Terms and Conditions

1. General provisions

1.1 Service Provider

1.2 Definitions

• Provider: The operator of the Taxorio service set out in Art. 1.1
• User: A natural or legal person who uses the Taxorio service
• Consumer: A natural person acting outside the scope of their business activity
• Entrepreneur: A natural or legal person acting within the scope of their business activity (self-employed person/OSVČ, limited liability company/s.r.o., joint-stock company/a.s., etc.)
• Digital service: A service within the meaning of Section 2389a(2) of Act No. 89/2012 Coll. (the Civil Code), which enables the User to create, process and store data in digital form or to access such data
• Service / Application: The Taxorio web application available at https://www.taxorio.cz and https://app.taxorio.cz
• Account: A user account created by registration via Google OAuth or by using an email address and password
• Free plan: The free version of the service with limited features
• Pro plan: The paid version of the service with the full range of features for a monthly/annual subscription
• Content: All data, documents, invoices, expenses and files uploaded by the User to the application
• DPA: The Data Processing Agreement pursuant to Art. 28 of the GDPR, the text of which forms part of Article 9 of these terms

1.3 Exclusively B2B nature of the service — exclusion of consumers

1.4 Subject matter of the contract and contract type

These terms and conditions govern the contractual relationship between the Provider and the User in the provision of the Taxorio service. This contract is a contract for the provision of digital content and digital services within the meaning of Section 2389a et seq. of Act No. 89/2012 Coll., the Civil Code (hereinafter the "Civil Code"), as amended with effect from 6 January 2023.

Since the service is provided as continuous performance throughout the duration of the obligation (the subscription), the Provider is responsible for ensuring that the digital service is free of defects for the entire duration of the obligation to the extent set out in these terms and the applicable legal regulations.

The service includes:

• Issuing invoices and quotes for self-employed persons (OSVČ)
• Recording expenses and income
• AI document recognition (OCR)
• Exporting data into XML format for EPO (electronic submissions to the tax office)
• Generating PDF invoices
• Storage of scanned documents

2. Formation and termination of the contract

2.1 Registration and formation of the contract

• A contract for free use (Free plan) is formed upon completion of registration via a Google account or by using an email address and password
• A contract for a paid subscription (Pro plan) is formed by a binding order confirmed by the "Pay now" button within the meaning of Section 1826a(2) of the Civil Code, upon the confirmation of which the User is bound to pay
• By registering and completing the order, the User confirms that they have acquainted themselves with these terms and conditions, including the DPA (Art. 9), and that they agree with them
• Without undue delay after conclusion of the contract, the Provider will send the User the textual wording of the terms and conditions in PDF format to their email address
• The User is obliged to provide true, accurate and current information
• The Provider reserves the right to refuse registration without stating a reason

2.2 Termination of the subscription and the fate of data

• The User may: Cancel their subscription at any time in Settings → Subscription; access to Pro features lasts until the end of the paid period, after which the account reverts to the Free plan
• The User may delete the account: By completely deleting the account in the application settings with immediate effect
• The Provider may: Terminate the User's account with a 30-day notice period, or immediately in the event of a material breach of these terms
• Upon termination of the Pro plan, subscription fees already paid are non-refundable (see Art. 4.5)

3. Rights and obligations of the User

3.1 The User has the right

• To use the service in accordance with these terms and the chosen plan
• To export their data at any time
• To delete their account at any time
• To contact technical support at info@taxorio.cz
• To exercise rights arising from defective performance in accordance with these terms and the applicable legal regulations

3.2 The User is obliged

• To verify the correctness of all data: The User is solely responsible for the correctness of issued invoices, recorded expenses and exported data; the application's outputs must be checked before being used or sent to third parties (the tax office, business partners)
• Not to provide access to third parties: The account is personal and non-transferable
• To protect their login credentials: The User is liable for misuse of the account arising from the User's negligence
• To comply with the laws of the Czech Republic: In particular the VAT Act, the Accounting Act and tax regulations
• To ensure their own archiving of data: The User is obliged to continuously export and back up their data outside the Taxorio application; the User is responsible for fulfilling the statutory archiving obligation
• Not to use the service for unlawful purposes: Including tax evasion, money laundering, etc.
• Not to overload the service: By automated scripts, scraping, DDoS attacks, etc.

3.3 The User is prohibited from

• Reverse-engineering the application
• Decompiling, disassembling or otherwise attempting to obtain the source code
• Circumventing the security mechanisms of the service or carrying out automated data extraction (scraping) from the application's interface
• Exceeding reasonable limits on calls to the application's API in a manner capable of overloading the Provider's infrastructure
• Sharing, leasing or selling their account to third parties
• Using the service for the commercial provision of services to third parties (white-label) without written consent
• Uploading malicious software, viruses or other dangerous content

In the event of a breach of the prohibitions set out in this article, the Provider is entitled to immediately terminate the user account without compensation and without any obligation to refund prepaid amounts for the unused period.

4. Prices and payment terms

4.1 Price list

• Free plan: Free of charge, max. 2 invoices/month, basic features
• Pro plan: CZK 50/month, CZK 142/quarter (5% discount) or CZK 540/year (10% discount), unlimited invoices and full features

The current price list is available at https://www.taxorio.cz#cenik

4.2 Payment terms

• Payments are processed via Stripe, Inc. (a secure PCI DSS Level 1 payment gateway) as an independent payment service provider; Taxorio does not store or process payment card numbers
• Supported payment methods: payment cards (Visa, Mastercard, American Express)
• The subscription is automatically renewed (recurring billing) until it is cancelled. The User is notified of this fact before completing the order
• An invoice is sent by email after each successful payment
• Liability for payment gateways: The Provider is not liable for errors, outages or declined transactions on the part of Stripe or the issuer of the payment card. Any complaints regarding payment transactions are dealt with by the User directly with the payment service provider or their bank

4.3 Price changes

• The Provider reserves the right to change prices with 30 days' advance notice
• You will be informed of any price change by email and in the application
• If you do not agree with a price increase, you may cancel the subscription before it renews
• For existing customers, the old price applies for the duration of the current paid period

4.4 Cancellation of the subscription

• You may cancel the subscription at any time in Settings → Subscription
• The cancellation takes effect at the end of the current paid period
• Until then you have full access to all Pro features
• After expiry, you automatically revert to the Free plan

4.5 Refunds and withdrawal from the contract

4.5.1 Consumer's right of withdrawal (14 days)

A consumer (a natural person acting outside the scope of their business activity) has the right to withdraw from the contract within 14 days of its conclusion without stating a reason (Section 1829(1) of the Civil Code).

4.5.2 Refunds outside of withdrawal from the contract

Apart from the statutory right of withdrawal, we provide refunds in the following cases:

• Technical unavailability: If the service is unavailable for more than 72 hours for reasons on the Provider's side, a proportionate refund may be requested
• Duplicate payment: If a payment was made twice by mistake (proven by a bank statement)
• Unfitness of the service for proper use: If the service does not correspond to the advertised features and cannot be remedied within 30 days

4.5.3 How to withdraw from the contract

You may withdraw:

• By email to info@taxorio.cz with the subject line "Withdrawal from the contract"
• In writing to the address of the Provider's registered office

We will refund the money within 14 days of receiving the withdrawal to the account from which the payment was made.

4.6 Late payment

• In the event of a failed payment (e.g. insufficient funds on the card), the subscription is automatically suspended
• The account reverts to the Free plan with limited features
• Data is not deleted; only the issuing of invoices above the Free plan limit becomes unavailable
• Once the payment is restored, access is restored within 24 hours

5. Limitation of liability (DISCLAIMER)

5.1 Nature of the service – An auxiliary tool

Taxorio is merely a software tool (software-as-a-service) intended for:

• Facilitating administrative activities (issuing invoices, recording expenses)
• Automating repetitive tasks (templates, OCR document recognition)
• Organising business data

Taxorio IS NOT and DOES NOT PROVIDE:

• ❌ Tax advice or a tax advisor within the meaning of Act No. 523/1992 Coll.
• ❌ Legal services or a law firm
• ❌ Accounting services or certified accounting software
• ❌ A check of the correctness of your tax returns or invoices
• ❌ A guarantee that the documents you create comply with the applicable legislation
• ❌ Individual advice concerning your specific tax situation

The calculations, templates and automatically generated outputs of the application (including VAT calculations and forms for EPO) are of a merely auxiliary and illustrative nature. Responsibility for factual correctness and compliance with the applicable legislation rests solely with the User. Before sending any output to the tax office or to third parties, the User is obliged to check the data.

5.2 The User's responsibility for content and data

The User is solely responsible for:

• ✅ The correctness of all entered data (Company ID/IČO, VAT ID/DIČ, addresses, amounts, VAT rates, etc.)
• ✅ The completeness of invoices and documents (all mandatory particulars pursuant to Section 28 of the VAT Act)
• ✅ Compliance with tax laws (correct calculation of VAT, income tax, levies)
• ✅ Archiving documents for the statutory period (also outside the Taxorio application)
• ✅ Timely filing of tax returns with the tax office
• ✅ Checking AI-recognised data from documents (OCR may make errors – see Art. 5.3)
• ✅ Monitoring legislative changes (changes to laws, new decrees)
• ✅ The correctness and legality of personal data entered into the application for the purpose of processing (see Art. 9)

5.3 Limitation of warranty – OCR and automatic recognition

The application uses technologies for the automatic extraction of data from documents (OCR and AI). These technologies are not 100% reliable and may generate erroneous results (incorrectly read amounts, dates, Company IDs, etc.).

• The results of OCR recognition are merely an auxiliary feature, and the User is obliged to check and manually correct all automatically recognised data
• A failure of the OCR feature (incorrectly read data) is not a defect of the service, provided that the other parts of the application (database, interface, issuing of invoices) function correctly
• The Provider is not liable for damage arising from incorrectly recognised data that the User did not check before using it
• The User acknowledges that, when using the OCR/AI features, selected data from uploaded documents (including any personal data contained therein) may be transferred to sub-processors for the purpose of machine processing (recognition of the document's content); the list of sub-processors and the conditions of processing are set out in Art. 9.4

5.4 Disclaimer of warranties

The service is provided "AS IS" and "AS AVAILABLE" without any warranties, whether express or implied, including:

• ❌ A warranty of the correctness of calculations (VAT, taxes, levies)
• ❌ A warranty of the completeness of invoice templates (certain mandatory details for your specific field may be missing)
• ❌ A warranty of compatibility with tax systems (EPO, MOJE daně)
• ❌ A warranty of uninterrupted operation (outages, maintenance or technical problems may occur)
• ❌ A warranty of the accuracy of AI recognition (OCR technology is not 100% reliable)
• ❌ A warranty of currency with respect to legislation (the system does not react to legislative changes in real time)

5.5 Limitation of liability for damages

The Provider is not liable for:

• 💸 Financial losses caused by errors in entered data, calculations or exports
• 💸 Penalties from the tax office for an incorrect tax return, missing invoices, incorrect VAT calculation, etc.
• 💸 Lost profit as a result of a service outage, loss of data or an error in the application
• ⚖️ Legal consequences (litigation, enforcement, insolvency) arising from use of the service
• 📁 Loss of data caused by the User (an invoice deleted by mistake), by a third party (hacking) or by force majeure
• 🤖 Errors in AI recognition of documents (incorrectly read amounts, dates, Company IDs, etc.)
• 🔌 Unavailability of the service due to an internet outage, server outage, DDoS attacks, maintenance, etc.
• 🔗 Third-party services (Railway, Google OAuth, Google / Gemini, Resend, Stripe) – their outages or errors

5.6 Maximum amount of compensation for damage

5.7 Exclusion of indirect damages

The Provider shall in no case be liable for indirect, consequential, special, exemplary or punitive damages, including:

• Loss of reputation or goodwill
• Loss of business opportunities
• The cost of procuring a substitute solution
• Lost profit or revenue

5.8 Burden of proof in B2B relationships

Towards User-entrepreneurs, it applies that the existence of a defect of the service and the causal link between the defect and the damage incurred must be proven by the User. This allocation of the burden of proof does not apply towards consumers, where it is governed by law.

5.9 Exceptions to the limitation of liability (Statutory minimum)

5.10 Time limit for asserting claims

Within the meaning of Section 630 of the Civil Code, the contracting parties agree that the User-entrepreneur is obliged to assert any claim for compensation for damage against the Provider no later than within 1 year of the day on which they learned, or could and should have learned, of the occurrence of the damage and of the person obliged to compensate it. After this period has elapsed in vain, the claim becomes time-barred. This shortened limitation period does not apply to claims for which the law does not permit it (in particular the right to compensation for harm to liberty, life or health and rights arising from intentionally caused harm), nor towards consumers.

6. Service availability and force majeure

6.1 Service availability

The Provider strives for high availability and reliability of the service; however, it does not guarantee a specific level of availability (SLA) and does not provide flat-rate credits or other predetermined compensation for outages. The service is provided "as is" and "as available" (see Art. 5.4).

• The Provider reserves the right to planned and unplanned maintenance; it endeavours to give advance notice of planned maintenance (by email or by a notice in the application)
• The service may be temporarily unavailable, in particular due to maintenance, updates, outages of third-party services or force majeure pursuant to Art. 6.2
• Unavailability caused on the User's side (internet connection, device, an unsupported browser or an outdated operating system) is not a service outage

This is without prejudice to the User's rights arising from defective performance under the mandatory provisions of the law; only claims exceeding their scope are excluded.

6.2 Force majeure

The Provider is not liable for failure to perform or delay in performing its obligations where caused by force majeure — an extraordinary, unforeseeable and insurmountable obstacle arising independently of its will within the meaning of Section 2913(2) of the Civil Code. For the duration of such an obstacle, the performance of the affected obligations is suspended and the time limits are extended by the duration thereof.

Force majeure is deemed to include, in particular (the list is illustrative):

• power supply outages (blackouts), fire, flood, earthquake and other natural events
• war, terrorism, sabotage, civil unrest
• cyberattacks (DDoS, ransomware, etc.) and large-scale security incidents beyond the Provider's control
• outages or restrictions of the services of infrastructure providers and other third parties (in particular Railway, Google / Gemini, Stripe, Resend)
• outages of internet networks, telecommunications services, or of the systems and services of public authorities
• state intervention, a change of legal regulations, a decision of a public authority, an epidemic or a pandemic

7. Intellectual property

7.1 Ownership of the service

• All rights to the Taxorio application (source code, design, logo, texts) are the property of the Provider within the meaning of Act No. 121/2000 Coll., the Copyright Act
• The User obtains only a non-exclusive, non-transferable, time-limited licence (right of use) to use the service for the duration of the subscription
• The trademarks, logos and the business name "Taxorio" are protected by copyright

7.2 Ownership of user data

• The User retains full ownership rights to all of their data (invoices, expenses, documents)
• The Provider obtains only a limited licence to such data for the purpose of providing the service and fulfilling statutory obligations (in particular the DPA pursuant to Art. 9)
• The User may export their data and delete their account at any time

8. Updates and maintenance

8.1 Obligation to provide updates

As a provider of a digital service, the Provider has the obligation, pursuant to Section 2389d of the Civil Code, to ensure the necessary updates of the digital service for the duration of the contract. The updates include, in particular, security patches and bug fixes necessary for the proper functioning of the service.

• Most updates take place automatically on the server side and require no action on the User's part
• The User agrees that the Provider carries out ongoing updates, including those that may temporarily affect the availability or features of the application
• If an update were to require action on the User's part (e.g. upgrading to a new version of the mobile application), the User will be informed of this need and of the consequences of not performing the update

8.2 The impact of updates on features

• The Provider reserves the right to change, modify or remove individual features of the application, provided it replaces them with equivalent features or where this is required by technical or legal reasons
• The User has no entitlement to the preservation of a specific version of the application or an earlier form of the features
• Adding entirely new features (beyond those originally advertised) is not a statutory obligation of the Provider and is carried out at its own discretion

8.3 Legislative updates

The Provider strives to reflect changes in Czech legislation (VAT rates, EPO formats, etc.) in the application within a reasonable period after they take effect. However, the system does not react to legislative changes in real time, and the User is obliged to monitor legislative developments and to check the data in the application.

9. Data protection, GDPR and Data Processing Agreement (DPA)

9.1 Processing of the Provider's personal data

Detailed information on the processing of the personal data of Users (the Provider's customers) is set out in the document Privacy Policy.

• The Provider processes the personal data of Users in accordance with the GDPR and Act No. 110/2019 Coll.
• Data is stored at rest on servers in the EU (Railway, the European Union data region); part of the processing takes place at sub-processors established in the USA, while ensuring appropriate safeguards under Chapter V of the GDPR — see Art. 9.4 and the Privacy Policy document
• The User has the right to access, rectification, erasure and portability of data

Legal bases for processing pursuant to Art. 6 of the GDPR

• Performance of a contract (Art. 6(1)(b) GDPR) — the User's registration and identification data (name, email, Company ID/IČO) processed for the purpose of providing the service and managing the account
• The Provider's legitimate interest (Art. 6(1)(f) GDPR) — technical logs, security records and analytics data for the purpose of ensuring security, detecting fraud and improving the service
• Compliance with a legal obligation (Art. 6(1)(c) GDPR) — the Provider's billing and tax documents retained for the period laid down by the Accounting Act
• Consent (Art. 6(1)(a) GDPR) — analytics cookies and marketing tracking; consent may be withdrawn at any time via the cookie settings

9.2 Subject matter and scope of processing

• Categories of data subjects: The User's clients (customers/suppliers)
• Categories of personal data: Identification data (name, company name, Company ID/IČO, VAT ID/DIČ), contact data (address, email, telephone) and billing data (invoice numbers, amounts, bank account details)
• Purpose of processing: Exclusively the provision of the application's functionality (issuing invoices, recording documents) and fulfilment of statutory obligations
• Duration of processing: For the duration of the user account

9.3 The Provider's obligations as a processor

The Provider undertakes to:

• Process personal data solely on the basis of the documented instructions of the User (the controller)
• Ensure that persons authorised to process personal data are bound by an obligation of confidentiality
• Adopt appropriate technical and organisational measures to secure the data (encryption of data at rest and in transit, regular backups, management of access permissions)
• Not transfer personal data outside the EU/EEA without meeting the conditions of the GDPR (Chapter V)
• Assist the User in fulfilling its obligations towards data subjects (access, rectification, erasure) to the extent technically possible
• Assist the User in ensuring compliance with the obligations under Arts. 32–36 of the GDPR (security of processing, notification of breaches, impact assessment) to the extent technically possible and having regard to the nature of the processing
• Provide the User with the information necessary to demonstrate compliance with the processor's obligations and allow for review (audit) to a reasonable extent; the costs of an audit beyond the provision of such information are borne by the User (Art. 28(3)(h) GDPR)
• Inform the User without undue delay after becoming aware of a breach of security of the personal data that it processes on behalf of the User (Art. 33(2) GDPR)
• Upon termination of the contract, delete or return all personal data, unless the law requires its retention

9.4 Sub-processors

The Provider uses the following sub-processors to provide the service:

• Railway (Railway Corp., USA) – hosting of the application, database and file storage; data is stored at rest in the EU data region
• Google – Gemini API (Google Ireland Limited / Google LLC) – machine recognition of documents (OCR), the AI assistant and the extraction of payment notifications. The Provider uses solely the paid interface ("Paid Services"), in respect of which Google, under its terms and its data processing addendum (DPA), does not use inputs or outputs to train its models
• Resend (Resend, Inc., USA) – sending system emails, invoices to customers and the newsletter, and receiving email bank notifications for payment matching
• Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc.) – processing of subscription payments (does not apply to Users' billing data)

For sub-processors established outside the EU/EEA, appropriate safeguards under Chapter V of the GDPR are applied for the transfer of personal data (the EU-US Data Privacy Framework and/or Standard Contractual Clauses).

The User acknowledges and agrees that, when using the OCR/AI features, selected data from documents they upload and from payment notifications (including any personal data contained therein) is transferred to the sub-processor Google – Gemini API for the purpose of machine processing thereof; the processing takes place in an automated manner and for the time strictly necessary to fulfil this purpose.

The User agrees to the use of the above-listed sub-processors. The Provider will inform the User of any planned addition or replacement of a sub-processor with reasonable advance notice by way of an update to these terms pursuant to Art. 11.1. The User has the right to object; if they fail to do so within 14 days, consent is deemed given.

9.5 The User's obligations as a controller

The User, as the controller of personal data, is responsible for:

• The legal basis for processing – ensuring that they have a lawful ground for entering the personal data of their clients into the application (a contract, legitimate interest, etc.)
• Informing data subjects – that their data is processed by means of the Taxorio application
• The correctness and currency of data – the User is solely responsible for the content of the personal data entered; the Provider does not check the substantive content of the data entered
• Data subject requests – receiving and handling requests for access, erasure, rectification, etc.

9.6 Backups and archiving of data

• The Provider performs automatic daily backups of the database (retained for 30 days)
• The backups serve to restore the service after a technical failure, not to restore individually deleted user data
• The User is responsible for backing up their own important data (export to PDF, CSV, XML)

9.7 Security incidents

In the event of a security incident, Taxorio, as the processor, undertakes to:

• Inform the User (the controller) without undue delay after carrying out an initial analysis of the incident and adopting measures to minimise its impact
• Provide the User with the available information needed to assess the nature and scope of the security incident
• Adopt immediate technical measures to secure the system

The User, as the controller of personal data, acknowledges that, by law (Arts. 33 and 34 of the GDPR), they have the exclusive obligation to assess the degree of risk to the affected data subjects and, where applicable, to report the incident to the Office for Personal Data Protection (ÚOOÚ) within 72 hours of becoming aware of it, or to inform the affected persons directly. This obligation does not fall to the Provider as the processor, and the Provider does not fulfil it on the User's behalf.

• The User is obliged to immediately inform the Provider of any suspicious activity on their account
• The Provider is not liable for damage caused by the User (a weak password, account sharing, phishing)

10. Indemnity (Indemnification of the Provider)

Example for entrepreneurs: If, as a self-employed person (OSVČ), the tax office imposes a penalty on you for incorrectly calculated VAT on an invoice created in Taxorio and you attempt to shift the liability to the Provider (e.g. via litigation), you undertake to reimburse the Provider for all costs of legal defence, court fees, etc.

11. Final provisions

11.1 Amendment of the terms and conditions

• The Provider reserves the right to amend these terms and conditions in accordance with Section 1752 of the Civil Code
• You will be informed of any changes by email and in the application at least 30 days before they take effect
• If you do not agree with the changes, you may terminate the contract with a notice period ending on the day the new terms take effect (i.e. within 30 days of the notification)
• If, within 14 days of the notification, the User does not refuse the change in writing and continues to use the service, the User is deemed to agree with the new wording of the terms
• The currently valid version of the terms is always available on this page; the date of the last change is stated in the header of the document

11.2 Dispute resolution and jurisdiction

• We strive to resolve all disputes amicably by email at info@taxorio.cz
• If no agreement is reached within 30 days of a written demand, the dispute will be submitted to the court having subject-matter and territorial jurisdiction in the Czech Republic; for disputes with entrepreneurs, the contracting parties agree on the territorial jurisdiction of the District Court for Prague 5 (or the Municipal Court in Prague as the court of second instance), in whose district the Provider has its registered office
• This choice of court does not apply to disputes with consumers, for whom territorial jurisdiction is governed by law
• A consumer has the right to turn to the Czech Trade Inspection Authority (www.coi.cz) or to use the ODR platform (ec.europa.eu/consumers/odr)

11.3 Governing law

These terms and conditions are governed by the laws of the Czech Republic, in particular:

• Act No. 89/2012 Coll., the Civil Code (in particular Section 2389a et seq. on digital content and digital services)
• Act No. 110/2019 Coll., on the Processing of Personal Data
• Regulation (EU) 2016/679 (the GDPR)
• Act No. 235/2004 Coll., on Value Added Tax
• Act No. 121/2000 Coll., the Copyright Act

11.4 Severability of provisions

If any provision of these terms and conditions is found to be invalid or unenforceable, the remaining provisions remain in effect. An invalid or unenforceable provision is replaced by a valid and enforceable provision whose meaning is as close as possible to the invalid provision. If any limitation or cap of liability under Art. 5 is found to be ineffective in full, then, instead of unlimited liability of the Provider, a limitation of liability to the maximum extent permitted by the applicable legal regulations shall apply.

11.5 Validity of the terms

These terms and conditions take effect on 20 June 2026 and supersede the previous version dated 30 April 2026. The changes compared to the previous version consist, in particular, of specifying the hosting provider (Railway), adding the sub-processor Resend, and adding the email-and-password login method.

← Back to homepage