: Without undue delay and no later than within one month of receipt of the request. Where permitted by GDPR, this period may be extended by a further two months taking into account the complexity and number of requests; the data subject will be informed of the extension and the reasons for it within one month of receipt of the request.

7.2 Right to Rectification (Art. 16)

You can correct:

• ✅ Inaccurate profile data
• ✅ Incorrect organization data
• ✅ Contact information

How: in your account settings or by email

7.3 Right to Erasure - "Right to Be Forgotten" (Art. 17)

You can request deletion:

• ✅ When data is no longer necessary
• ✅ If you withdraw consent (marketing)
• ✅ If processing was unlawful

Exception (we cannot delete):

• ❌ Invoices issued by the Provider and the Provider’s own accounting and tax records that the Provider is required to retain in its own name under applicable law, generally for 10 years
• ❌ Data necessary for the protection or enforcement of the Provider’s legal claims

How: Email to support@cywo.tech with request

7.4 Right to Data Portability (Art. 20)

To the extent Article 20 GDPR applies, you have the right to obtain an export of the User’s exportable data in supported machine-readable formats and, where the statutory conditions are met, to request transmission of such data to another controller.

The specific scope and format of the export depends on the type of data, the Service features activated and the technically supported export options. This provision is without prejudice to the User’s specific switching rights under Section 5E of these Terms.

How: Through an available export function in the Service or by email to support@cywo.tech.

7.5 Right to Restriction of Processing (Art. 18)

You can request suspension of processing:

• ⏸️ While we verify data accuracy
• ⏸️ If you object to processing
• ⏸️ While a legal dispute is resolved

Consequence: Data will only be stored, not actively processed

7.6 Right to Object (Art. 21)

You can object to:

• ❌ Marketing (immediate cessation)
• ❌ Profiling (if performed)
• ❌ Processing based on legitimate interest

Exception: You cannot object to processing necessary for contract performance

7.7 Right to Withdraw Consent (Art. 7(3))

You can withdraw anytime:

• 📧 Consent to marketing emails
• 📧 Consent to newsletter
• 📧 Consent to the processing of personal data

How: Click "Unsubscribe" in email or in account settings

7.8 Right to Lodge a Complaint (Art. 77)

If you suspect GDPR violation:

8. DATA SECURITY

8.1 Technical Measures

• 🔒 SSL/TLS encryption of data transmission
• 🔒 User authentication and access rights management
• 🔒 Technical separation of data of individual organizations
• 🔒 Backup and recovery to the extent necessary for Service operation
• 🔒 Monitoring and security measures appropriate to risks and technical capabilities
• 🔒 Own AI/OCR processing without sending client data to public AI services such as OpenAI or Claude AI

8.2 Organizational Measures

• 👤 Access to data only by authorized persons and only to the extent necessary for providing the Service or support
• 👤 Confidentiality obligations for persons with access to data
• 👤 Internal procedures for security incidents
• 👤 Reasonable control and management of subcontractors

8.3 Backup

The Provider performs technical backups to the extent necessary for operation and restoration of the Service. If deleted data is temporarily contained in technical backups, it is retained for up to 7 days unless longer retention is required by a legal claim, security incident or legal obligation.

8.4 Security Incident

In the event of a personal data breach, the Provider will proceed in accordance with GDPR. Where it acts as a processor, it will notify the User as controller without undue delay after becoming aware of the incident. Where it acts as a controller, it will assess the risk of the incident and fulfil any notification obligations towards the supervisory authority and data subjects.

9. PERSONS UNDER 18 AND PERSONAL DATA

10. CHANGES TO PRIVACY POLICY

10.1 Right to Change

We may update this policy when:

• 📋 Laws change (GDPR, Slovak regulations)
• 📋 New service features
• 📋 Technology changes

10.2 Change Notification

• 📧 Email at least 30 days in advance
• 🔔 In-app notification
• 📄 New version on website: https://cywo.tech

10.3 Effect of Changes

The updated Privacy Policy applies from its effective date. This Privacy Policy is informational in nature and its publication does not by itself replace the data subject’s consent where consent is required by applicable law. If a change in personal data processing requires the data subject’s consent, the Provider will obtain such consent separately.

11. CONTACT

General Privacy Questions

📧 Email: support@cywo.tech
🌐 Web: https://cywo.tech

Exercising GDPR Rights

📧 Email: support@cywo.tech
Please include:

• Your name and account email
• Specific right (access, deletion, etc.)
• Reason for request (optional)

Response: Without undue delay and no later than within one month of receipt of the request. Where permitted by Article 12(3) GDPR, this period may be extended by a further two months; the data subject will be informed of the extension and the reasons for it within one month of receipt of the request.

GDPR Complaints

12. FINAL INFORMATION

Effective Date: September 28, 2026
Version: 1.3
The full Privacy Policy can be found in the relevant policy document

3. COOKIE POLICY

Version: 1.3
Effective Date: September 28, 2026

1. WHAT ARE COOKIES

Cookies are small text files stored in your browser that allow websites to "remember" your settings and preferences.

2. WHAT COOKIES WE USE

Legal regime: Consent to the storage of or access to information through strictly necessary technical cookies is not required where such cookies are necessary for transmission of a communication or for providing a service explicitly requested by the User, in accordance with Section 109(8) of Slovak Act No. 452/2021 Coll. on Electronic Communications, as amended. Where personal data is processed through such cookies, the appropriate legal basis under GDPR applies, in particular performance of a contract or legitimate interest in the security and proper operation of the Service depending on the specific purpose of processing.

3. STRIPE COOKIES (Payments)

When paying via Stripe, Stripe cookies may be used for payment processing and fraud prevention.

More information: https://stripe.com/cookies-policy
Stripe Privacy Policy: https://stripe.com/privacy

4. SUPABASE COOKIES (Backend)

Supabase uses cookies for authentication:

More information: https://supabase.com/privacy

5. HOW TO MANAGE COOKIES

5.1 Blocking Cookies in Browser

You can disable cookies in your browser settings:

• Chrome: Settings → Privacy and security → Cookies
• Firefox: Options → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Cookies
• Edge: Settings → Privacy → Cookies

5.2 Deleting Cookies

You can delete cookies:

• In browser settings → Clear browsing data
• Using shortcut: Ctrl + Shift + Delete (Windows) or Cmd + Shift + Delete (Mac)

If the Provider starts using analytics, marketing or profiling cookies in the future, it will use them only after obtaining the relevant User consent where required by applicable law.

6. CHANGES TO COOKIE POLICY

If we change cookie usage, we will update this page and inform you:

• 📧 By email (for significant changes)
• 🔔 By in-app notification

7. CONTACT

Questions regarding cookies:

📧 Email: support@cywo.tech
🌐 Web: https://cywo.tech

Effective Date: September 28, 2026
Version: 1.3
Full Cookie Policy can be found in the the relevant policy document