Terms of Service
Effective from: 28 September 2026
This text was prepared by DOXIO and has not yet been reviewed by an attorney. It reflects how the service actually works today; we will publish any change with a new effective date.
These Terms of Service (the "Terms") are a contract between you and Matěj Tomeček, a sole trader registered under the Czech Trade Licensing Act, IČO 22186603, with a registered place of business at Fabiánka I 178, Kudlov, 760 01 Zlín, Czech Republic, operating the service under the brand "DOXIO" (the "Provider", "we"). They govern your access to and use of the DOXIO web application, its public API and related services (the "Service"). By creating an account or using the Service you agree to these Terms, to the Data Processing Agreement and to the Privacy Policy, which form part of this contract.
1. Who may use the Service
The Service is intended for business use. By accepting these Terms you confirm that you are acting in the course of your trade, business or profession, that you are at least 18 years old, and that you are authorised to bind the organization on whose behalf you create the account (the "Customer", "you").
If you nevertheless use the Service as a consumer, the mandatory consumer-protection rules of the law of your habitual residence apply and prevail over any conflicting provision of these Terms. In that case you may withdraw from the contract within 14 days of concluding it without giving a reason; if you ask us to start providing the Service during that period, you agree to pay a proportionate part of the price for the period until withdrawal.
2. The Service
DOXIO lets you upload documents, share them with recipients through protected links, collect electronic signatures from one or more signers (in parallel or in a fixed order), have signers fill in text, date and checkbox fields, keep client workspaces, and maintain a tamper-evident audit trail of every step. Higher plans add, for example, your own branding, bulk sending, accounting exports, a public API and webhooks, an ABRA Flexi connection and an automatic organization signature; the per-plan overview is published on the pricing page.
When a template includes an organization signature, DOXIO applies your organization's signature image automatically, on your instruction and without a human interaction at the time of signing, but only under a signing mandate: a declaration confirmed in DOXIO by the member of your organization whom you designate as the signatory, signed in to their own account. The signature carries that person's name and function, and each such signature is recorded in the audit trail and on the certificate as made under the mandate, together with what triggered it (a member in the application or your systems through the API).
By designating a signatory you confirm that the person is entitled to sign on behalf of your organization; DOXIO records the declaration but does not verify it against any public register. You remain responsible for every signature applied under a mandate until it is revoked, and for deciding which documents may be signed this way. A mandate ends when you revoke it, when a newly designated signatory confirms theirs, when the signature image is replaced or removed, or when the signatory is no longer a member of your organization.
We may add, change or remove features. We will not remove a feature that is material to a paid plan without at least 30 days' notice by email to the account owner.
3. Electronic signatures
Signatures captured through DOXIO are electronic signatures within the meaning of Article 3(10) of Regulation (EU) No 910/2014 (eIDAS). Each signature is supported by an audit trail recording the signer's declared name and e-mail address, the e-mail one-time code used to reach the document (or the signed-in account of an internal signer), the time, the IP address and browser used, and the SHA-256 hash of the exact document version that was signed. The signed PDF and, on plans that support it, a separate signing certificate are made available to the parties.
DOXIO signatures are not advanced or qualified electronic signatures, and DOXIO does not issue qualified certificates or qualified time stamps. Under Article 25(1) eIDAS an electronic signature may not be denied legal effect solely because it is in electronic form. However, you are solely responsible for determining whether a transaction requires a particular form under the law that applies to it — for example a written form, a recognised or qualified electronic signature, or an official verification of signatures — and for obtaining such a signature elsewhere if it does.
You are responsible for the identity of the persons you invite to sign. DOXIO verifies control of the recipient's e-mail address by a one-time code; it does not verify the recipient's legal identity.
4. Accounts and organizations
Every account belongs to an organization. The account owner controls the organization, its members, its billing and its data. Members with the owner or admin role can act on behalf of the organization, including inviting members, sending documents for signature, managing templates, creating API keys and scheduling the deletion of the organization.
You are responsible for everything that happens under your organization, for keeping sign-in credentials, one-time codes, API keys and webhook secrets confidential, and for informing us without delay at hello@doxio.pro if you suspect unauthorised access. Anyone who uses an API key you created is treated as acting on your behalf.
You must provide accurate account and billing information and keep it up to date.
5. Your content and acceptable use
You retain all rights in the documents, data and branding you upload ("Content"). You are responsible for your Content and for the recipients and signers you invite. You confirm that you have the right to share each document, to request signatures on it and to process the personal data of every recipient and signer it involves, and that doing so complies with the law that applies to you.
You must not use the Service to:
- upload or distribute content that is unlawful, infringes the rights of others, or contains malware;
- send documents to recipients who have not agreed or would not reasonably expect to receive them, or otherwise send unsolicited messages;
- impersonate another person or organization, or forge, alter or misrepresent a signature or an audit record;
- probe, scan or attack the Service, circumvent access controls or rate limits, or access another organization's data;
- resell the Service or use it to build a competing service without our written consent.
We may suspend access without notice where necessary to stop a breach of this section, to protect the Service or other customers, or where the law requires it. We will tell you the reason and restore access once the issue is resolved.
6. Licence to process your Content
To provide the Service, you grant the Provider a worldwide, non-exclusive, royalty-free licence, limited to the term of this contract and to the purpose of providing the Service, to host, store, transmit, render, reproduce and modify your Content — including applying signature images, filled-in field values, a signing certificate and audit metadata to your documents — and to retain the signed output and its evidentiary metadata for the periods stated in the Privacy Policy.
We do not use your Content for any other purpose. We do not sell it, share it with advertisers or use it to train artificial-intelligence models.
7. Intellectual property of the Service
The Service, its software, design, documentation and the DOXIO name are owned by the Provider or its licensors. We grant you a non-exclusive, non-transferable right to use the Service during your subscription in accordance with these Terms. You may not copy, modify, decompile or create derivative works of the Service except as permitted by law.
If you send us feedback or suggestions, we may use them without any obligation to you.
8. Plans, trial and payment
The Service is offered in paid plans with a monthly or yearly billing period; there is no free plan. Current prices and plan limits — in particular the number of active client workspaces, the number of seats included in the price, storage and features — are published on the pricing page. Only active, that is non-archived, client workspaces count towards the workspace limit. All prices are in Czech crowns (CZK).
The Provider is not registered for value-added tax (není plátcem DPH); the published prices are therefore final and no VAT is added to them. Should the Provider become VAT-registered, VAT at the statutory rate will be added to the prices. The Provider will notify the account owner by email in advance, and VAT will apply from the first billing period that starts after that notice. If you do not agree, you may cancel the subscription before that period starts.
You can purchase additional seats beyond those included in your plan, and add-on packs such as a page pack for AI document extraction. Additional seats and add-ons are billed together with the plan subscription, for the same billing period. An extraction pack sets a number of pages per calendar month; once it is used up, extraction stops until the start of the next month and nothing further is charged.
New organizations start with a 14-day free trial of the selected plan. No payment is taken during the trial. If you have not added a payment method and subscribed by the end of the trial, the organization switches to read-only mode: you can still sign in, view and export your data, but you cannot upload, share or send documents for signature until you subscribe.
Subscriptions are billed in advance for each billing period through our payment processor, Stripe, and renew automatically for successive periods of the same length until cancelled. You can cancel at any time in the billing settings; cancellation takes effect at the end of the current paid period and the Service remains available until then. Fees already paid are not refunded, except where these Terms or mandatory law provide otherwise.
You can change plan at any time. When you move to a higher plan the difference is charged proportionally for the remainder of the period; when you move to a lower plan the new price applies from the next period. Plan limits apply immediately; if your usage exceeds the limits of the new plan, the affected functions are blocked (for example, you cannot create further client workspaces or add users) until usage is within the limits. Changing plan never deletes any data.
If a payment fails, we notify you and retry. While a payment is overdue the organization is in read-only mode. If the payment is not made within the retry period set by our payment processor, the subscription is cancelled and the organization stays in read-only mode until you subscribe again.
We may change prices with at least 30 days' notice by email to the account owner. A price change applies from the first billing period that starts after the notice period. If you do not agree with the change, you may cancel before it takes effect.
9. Availability and support
We aim to keep the Service available around the clock but do not guarantee uninterrupted or error-free operation. We may interrupt the Service for maintenance, security updates or matters beyond our control. Where planned maintenance is expected to cause a noticeable interruption, we try to announce it in advance.
Support is provided by email at hello@doxio.pro. We aim to respond within two business days.
10. Confidentiality
Each party will keep confidential any non-public information it receives from the other in connection with the Service — for the Provider, in particular your Content — and will use it only to perform this contract. This does not apply to information that is or becomes public through no fault of the receiving party, that the receiving party already lawfully held, or that must be disclosed by law or by order of a court or authority; in the last case the receiving party will, where lawful, inform the other party first. This obligation lasts for the term of this contract and for 3 years after it ends.
11. Personal data
For the documents you upload and the personal data of the recipients, signers and clients you enter, you are the controller and the Provider is your processor. The Data Processing Agreement published on this site governs that processing and forms part of these Terms; on matters of personal data it prevails over these Terms. How we process the personal data of account holders and signers as a controller is described in the Privacy Policy.
12. Term, termination and deletion
This contract lasts as long as your organization exists in the Service. You may end it at any time by cancelling the subscription and scheduling the deletion of your organization or account in the settings.
We may terminate this contract with 30 days' notice by email to the account owner. We may terminate it without notice if you materially breach these Terms and do not remedy the breach within 14 days of our request, or if the breach cannot be remedied, or if you fail to pay within 30 days after a reminder.
When the contract ends, or when you schedule deletion, a 30-day grace period starts during which the account owner can cancel the deletion and during which you can export your data as a ZIP archive from the settings. After the grace period we permanently erase your document files, unsigned documents, templates, client records, branding, API keys and webhooks. For documents that were signed, we retain a reduced set of signing evidence together with the audit log for 7 years, as described in the Privacy Policy, so that a signature can be evidenced if it is disputed.
Sections that by their nature are meant to survive — in particular confidentiality, licences already granted for retained evidence, limitation of liability, indemnity and governing law — remain in force after termination.
13. Warranties and limitation of liability
To the maximum extent permitted by law, the Service is provided "as is" and "as available". We do not warrant that it will be uninterrupted, error-free or fit for a particular purpose, or that a signature collected through it satisfies any statutory form requirement applicable to your documents. We do not give legal advice.
The Provider's total aggregate liability arising out of or in connection with this contract, whether in contract, tort or otherwise, is limited for all claims arising in any period of twelve months to the fees you actually paid for the Service in the twelve months preceding the event giving rise to the claim. The Provider is not liable for lost profit, lost revenue, lost business or goodwill, loss of data that you could have exported, or for indirect or consequential loss.
Nothing in these Terms limits or excludes liability for harm caused intentionally or by gross negligence, for harm to the natural rights of a person, or for any other liability that cannot be limited under Czech law.
14. Your indemnity
You will defend and indemnify the Provider against any third-party claim, and against any fine or penalty imposed by a public authority, that arises from your Content, from the recipients or signers you invite, from your instructions to us, or from your breach of these Terms — including claims that a document infringes a third party's rights or that you lacked the right to process a signer's personal data. We will inform you of such a claim without delay and let you conduct the defence, provided you do not admit liability on our behalf without our consent.
15. Changes to these Terms
We may change these Terms, for example to reflect changes in the Service, in the law or in our business. We will publish the new version on this page with a new effective date and, for material changes, notify the account owner by email at least 30 days before it takes effect. If you do not agree with a change, you may cancel your subscription before the new version takes effect; continued use after that date constitutes acceptance.
16. Governing law and disputes
This contract and any dispute arising from it are governed by the law of the Czech Republic, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. The courts of the Czech Republic having jurisdiction over the Provider's registered place of business have exclusive jurisdiction. Nothing in this section deprives a consumer of the protection of mandatory rules of the law of their habitual residence or of the right to bring proceedings in their own country.
A consumer may also use out-of-court dispute resolution through the Czech Trade Inspection Authority (Česká obchodní inspekce, www.coi.cz).
17. General provisions
These Terms, the Data Processing Agreement, the Privacy Policy and the plan you selected form the entire agreement between us regarding the Service. If any provision is invalid or unenforceable, the remaining provisions remain in force and the invalid provision is replaced by a valid one that comes closest to its purpose.
We may assign this contract, or our rights and obligations under it, to a successor in the event of a sale of the business or its transfer into a company we control; we will notify you of such a transfer. You may not assign this contract without our written consent, which we will not unreasonably withhold.
Neither party is liable for a failure to perform caused by events beyond its reasonable control, such as outages of the internet or of a hosting, payment or e-mail provider, natural disasters or acts of public authorities. Failure to enforce a provision is not a waiver of it. Notices to us go to hello@doxio.pro; notices to you go to the e-mail address of the account owner.
These Terms are published in Czech and in English. In the event of a discrepancy, the Czech version prevails.