Terms of service.

Effective from 11 October 2026. The Slovak version prevails.

1. Provider

smallbuss is provided by Softverse, spol. s r. o., registered office Stránske 506, 013 13 Stránske, Slovakia, company ID 54 059 623, registered in the Commercial Register of the District Court Žilina, section Sro, file No. 91289/L ("provider" or "we"). Contact: hello@smallbuss.online, personal data privacy@smallbuss.online. The supervisory authority is the Slovak Trade Inspection (Slovenská obchodná inšpekcia).

2. Definitions

• Service means the smallbuss web app including its MCP interface for AI assistants.
• Organisation means a business or self-employed person running their work in the Service. It is the contracting party to these terms.
• Owner means the user who manages the organisation and acts on its behalf.
• User means a person with an account in the Service who works in an organisation as its member.
• Organisation data means all data the organisation or its users put into the Service, for example customers, orders, invoices, payments, costs and files.

3. Contract and account

The contract is concluded when the Owner creates an organisation, confirms it and accepts these terms. The Service is intended solely for businesses and people acting within their trade or profession; consumer contract rules therefore do not apply.

Users give true details, protect their password and we recommend switching on two-factor authentication. The organisation is responsible for whom it invites as a member, which permissions it grants and how its users act in the Service.

An AI assistant connected with a user's key acts on the user's behalf and with the user's permissions. What the assistant does in the Service counts as the user's own action. The user can revoke the key at any time.

4. Evaluation phase and price

The modules are in evaluation with the first businesses. Features may change, be added or be removed, and we announce significant changes on the What's new page in the app.

The Service is free during the evaluation phase. We will announce pricing to Owners by e-mail and in the app at least 30 days in advance, together with the price list and payment terms. An organisation that does not agree with the price can end the contract by closing the organisation; it pays nothing for the period before pricing starts.

5. Availability and support

We run the Service with professional care but do not guarantee uninterrupted availability. Deploying a new version or maintenance may briefly interrupt it. We back up the database continuously and make a separate backup before each new version. Support is available by e-mail at support@smallbuss.online and through feedback in the app.

6. Organisation data

Organisation data belongs to the organisation. It grants the provider only the right to process it as needed to provide the Service. We do not sell organisation data, use it for advertising or use it to train artificial intelligence models.

The organisation is responsible for the content it puts into the Service and for having a legal basis to process it. Archiving accounting documents (such as invoices) is the organisation's obligation; the Service is not an archive under accounting law. The Owner can download all data of the organisation including files at any time in the app as a machine-readable archive (Organisation, Export all data card).

7. Prohibited use and illegal content

Nobody may use the Service against the law, to send unsolicited messages, to attack the Service or other users, or to store content that infringes the rights of others.

Anyone can report illegal content in the Service to abuse@smallbuss.online with a description of the content, the reason and a contact. We assess the report without undue delay and inform the reporter and the organisation concerned of the decision and its reasons. This address is also the single point of contact for authorities and users under the Digital Services Act; we communicate in Slovak and English.

8. Suspension and termination

The Owner can close the organisation at any time, which ends the contract. A user can close their account in their profile at any time, except the last Owner of an organisation.

We may suspend an organisation that breaches these terms, endangers the security of the Service or does not pay a due price. Suspension is reversible and the data is kept during it.

We may permanently delete the data of a closed or suspended organisation no earlier than 30 days later. It disappears from backups at the latest when their retention ends (14 days, backups before a new version 30 days).

9. Liability

We provide the Service as it is, including the evaluation phase. We are liable for damage we cause intentionally or through gross negligence. We are not liable for lost profit or indirect damage. Our total liability is limited to the amount the organisation paid us for the Service in the 12 months before the damage arose.

Third-party services the organisation connects itself (KROS Fakturácia, its own e-mail account, an AI assistant) are the responsibility of their providers under their own terms.

10. Processing personal data on behalf of the organisation

This section is the data processing agreement under Article 28 GDPR. The organisation is the controller and the provider is the processor.

• Subject and duration: providing the Service for the duration of the contract.
• Nature and purpose: storing, organising, searching, displaying, sending and deleting data so that the organisation can run its orders, customers, invoices, payments and costs.
• Types of data: identification and contact details (name, e-mail, phone, address, company and tax IDs), order, invoice and payment data, bank details, notes and attached files.
• Data subjects: customers, buyers, suppliers and their contact persons, users of the organisation.

The provider undertakes to:

1. process data only on the organisation's documented instructions, which are the use of the Service and these terms;
2. ensure confidentiality of the people who have access to the data;
3. take appropriate technical and organisational measures under Article 32 GDPR, in particular encrypted connections, encrypted secrets, separation of organisations' data in the database, two-factor authentication, security records, backups and hosting in the EU;
4. engage only the sub-processors listed in the privacy policy and inform the organisation at least 30 days in advance of an intended addition or replacement, which the organisation may object to and terminate the contract;
5. assist the organisation in handling data subject requests and in meeting its obligations under Articles 32 to 36 GDPR;
6. notify the organisation of a personal data breach without undue delay and no later than 48 hours after becoming aware of it;
7. delete the data after the contract ends according to section 8, unless the law requires it to be kept;
8. provide the organisation with the information needed to demonstrate compliance with these obligations and allow a reasonable audit.

11. Changes to the terms

We may change these terms. We inform Owners by e-mail or in the app at least 30 days before a change takes effect. If the organisation disagrees, it can end the contract by closing the organisation.

12. Final provisions

The contract is governed by the law of the Slovak Republic. Disputes are decided by the competent courts of the Slovak Republic. If any provision is invalid, the rest remains in force.