🏢 BizNow - Právní dokumenty | Legal Documents

1. TERMS OF SERVICE & EULA

Introduction

This application is intended exclusively for self-employed individuals, legal entities and persons acting within their business or professional activity. The Service is not intended for consumers.

By entering into the Agreement, the User confirms that the Service is ordered and used exclusively in connection with the User’s business or professional activity and that the User is not acting as a consumer.

The contractual relationship between the user and the provider arises in particular upon user registration, creation of a user account, selection of a pricing plan, creation of a company in the application or commencement of use of the Service.

By creating a user account, selecting a pricing plan, creating a company in the application or starting to use the Service, the user confirms that they had the opportunity to review these Terms, understand them and agree to them. If the user does not agree to these Terms, the user is not entitled to use the Service, create a company in the application or use or activate the selected plan.

By creating a company in the application, the user declares that they are authorized to act on behalf of such company or are authorized to create and manage the company in the Service. The user is responsible for the accuracy of the information provided when creating the company and for all actions performed within that company in the Service.

If the user is granted a trial period upon registration or selection of a pricing plan, such trial period represents a free introductory period for the selected plan. The duration of the trial period and its end date are displayed to the user in the application or communicated by another appropriate means.

By selecting a pricing plan, the user acknowledges that after the trial period ends, use of the Service will continue as a paid monthly subscription under the selected plan, unless the user cancels the subscription before the end of the trial period, in particular by deleting the company in the application or by sending a cancellation request to support@cywo.tech, or unless otherwise agreed with the provider.

The contractual relationship between the user and the provider lasts for the entire period of an active account, active company or active subscription, depending on which circumstance is relevant for the respective part of the Service.

The contractual relationship between the User and the Provider is governed by the applicable provisions of Slovak Act No. 513/1991 Coll., Commercial Code, as amended.

If an account is created by a person outside the target group of the Service, the Provider is entitled to reject, restrict or cancel the account. The User declares that the Service is used within the User’s business or professional activity.

Version: 1.3
Effective Date: September 28, 2026

1.1 Service Provider

1.2 Definitions

• "Agreement" – legal relationship between Provider and User, which arises in the manner set out in these Terms, in particular by registration, selection of a pricing plan, creation of a company in the application or commencement of use of the Service.
• "Provider" – CyWo Tech, a. s., which provides the BizNow service.
• "BizNow" or "Service" - cloud based enterprise management system for managing finances, documents, clients, and employees
• "User" or "You" – a person using the Service
• "Account" - registered user account in the Service
• "Organization" - User's business entity registered in the Service
• "Personal Data" - data defined in GDPR (EU Regulation 2016/679)
• "Subscription" - paid access to the Service according to the chosen pricing plan
• "Data" - all information, documents and records entered by the User into the Service

1.3 Acceptance of Terms

The User expresses consent to these Terms in particular by registering, creating an account, logging into the Service, selecting a pricing plan, creating a company in the application, starting to use the Service or continuing to use the Service after having had the opportunity to review these Terms. By performing these actions, the User also confirms that if they do not agree to these Terms, they will not use the Service, create a company in the application or use the selected plan.

2. SERVICE DESCRIPTION

BizNow is a SaaS (Software as a Service) platform providing:

• ✅ Income and expense management
• ✅ Document processing (invoices, receipts, delivery notes, deposits, cash documents)
• ✅ Client and supplier management
• ✅ Employee and payroll management
• ✅ Financial overviews and reports
• ✅ Organizational hierarchy (Companies → Branches → Cash registers)
• ✅ User permissions and access control
• ✅ PDF document and attachment storage

2A. AUTOMATED PROCESSING, OCR AND AI OUTPUTS

Automated processing, OCR, categorization, data extraction, reports, alerts and AI recommendations are auxiliary and informational. They may contain errors, inaccuracies or incomplete data.

The User is obliged to verify the accuracy of Service outputs before using them for accounting, tax, legal, financial or business purposes. The Service does not provide legal, tax, accounting or financial advice and does not replace professional assessment by an accountant, tax advisor, auditor, lawyer or other qualified professional.

The Provider is not liable for damage caused by the use of unverified, incomplete or incorrectly interpreted Service outputs. The User is responsible for the final verification of data, its export to accounting systems and compliance with their legal obligations.

The Provider does not use User data to train public AI models. If the method of AI/OCR processing changes materially, the Provider will inform the User in an appropriate manner.

2B. ELECTRONIC INVOICES AND PAYMENT SUPPORT DOCUMENTS

The User is responsible for the factual, accounting, tax and legal accuracy of an electronic invoice, for the correct configuration of the User's organization and for reviewing the invoice before it is sent. The Provider is not liable for errors resulting from incorrect, incomplete or outdated data entered, uploaded or confirmed by the User.

Automated technical or formal validation of an electronic invoice by BizNow, a third-party provider or through the Peppol network does not constitute confirmation of the factual, accounting, tax or legal correctness of the invoice. The User remains responsible for such matters.

The availability of electronic invoicing functionality and delivery status may depend on third-party providers, the Peppol network or other systems outside the Provider's reasonable control. Confirmation of technical delivery does not by itself constitute acceptance, accounting recognition or payment of the invoice by its recipient.

For the purpose of providing electronic invoicing functionality, invoices, data contained in them and data concerning their sending, receipt or delivery may be disclosed to delivery or network service providers, Peppol infrastructure and competent public authorities where such disclosure is necessary to provide the functionality or is required by applicable law.

The Provider may change the delivery service provider, network or other technical infrastructure used for electronic invoicing during the term of the Agreement, in particular for technical, security, operational, legal or commercial reasons, provided that the scope of the Service is not materially reduced without reasonable grounds. Where such change requires the User's cooperation, the User shall provide it within a reasonable period.

Payment Support Documents and Read-Only Bank Data

Where BizNow displays bank account or transaction data, it does so on an informational read-only basis to the extent made available by the User and external providers. BizNow does not execute payments, hold funds or authorize payment transactions on behalf of the User.

Where BizNow generates a QR code, SEPA/XML file, bulk payment order or other payment support document, it is a technically generated document based on data available in the Service. Before confirming or sending a payment through the User's bank, the User must verify in particular the recipient, account number/IBAN, amount, currency, reference or variable symbol, due date and all other payment details. The User is responsible for the final authorization and correctness of the payment.

To the maximum extent permitted by applicable law, the Provider is not liable for an incorrectly executed payment, duplicate payment, payment to an incorrect account or other damage where the User failed to verify the payment support data before authorizing the payment.

3. PRICING PLANS AND PAYMENTS

The price, scope of features, document limits, number of locations, support level, document overage fees and any additional services are governed by the current price list published at https://biznow.eu, or by an individual price offer or order confirmed by the Provider.

The price list applicable at the time of the order or plan activation becomes part of the Agreement. In the event of a conflict, the order of documents set out in Section 8 of these Terms applies.

The Provider may change the price list prospectively. A change in the price of an existing paid subscription will generally be communicated to the User at least 30 days in advance, unless the change is required by law, a tax change or an individual agreement. If the User disagrees with the change, the User may cancel the subscription before the change becomes effective.

Payment Terms

• Payment gateway: Stripe (third party)
• Billing: Monthly subscription and any overage or additional-service fees according to the current price list or individual agreement
• VAT: Prices are stated exclusive of VAT. VAT or any similar tax will be charged in accordance with applicable tax laws. Where the reverse charge mechanism applies to the supply, the parties will proceed in accordance with applicable law.
• Payment methods: Credit/debit card or another method supported by the Provider
• Automatic renewal: The subscription renews automatically each month unless otherwise stated for a specific plan or individual agreement

The BizNow subscription is linked to a specific company created by the User in the application. The Provider is entitled to charge the price for the Service after the trial period ends if the User does not delete the company, cancel the subscription or agree otherwise with the Provider before the trial period ends.

Document Counting

Counted:

• ✅ Received invoices
• ✅ Issued invoices
• ✅ Cash documents
• ✅ Delivery notes
• ✅ Advance documents
• ✅ Payroll documents
• ✅ Uploaded attachments

Not counted:

• ❌ System reports
• ❌ Excel exports
• ❌ PDF report exports
• ❌ Data backups

Overage and Counter Reset

• Document count resets on the 1st day of each month
• Deleted documents are not counted
• Any overage fees are charged in accordance with the current price list or individual agreement
• Payment may be processed automatically through Stripe

Non-Payment and Service Suspension

3A. REGISTRATION AND ACCOUNT

Registration Requirements

To create an account you must:

• ✅ Be a self-employed individual over 18 years of age, a legal entity, or a person authorized to act on behalf of such entity
• ✅ Provide truthful, accurate and current information
• ✅ Have a valid email address
• ✅ Have the opportunity to review these Terms before using the Service
• ✅ Acknowledge the Privacy Policy

Account Responsibility

The User is solely responsible for the account, its content, data and uploaded documents.

Company Deletion

Deleting a company is a separate action from cancelling a subscription and cancelling the user account. You may delete any company within your account at any time. The BizNow subscription and Service billing are linked to the existence of a specific company in the application.

Deleting a company in the application also terminates the provision of the Service and the subscription linked to that company. By deleting the company, the possibility of further paid use of the Service for that company ends.

If the user deletes the company during the trial period, the trial period for that company ends and no paid subscription arises for the deleted company after the trial period.

If the user deletes the company during a paid period, the subscription for that company ends on the date of deletion, while already paid or invoiced subscription fees for the current period are not refunded due to the nature of the monthly subscription, unless the provider and the user agree otherwise. We therefore recommend cancelling a company at the end of a calendar month.

Company deletion is irreversible. Deleting a company permanently removes the company registration in the Service, its settings, users assigned to the company, documents, data, attachments and other content linked to that company. Before deleting a company, the user is responsible for exporting all data, records and documents that the user needs to retain.

User Account Cancellation

Cancelling the user account is a separate action from cancelling a subscription and deleting a company. You may cancel your account at any time by sending a request to: support@cywo.tech. Cancellation of the account does not affect any payment or other obligations of the User that have already arisen.

After receipt of the account cancellation request, the account will be cancelled no later than on the last day of the calendar month in which the request was sent. If the request is sent during the last three days of a calendar month, the account will be cancelled no later than on the last day of the following calendar month.

3B. SERVICE USAGE

Permitted Use

You may use BizNow for:

• ✅ Managing your company finances
• ✅ Processing business documents
• ✅ Generating reports and overviews
• ✅ Managing clients and employees
• ✅ Exporting data for accounting purposes

Prohibited Use

Consequences of Violation

Violation of these terms may result in:

• ⚠️ Immediate account blocking
• ⚠️ Data deletion
• ⚠️ Legal action
• ⚠️ Ban on future registration

3C. INTELLECTUAL PROPERTY

Service Ownership: All rights to BizNow (code, design, logo, trademark) are property of CyWo Tech, a. s.

User License: We grant you a non-exclusive, non-transferable, revocable license to use BizNow in accordance with these terms.

Data Ownership: Your data remains your property. We make no claim to your business information, documents or records.

We have the right to:

• Process your data to provide the Service
• Create anonymized statistics (without user identification)
• Backup data for technical purposes

3D. USER RESPONSIBILITY AND THIRD-PARTY CLAIMS

The User represents and warrants that the User is authorized to upload, store, process and use all data, documents and personal data placed into the Service and has the necessary legal basis, consents or other authorizations for such processing.

The User is responsible for the lawfulness of the User's instructions, uploaded content and compliance with third-party rights, in particular data protection rules, trade secrets, copyright and other intellectual property rights.

To the extent permitted by applicable law, the User shall compensate the Provider for damage and reasonably incurred costs directly resulting from the User's breach of these obligations or from a legitimate third-party claim caused by unlawful content or instructions of the User. This provision does not apply to the extent the damage was caused by the Provider's own breach of obligations.

4. LIMITATION OF LIABILITY

5. DATA PROTECTION (GDPR)

Details about personal data protection can be found in Privacy Policy.

5A. DATA SECURITY

Security Measures

• 🔒 Appropriate technical and organizational measures: The Provider protects the Service and User data with measures appropriate to the nature of the processed data and related risks.
• 🔒 Encryption in transit: Communication with the Service is protected using SSL/TLS.
• 🔒 Authentication: Access to the Service is protected by a user account and password, and potentially by additional mechanisms available in the application.
• 🔒 Data separation: The Service uses technical mechanisms to separate data of individual organizations and users.
• 🔒 Backups: The Provider performs technical backups to the extent necessary for operation and restoration of the Service.
• 🔒 Own AI/OCR processing: Automated document processing is carried out through the Provider’s own software/hardware or own/customized models, not through public AI services such as OpenAI or Claude AI.

Your Responsibilities

Security Incident

In the event of a security incident or personal data breach, the Provider will proceed in accordance with applicable laws, in particular GDPR. Where the Provider acts as a processor, it will notify the relevant client as controller without undue delay after becoming aware of the incident. Where the Provider acts as a controller, it will assess the risk of the incident and fulfil any notification obligations towards the supervisory authority and data subjects under GDPR.

5B. DATA RETENTION AND DELETION

General Rule

Data assigned to a specific company is retained while the company remains active in the Service. The Provider does not provide a statutory accounting-record archiving service for the User. The User is responsible for timely export, retention and archiving of the User's own accounting, tax and other documents for the periods required by applicable law. A statutory obligation of the User to retain its own accounting or tax documents does not constitute an obligation of the Provider to retain such data after termination of the Service or deletion of the company from the Service.

Unified Data Retention Table

Company Deletion by User

If the User manually deletes a company, database records assigned to that company will be removed from the production database and files stored in the Service storage, including PDF documents, invoices, attachments, images and other uploaded files, will be removed from production storage without undue delay. Company deletion is irreversible. Some technical database data may remain temporarily in automatic database backups of the infrastructure provider for up to 7 days; these backups are not intended for individual restoration of a deleted company's data at the User's request.

Before deleting a company, the User must export all data, records and documents that the User needs to retain for accounting, tax, legal or internal purposes.

Account Cancellation upon Request

After receipt of an account cancellation request, the Provider will cancel the account no later than the last day of the calendar month in which the request was received. If the request is received during the last three days of the calendar month, cancellation may take place no later than the end of the following calendar month.

Unpaid Subscription

• After 21 days of payment delay, the company may be switched to read-only mode and uploading or creating new documents may be restricted.
• If the delay continues, the Provider may subsequently fully block access to the company.
• If the subscription is not restored within 3 months from the first restriction of the Service, the Provider may, after prior notice, permanently delete the company and all data, documents, invoices, attachments and other content uploaded or created by the User. The User is responsible for timely export and archiving of data and documents that the User is legally required to retain. Deletion does not apply to data and documents that the Provider is legally required to retain in its own name, in particular the Provider's own accounting, invoicing and tax records, or to data whose retention is necessary for the protection or enforcement of the Provider's legal claims.

Right to Account Deletion

You may request deletion of your account at any time by sending a request to support@cywo.tech.

5C. SERVICE AVAILABILITY (SLA)

Target Uptime

The Provider will use reasonable efforts to maintain Service availability at 99.5% monthly uptime. This value represents an availability target, not a guaranteed SLA, unless otherwise agreed with the User in writing.

Planned Maintenance

• 📅 The Provider will use reasonable efforts to announce planned maintenance in advance, generally at least 48 hours in advance where circumstances allow.
• ⏰ Maintenance is usually performed outside normal business hours or during lower Service load.
• ⏱️ In necessary cases, maintenance may be performed without prior notice, especially for security or operational reasons.

Unplanned Outages

In the event of an outage, the Provider will, according to its technical capabilities, work to restore the Service and inform Users in an appropriate manner, especially in the case of longer or significant outages.

SLA Exclusions

• Planned maintenance and security interventions.
• Outages caused by third parties, infrastructure, networks, payment gateways or services outside the Provider’s reasonable control.
• Incidents caused by the User’s configuration, device, network or intervention.
• Force majeure events, cyberattacks, power outages, natural disasters, war events or actions of public authorities.

5D. CHANGES TO TERMS

CyWo Tech, a. s. may reasonably amend these Terms, in particular due to changes in law, Service features or delivery model, business model, security requirements or technical infrastructure.

Notification

The User will generally be informed at least 30 days in advance of material changes that adversely affect existing rights or obligations, in particular by email, in-app notification or publication of the new version on the Provider's official website.

Where earlier effectiveness is necessary due to a legal obligation, decision of a public authority, security incident or vulnerability, protection of the Service or Users, change of a critical third-party provider or another urgent reason, a change may take effect earlier or immediately. The Provider will inform the User without undue delay where circumstances permit.

Acceptance of Changes

If the User disagrees with a material change, the User may cancel the subscription before the change takes effect. By continuing to use the Service after the effective date of a change, the User accepts the new wording to the extent permitted by applicable law.

5E. SWITCHING PROVIDER AND DATA PORTABILITY (EU DATA ACT)

This Section governs the User's rights and the Provider's obligations when switching data processing service providers to the extent Regulation (EU) 2023/2854 (Data Act) applies to the Service. These terms form part of the Agreement and are made available to the User in a manner that enables storage and reproduction.

Switching Request

The User may request a switch to another data processing service provider, transfer of all exportable data and digital assets to the User's own on-premises ICT infrastructure, or erasure of exportable data and digital assets. The request may be submitted through a function available in the Service or to support@cywo.tech; where switching to another provider, the User shall provide the information necessary to identify the destination provider and reasonable cooperation.

The maximum notice or termination period for initiating the switching process will not exceed two months. Where the Agreement or selected plan allows a shorter period, the shorter period applies.

Transitional Period and Assistance

After the applicable notice period, the Provider will enable the switching process without undue delay and generally within a maximum transitional period of 30 calendar days. During the transitional period, the Agreement remains in force and the Provider will provide reasonable assistance to the User and authorized third parties, exercise due care to maintain continuity of Service functions, inform the User of known continuity risks and maintain an appropriate level of security for data being transferred or temporarily retained.

If completion of the switch within 30 calendar days is technically unfeasible, the Provider will inform the User within 14 working days after receipt of the request, state the reasons and propose an alternative transitional period not exceeding seven months. The User also has the right to extend the transitional period once for a period it considers appropriate to its needs to the extent required by the Data Act.

Exportable Data and Digital Assets

For this Section, exportable User data means input and output data, including relevant metadata, directly or indirectly generated by the User's use of the Service that does not constitute protected intellectual property rights or trade secrets of the Provider or a third party. Categories include in particular company identification and organizational data, client, supplier and other business-partner data, documents and attachments, structured or extracted document data, User-created settings and templates, transferable banking and transaction data and relevant metadata to the extent they meet the Data Act definition of exportable data.

To the extent permitted by law, export excludes in particular the Service's source code and executable components, algorithms, internal models and model parameters, internal architecture, security mechanisms, internal operational or security data and logs that do not constitute exportable User data, aggregated or anonymized statistics, and other data or digital assets protected by intellectual property rights or trade secrets of the Provider or third parties. Such exclusion must not prevent or unduly delay a lawful switching process.

Formats, Interfaces and Technical Information

The Provider will enable export of the User's exportable data in supported machine-readable formats. Current procedures, supported methods and formats, known technical limitations and relevant information concerning data structures and interoperability are made available in the Service, technical documentation or on the official BizNow website and will be provided to the User upon request before the switching process begins.

To the extent required by directly applicable law, the Provider will make relevant open interfaces and necessary technical information available to the User and the affected destination provider without a separate charge for the purposes of data portability and interoperability. The Provider does not warrant that a third-party destination service will be capable of importing all data, preserving its presentation or reproducing BizNow functionality where this depends on the destination provider or its technical solution.

Retrieval Period, Erasure and Charges

After the agreed transitional period ends, the User will be given at least 30 calendar days to retrieve exportable data unless applicable law or an individual agreement provides for a longer period. Following successful completion of the switch and expiry of that period, the Provider will erase exportable data and digital assets, except for data that the Provider is required to retain in its own name by law or whose retention is necessary for the protection of legal claims, or where the parties agree on a later erasure date.

The Provider does not charge a separate fee for the standard switching process and standard export of exportable data. Ordinary Service fees remain payable during the notice and transitional period under the Agreement. Separately ordered professional, integration or migration services beyond the statutory switching process may be charged only under a separate agreement and to the extent permitted by applicable law.

6. TERMINATION

Subscription Cancellation by User

Subscription cancellation is separate from company deletion and account cancellation. The User may cancel a subscription at any time in account settings or by email to support@cywo.tech. Unless otherwise agreed, cancellation is effective at the end of the current billing period.

Termination by Provider

The Provider may terminate access in particular in the event of a breach of these Terms, continuing payment default under Section 3, unlawful activity or misuse of the Service. Where reasonable in light of the nature of the breach, the Provider will generally provide 14 days' notice; this period does not apply to a material breach, security risk, unlawful conduct or where immediate restriction is required by law or for the protection of the Service, Users or third parties.

Service Termination

CyWo Tech, a. s. reserves the right to discontinue BizNow as a whole. Where objectively possible, the Provider will:

• 📧 provide at least 90 days' advance notice of the planned discontinuation,
• 💰 refund the proportionate part of prepaid and unused subscription fees where discontinuation was not caused by the User's breach, and
• 📥 provide a reasonable opportunity to export data in a technically available scope.

The 90-day period need not apply where compliance is objectively impossible, in particular because of a legal obligation or decision of a public authority, a serious security incident, force majeure or sudden unavailability of critical third-party infrastructure. In such a case, the Provider will inform the User and enable data export to a reasonable extent as soon as circumstances permit.

7. DISPUTE RESOLUTION

Governing Law and Dispute Resolution

The contractual relationship between the Provider and the User is governed by the laws of the Slovak Republic, in particular, but not exclusively, Slovak Act No. 513/1991 Coll., Commercial Code, as amended. The courts of the Slovak Republic having subject-matter and territorial jurisdiction shall have exclusive jurisdiction over disputes arising out of the Agreement or in connection with the Service, unless mandatory law or directly applicable European Union law provides otherwise. Proceedings before Slovak courts are governed by applicable procedural law, in particular Slovak Act No. 160/2015 Coll., Civil Dispute Procedure Code, as amended.

Out-of-Court Resolution

Before commencing court proceedings, we recommend:

1. contacting our support at support@cywo.tech,
2. using mediation or another appropriate amicable resolution method,
3. negotiation between authorized representatives of the parties with the aim of resolving the dispute amicably.

8. MISCELLANEOUS

Entire Agreement

These Terms together with the price list, confirmed order, any individual agreement, Privacy Policy and any data processing agreement constitute the agreement between the User and the Provider concerning the use of the Service.

Order of Documents

In the event of a conflict between an individual written agreement, confirmed order or price offer, price list and these Terms, the individual written agreement shall prevail, followed by the confirmed order or price offer, followed by the price list and then these Terms, unless expressly agreed otherwise.

Delivery of Notices

Provider notices may be delivered by e-mail to the address listed in the User account, by in-app notice or by publication on the Provider’s website. A notice sent by e-mail is deemed delivered at the moment of sending unless the Provider receives an automatic non-delivery message. The User is responsible for the accuracy and validity of their e-mail address.

Invalidity of Provisions

If any provision is invalid or unenforceable, this does not affect the validity of the remaining provisions. The invalid or unenforceable provision shall be replaced by a provision that most closely reflects its purpose.

Assignment of Rights

The User is not entitled to assign any rights or obligations arising from these Terms to a third party without the Provider’s prior written consent.

Temporary Suspension of the Service

The Provider reserves the right to temporarily restrict or interrupt the provision of the Service for technical, security, legal or operational reasons. The User will be informed of any material restriction in an appropriate manner where circumstances allow.

Language Version

In case of conflict between the Czech and English versions, the Czech version prevails. The English version serves as a reference translation.

Effectiveness of Terms

These Terms become effective on the date of publication on biznow.eu or another official website of the Provider and replace all previous versions.

Effective Date: September 28, 2026
Version: 1.3

2. PRIVACY POLICY (GDPR COMPLIANT)

Version: 1.3
Effective Date: September 28, 2026

1. DATA CONTROLLER AND PROCESSOR

Name: CyWo Tech, a. s.
Company ID: 51 462 699
Registered Office: Pri Tureckom kopci 769/9, Most pri Bratislave 900 46, Slovak Republic
Email: support@cywo.tech
Contact for personal data protection matters: support@cywo.tech
Web: https://cywo.tech

Roles in Personal Data Processing

The User is responsible for ensuring that personal data uploaded to or processed in the Service is processed on an appropriate lawful basis and in accordance with applicable laws.

2. WHAT PERSONAL DATA WE PROCESS

Registration Data:

• Name and surname (or company name)
• Email (for login and communication)
• Password (securely hashed through the authentication infrastructure in use)
• IP address (during registration and login)

Organization Data:

• Company name, Company ID, Tax ID / VAT ID
• Address (registered office)
• Contact details
• Logo and stamp (optional)
• Bank accounts

Business Data:

• Clients: Company names, IDs, tax numbers, addresses
• Employees: Names, positions, salaries
• Invoices: Document numbers, amounts, VAT
• Uploaded files: PDF invoices, attachments

3. WHY WE PROCESS YOUR DATA

Commercial Communications in the Czech Republic

Electronic commercial communications are sent in accordance with applicable legal regulations, in particular Czech Act No. 480/2004 Coll., on Certain Information Society Services. Under the conditions of Section 7(3) of that Act, the Provider may send existing customers commercial communications concerning its own similar products or services, provided that the customer had the opportunity to refuse such use of the electronic contact when it was obtained and in each individual commercial communication. In other cases, commercial communications will be sent on the basis of prior consent where required by applicable law. A simple and free means of refusing further commercial communications will be provided.

Note: The Provider’s accounting and invoicing data is retained based on legal obligations under accounting and tax laws. Data uploaded by the User into the Service is generally processed by the Provider as processor according to the User’s instructions.

4. WHO HAS ACCESS TO YOUR DATA

Processors and Subcontractors

AI/OCR Processing

BizNow uses its own or customized LLM/OCR models and its own software/hardware. User data is not sent to public AI services such as OpenAI, Claude AI or similar public AI platforms as part of standard OCR/AI processing and is not used to train public AI models.

4A. DATA PROCESSING AGREEMENT (DPA)

This Section constitutes a data processing agreement under Article 28 GDPR where CyWo Tech, a. s. processes personal data on behalf of the User as processor.

5. DATA TRANSFER OUTSIDE EU

5.1 Data Storage and Processing

The Provider aims to store and process User data within the European Union or the European Economic Area where permitted by the used infrastructure and contractual settings of subcontractors.

5.2 Exceptions and Technical Support

Some subcontractors, especially payment, email or support services, may process limited data outside the EU/EEA. In such cases, the Provider will ensure appropriate safeguards under GDPR, in particular standard contractual clauses or another valid transfer mechanism where required.

6. HOW LONG WE RETAIN DATA

6.1 During Active Account or Company

Data is retained during the active account, existence of an active company or provision of the Service to the extent necessary to provide the Service.

6.2 Unified Data Retention Table

Legal basis for technical logs and access records: the Provider’s legitimate interest under Article 6(1)(f) GDPR, in particular Service security, prevention of misuse, diagnostics and protection of legal claims.

6.3 Legal Claims

If there is a court dispute, complaint, security incident, tax audit or other legal reason, data may be retained for the period necessary to resolve the matter and protect rights and legitimate interests.

7. YOUR RIGHTS UNDER GDPR

7.1 Right of Access (Art. 15)

You have the right to request information on whether and what personal data we process about you, for what purposes, to whom it is disclosed and how long it is retained.

How to request: by email to support@cywo.tech
Response: Without undue delay and no later than one month after receipt of the request. Where permitted by GDPR, this period may be extended by a further two months taking into account the complexity and number of requests; the data subject will be informed of the extension and reasons within one month after receipt of the request.

7.2 Right to Rectification (Art. 16)

You may request correction of inaccurate or completion of incomplete personal data, or amend available account data directly where the Service allows it.

7.3 Right to Erasure - "Right to Be Forgotten" (Art. 17)

You may request erasure in particular where the data is no longer necessary, where consent is withdrawn for processing based on consent, or where processing was unlawful.

Exceptions may include in particular:

• ❌ invoices issued by the Provider and the Provider's own accounting and tax records that the Provider is required to retain in its own name under applicable law, generally for 10 years,
• ❌ data necessary for the protection or enforcement of the Provider's legal claims.

7.4 Right to Data Portability (Art. 20)

To the extent Article 20 GDPR applies, you have the right to obtain an export of the User's exportable data in supported machine-readable formats and, where the legal conditions are met, request its transfer to another controller.

The specific scope and format of an export depends on the type of data, activated Service features and technically supported export options. This does not affect the User's separate switching rights under Section 5E of the Terms.

7.5 Right to Restriction of Processing (Art. 18)

You may request restriction of processing under the conditions set out in GDPR.

7.6 Right to Object (Art. 21)

Under the conditions of GDPR, you may object to processing based on legitimate interests and may object to direct marketing at any time.

7.7 Right to Withdraw Consent (Art. 7(3))

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

7.8 Right to Lodge a Complaint (Art. 77)

You have the right to lodge a complaint with the competent supervisory authority. Depending on the processing circumstances, the following may be relevant in particular:

8. DATA SECURITY

8.1 Technical Measures

• 🔒 SSL/TLS encryption of data transmission
• 🔒 User authentication and access rights management
• 🔒 Technical separation of data of individual organizations
• 🔒 Backup and recovery to the extent necessary for Service operation
• 🔒 Monitoring and security measures appropriate to risks and technical capabilities
• 🔒 Own AI/OCR processing without sending client data to public AI services such as OpenAI or Claude AI

8.2 Organizational Measures

• 👤 Access to data only by authorized persons and only to the extent necessary for providing the Service or support
• 👤 Confidentiality obligations for persons with access to data
• 👤 Internal procedures for security incidents
• 👤 Reasonable control and management of subcontractors

8.3 Backup

The Provider performs technical backups to the extent necessary for operation and restoration of the Service. If deleted data is temporarily contained in technical backups, it is retained for up to 7 days unless longer retention is required by a legal claim, security incident or legal obligation.

8.4 Security Incident

In the event of a personal data breach, the Provider will proceed in accordance with GDPR. Where it acts as a processor, it will notify the User as controller without undue delay after becoming aware of the incident. Where it acts as a controller, it will assess the risk of the incident and fulfil any notification obligations towards the supervisory authority and data subjects.

9. PERSONS UNDER 18 AND PERSONAL DATA

10. CHANGES TO PRIVACY POLICY

We may update this Privacy Policy in particular due to changes in law, Service features, technologies used or personal-data processing activities. We will inform Users of material changes by reasonable means, in particular by email, in-app notification or publication of a new version on the official website.

10.3 Effectiveness of Changes

The updated Privacy Policy applies from its effective date. This Policy is informational and its publication does not by itself replace data-subject consent where consent is required by applicable law. If a change in personal-data processing requires consent, the Provider will request such consent separately.

11. CONTACT

General Privacy Questions

📧 Email: support@cywo.tech
🌐 Web: https://cywo.tech

Exercising GDPR Rights

📧 Email: support@cywo.tech
Please include:

• Your name and account email
• Specific right (access, deletion, etc.)
• Reason for request (optional)

Response: Without undue delay and no later than one month after receipt of the request. Where permitted by Article 12(3) GDPR, the period may be extended by a further two months; the data subject will be informed of the extension and reasons within one month after receipt of the request.

GDPR Complaints

12. FINAL INFORMATION

Effective Date: September 28, 2026
Version: 1.3
The full Privacy Policy can be found in the relevant policy document

3. COOKIE AND SIMILAR TECHNOLOGIES POLICY

Version: 1.3
Effective Date: September 28, 2026

1. WHAT ARE COOKIES

Cookies are small text files stored in your browser. BizNow may also use similar technologies, in particular localStorage, to retain technical settings and User preferences.

2. WHAT COOKIES AND SIMILAR TECHNOLOGIES WE USE

Legal regime: The storage and use of necessary technical cookies and similar technologies is carried out in accordance with Section 89(3) of Czech Act No. 127/2005 Coll., on Electronic Communications. Where personal data is processed through these technologies, such processing is carried out on the appropriate legal basis under GDPR.

3. STRIPE COOKIES (Payments)

When paying via Stripe, Stripe cookies may be used for payment processing and fraud prevention.

More information: https://stripe.com/cookies-policy
Stripe Privacy Policy: https://stripe.com/privacy

4. SUPABASE COOKIES (Backend)

Supabase uses cookies for authentication:

More information: https://supabase.com/privacy

5. HOW TO MANAGE COOKIES

5.1 Blocking Cookies in Browser

You can disable cookies in your browser settings:

• Chrome: Settings → Privacy and security → Cookies
• Firefox: Options → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Cookies
• Edge: Settings → Privacy → Cookies

5.2 Deleting Cookies

You can delete cookies:

• In browser settings → Clear browsing data
• Using shortcut: Ctrl + Shift + Delete (Windows) or Cmd + Shift + Delete (Mac)

If the Provider starts using analytics, marketing or profiling cookies in the future, it will use them only after obtaining the relevant User consent where required by applicable law.

6. CHANGES TO COOKIE POLICY

If we change cookie usage, we will update this page and inform you:

• 📧 By email (for significant changes)
• 🔔 By in-app notification

7. CONTACT

Questions regarding cookies:

📧 Email: support@cywo.tech
🌐 Web: https://cywo.tech

Effective Date: September 28, 2026
Version: 1.3
The full Cookie and Similar Technologies Policy can be found in the relevant policy document