Legal

Terms of Service

The contract between you and DOBG Ltd. for using the ood.bg website and app.

Effective from 29 October 2026. These general terms replace the previous terms of use of ood.bg.

Please read them carefully. By registering, by ticking the consent box or by using the services, you enter into a contract with the Operator on these terms. If you do not agree with them, do not use the services.

1. Operator and scope

1.1. The ood.bg services are provided by DOBG Ltd. („ДО БГ“ ЕООД), UIC 148050836, VAT No. BG148050836, with its seat in Varna; its registered office address is entered in the Commercial Register and Register of Non-Profit Legal Entities at the Registry Agency (hereinafter "the Operator"). Email: [email protected].

1.2. Authorities that supervise the Operator's activities: the Commission for Consumer Protection (KZP; 1000 Sofia, 4A Slaveykov Sq., tel. 0700 111 22, kzp.bg) and the Commission for Personal Data Protection (CPDP; 1592 Sofia, 2 Prof. Tsvetan Lazarov Blvd., cpdp.bg).

1.3. These general terms govern the relationship between the Operator and anyone who visits the ood.bg website, registers an account or uses the ood.bg web application, its subdomains, the API, the MCP server, the demo and related services (together, "the Platform" and "the Services").

1.4. The Privacy Policy, the Cookie Policy, the current prices and allowances of the plans on the Pricing page, Annex 1 (Personal Data Processing Agreement) and Annex 2 (Standard Form for Exercising the Right of Withdrawal) form an integral part of these general terms.

2. Definitions

2.1. User — any natural or legal person who uses the Services. A Business User is a User who uses the Services in connection with their commercial or professional activity. A Consumer User is a natural person who uses the Services outside their commercial or professional activity within the meaning of the Consumer Protection Act (ZZP).

2.2. Account — the User's personal account, accessed with an email address and password, by signing in with Google or Facebook, or with a passkey.

2.3. Company — the workspace in the Platform for one legal entity, sole trader or other legal person, with its documents, partners, goods, warehouses and settings. One Account may hold an unlimited number of Companies.

2.4. Owner — the User who added the Company or to whom its management has been transferred. Team Member — a User invited by the Owner with specific permissions.

2.5. Plan — the package of features and monthly allowances for one Company: the free "Start" plan and paid plans ("Business", "Pro" and others announced in the Platform).

2.6. Allowances — the monthly quantities of services included in the plan: AI questions and analyses, scanned pages, code signatures, emails sent and others, as described on the Pricing page.

2.7. User Content — all data, documents, files, texts and images that the User enters, uploads or creates in the Platform.

2.8. D.O.B.I. (Data Oriented Business Intelligence) — the AI assistant built into the Platform, developed by the Operator.

3. Conclusion of the contract and the account

3.1. The contract is concluded when the User completes registration and accepts these general terms by ticking the box or clicking the relevant button. The contract is concluded in Bulgarian and is stored by the Operator in electronic form; the current general terms are available on this page at all times.

3.2. The User and the Operator agree that electronic statements made through the Platform (clicking a button, ticking a box, entering a code) have the effect of signed written statements in their relations with each other (Art. 13, para. 4 of the Electronic Document and Electronic Trust Services Act (ZEDEUU)).

3.3. To register, the User must be at least 18 years old and have full legal capacity. Anyone who registers a Company declares that they are authorised to act on behalf of the entity concerned.

3.4. The User provides true, accurate and complete data and keeps it up to date. The Operator may ask for confirmation of the email address and of the Company's details.

3.5. The User keeps their password, two-factor authentication codes and passkeys secret and is responsible for actions performed through their Account, unless they prove that those actions were performed after they had notified the Operator of unauthorised access. We recommend enabling two-factor authentication (2FA) or a passkey.

3.6. If unauthorised access is suspected, the User notifies the Operator immediately at [email protected].

4. Description of the Services

4.1. The Platform enables the creation, issue, storage, sending and printing of commercial and tax documents (invoices, credit and debit notes, pro forma invoices, quotations, protocols and others), the management of partners, goods, prices and warehouses, VAT reports and ledgers, document scanning, signing with a one-time code, online payment of documents, an AI assistant, an API, an MCP server and integrations with other software. The full and current description is on the Features, AI and Integrations pages.

4.2. Issuing documents is free on every plan. The features and Allowances of each plan are described on the Pricing page and in the application.

4.3. The Operator develops the Platform and may add, change or remove features. The Operator does not remove an essential feature of a paid plan during the paid period without prior notice; in the event of such a change, the User has the rights under clauses 6.6 and 17.

4.4. The demo is a trial environment with sample data. Anything entered in the demo is not saved permanently and is deleted automatically after the demo session ends.

4.5. The Platform is a tool. It is not an accounting firm and does not give accounting, tax or legal advice. The information on the website and in the blog, and the answers of D.O.B.I., are general in nature.

5. Documents, numbering and electronic signature

5.1. The User is responsible for the content, accuracy and lawfulness of the documents they issue and for fulfilling their accounting and tax obligations, including under the Value Added Tax Act, the regulations for its implementation and the Accountancy Act.

5.2. The Platform numbers tax documents sequentially, without gaps and without repetition, in accordance with the requirements of tax legislation. An issued document is not deleted; it may be cancelled or corrected with a note in the manner provided by law, and the Platform keeps a log of actions.

5.3. Electronic invoices are sent to the recipient by email or via a secure link. The User is responsible for the consent of their recipients to receive invoices in electronic form where the law requires it.

5.4. The "code signature" in the Platform is a simple electronic signature within the meaning of Art. 3, point 10 of Regulation (EU) No 910/2014 (eIDAS). It is not a qualified electronic signature and does not, by operation of law, have the effect of a handwritten signature towards third parties. The User decides whether it is suitable for the document in question.

5.5. The User keeps or downloads their documents for the periods the law requires of them. The Platform stores the documents for as long as the Company exists in it (see also clauses 16 and 17).

6. Plans, prices and payment

6.1. The "Start" plan is free and has no time limit. Paid plans are paid for as a subscription for one Company, monthly or annually.

6.2. Prices are stated in euro on the Pricing page and in the application. Plan prices exclude VAT. VAT at the applicable rate (20%) is added on payment. The full amount including VAT is shown before the User confirms the payment. For annual payment, the discount stated at the time of purchase applies.

6.3. Payment is made by bank card or by another method offered on the payment page, through the payment service provider Stripe. The Operator does not receive or store card details.

6.4. For each payment the Operator issues an invoice in electronic form, which the User receives in the Platform and/or by email. The User agrees to receive their invoices in electronic form.

6.5. Automatic renewal. The subscription renews automatically for the same period (month or year) and the amount is collected on the day of renewal, until the Owner stops the renewal. The Owner can stop the renewal at any time from "Team → Plan → Manage subscription". The plan then remains in place until the end of the paid period, after which the Company moves to the "Start" plan.

6.6. Price changes. The Operator may change prices by giving notice by email or in the Platform at least 30 days before the renewal from which the new price applies. The change does not affect a period already paid for. If the User does not agree, they may stop the renewal before the change takes effect.

6.7. Changing plan. When moving to another paid plan, the unused part of the current period is deducted as a discount from the new subscription and is shown as a negative line on the invoice. If the discount is greater than the new amount, the remainder is used on subsequent renewals.

6.8. Failed payment. If the amount cannot be collected, the payment service provider tries again. During this time the plan remains active. If the payment is not made and the subscription is terminated, the Company moves to the "Start" plan after the grace period stated in the Platform. Documents and data are retained.

6.9. Allowances. The plan's Allowances renew every month. When they are used up, the service concerned (for example AI questions or scanning) stops until the next month, until additional allowance is purchased or until the plan is changed; issuing documents remains available. Allowances are used in combination, as described on the Pricing page.

6.10. Except in the cases provided for by law or in clause 7, amounts paid are not refunded for the unused part of the period when renewal is stopped.

7. Right of withdrawal (Consumer Users only)

7.1. A Consumer User has the right to withdraw from the contract for a paid plan within 14 days of its conclusion, without giving any reason, without penalty and without costs (Art. 50 et seq. ZZP).

7.2. To exercise this right, the User sends an unequivocal statement to [email protected], for example using the form in Annex 2. The deadline is met if the statement is sent before it expires.

7.3. By purchasing a paid plan, the User expressly requests that the service begin immediately, before the withdrawal period expires. In the event of withdrawal, the User owes an amount proportionate to what has been provided up to the time of withdrawal, and the rest is refunded within 14 days by the same means as the payment was made.

7.4. The right of withdrawal does not apply to Business Users.

7.5. Consumer Users also have the rights in the event of lack of conformity of digital services under the Act on the Supply of Digital Content and Digital Services and the Sale of Goods.

8. AI assistant D.O.B.I.

8.1. D.O.B.I. is an artificial intelligence system. When you write in the assistant's chat or receive text generated by it, you are interacting with an AI system, not with a human.

8.2. D.O.B.I. answers using data from the selected Company only and only within the User's permissions. It prepares reports, analyses, forecasts and drafts. Nothing is sent, issued, paid or changed without an explicit "Approve" from the User.

8.3. AI answers are generated automatically and may contain inaccuracies or be incomplete. The User checks the result before using it and is responsible for their decisions. Forecasts are not a guarantee of future results.

8.4. The Owner may switch off the AI features for the Company. AI questions count towards the plan's monthly Allowance.

8.5. To answer, D.O.B.I. uses models from external providers, to which only what is necessary for the specific question is passed. The Operator does not use User Content to train AI models. Details are in the Privacy Policy.

9. API, MCP and AI agents

9.1. On the plans for which this is announced, the Owner may create API keys and connect their own AI agents through the Platform's MCP server.

9.2. The keys are personal to the Company and must not be shared publicly. The User is responsible for actions performed with their keys and by the agents and programs they connect as if they were their own.

9.3. The Operator may limit the number of requests (rate limits) and suspend a key that threatens the security or stability of the Platform.

10. Online payments to Companies

10.1. Companies may connect their own accounts with payment service providers (for example ePay.bg, Paysera, PayPal, Stripe) in order to receive payments for their documents.

10.2. The contract for these payments is between the Company and the provider concerned. The Operator is not a party to it, does not receive or hold the funds and is not liable for the provider's actions. The Platform only transmits the document data and reflects the payment status.

11. Rights and obligations of the User

11.1. The User has the right to use the Services according to their plan, to download their data and to terminate the contract at any time.

11.2. The User undertakes not to:

  • use the Services in breach of the law, of these general terms or of the rights of third parties, including to issue documents with false content;
  • upload malicious code, illegal content or content that infringes intellectual property rights;
  • attempt unauthorised access to other people's Companies or accounts or to the Operator's systems, scan for vulnerabilities without written permission, or circumvent security measures and plan limits;
  • place an excessive load on the Platform, extract data in bulk by automated means outside the API, or resell the Services without the Operator's written consent;
  • decompile or copy the Platform, except to the extent that the law expressly permits it.

11.3. The Owner determines which Team Members have access to the Company and with what permissions, and is responsible for their actions in it. Free access for an accountant is granted at the Owner's discretion.

12. Obligations of the Operator

12.1. The Operator provides the Services with the care of a prudent trader, applies appropriate technical and organisational security measures, makes regular backups and keeps User Content confidential.

12.2. The Operator endeavours to keep the Platform running continuously but does not guarantee operation free of interruptions and errors. Planned maintenance is carried out, where possible, at times of low load and is announced in advance when possible.

12.3. The Operator answers enquiries sent to [email protected] on working days, as a rule within two working days.

12.4. In the event of a security breach affecting a User's data, the Operator notifies the affected Users without undue delay.

13. User Content and intellectual property

13.1. User Content remains the property of the User or of the Company concerned. The User grants the Operator a non-exclusive, royalty-free right to store, process, display and transmit that content only to the extent necessary to provide the Services, and for the term of the contract.

13.2. The Operator does not use User Content for advertising and does not sell it. The Operator may use aggregated, anonymised statistical data from which no User or Company can be identified to improve the Services.

13.3. The Platform, its program code, design, texts and logo, and the trade marks and names ood.bg, D.O.B.I. and DOBG, are the property of the Operator or of its licensors. The User receives a non-exclusive, non-transferable right to use the Platform for the term of the contract according to their plan.

13.4. The Operator may use suggestions and feedback sent by the User to improve the Services, without any obligation to pay for them.

14. Illegal content and notices (Regulation (EU) 2022/2065, the Digital Services Act)

14.1. The Operator's single point of contact for the authorities of the Member States, the European Commission and recipients of the service is [email protected]. Communication takes place in Bulgarian or English.

14.2. Anyone may notify the Operator at [email protected] of content in the Platform that they consider to be illegal. The notice must contain: an explanation of why the content is illegal, its exact location (link), the name and email address of the sender (except in the case of offences against children) and a statement that the sender believes in good faith that the information is accurate and complete.

14.3. The Operator handles notices in a timely manner, in good faith and objectively, and informs the sender of its decision. When it restricts access to content or to an Account, the Operator sends the affected User a reasoned statement of the grounds and of the options for appeal, unless the law prohibits this.

14.4. The Operator does not carry out general monitoring of User Content and does not take decisions on content by automated means. When it becomes aware of information giving rise to a suspicion of a criminal offence that threatens the life or safety of persons, the Operator informs the competent authorities.

15. Suspension and restriction of access

15.1. The Operator may temporarily restrict or suspend access to an Account, Company, API key or feature when: (a) the User materially or systematically breaches these general terms or the law; (b) there is an imminent threat to the security of the Platform or of other Users; (c) this is ordered by a competent authority.

15.2. The Operator notifies the User in advance and gives them a reasonable period to remedy the breach, unless this is impossible, prohibited by law or would endanger security. The measure is proportionate and lasts only as long as necessary.

15.3. During the suspension, the User may request to download their data, unless this is prohibited by a competent authority.

16. Term and termination

16.1. The contract is concluded for an indefinite term.

16.2. The User may terminate the contract at any time by requesting deletion of the Account from the "Profile" page or at [email protected]. Deletion is carried out within 30 days; until then, the request may be withdrawn. Companies of which the User is the sole Owner are deleted or transferred according to the User's instructions.

16.3. The Operator may terminate the contract with 30 days' notice by email, and without notice in the event of a material or systematic breach of these general terms that has not been remedied within the period given, or on the order of a competent authority.

16.4. If a paid plan ends because the Operator terminates the contract through no fault of the User, the Operator refunds, pro rata, the amount paid for the unused period.

17. Data download and switching providers

17.1. The User may, at any time and at no extra charge, download their data in a structured, machine-readable format: documents (PDF), lists of documents, partners, goods and stock (CSV), VAT ledgers and the Account data (JSON), and also via the API.

17.2. After termination of the contract, the Company's data remains available for download for at least 30 days, unless the User expressly requests earlier deletion. After that period the data is deleted, including from backups at their next rotation, except for data that the Operator is required by law to keep.

17.3. The Operator does not charge fees for downloading data or for switching providers, and assists the User in transferring the data to another provider in accordance with Regulation (EU) 2023/2854 (Data Act).

18. Liability

18.1. The Operator is liable for damage caused through its fault by failing to perform its obligations under the contract.

18.2. To the extent permitted by law, the Operator is not liable for: (a) damage resulting from incorrect or incomplete data entered by the User or by Team Members; (b) decisions made by the User on the basis of reports, forecasts or AI answers; (c) interruptions due to force majeure (Art. 306 of the Commerce Act), actions of third parties, problems in the internet network or in third-party services (providers of payment services, e-mail delivery services or AI models, VIES); (d) access by third parties to the Account because the User did not keep passwords or keys safe.

18.3. In relations with Business Users, the Operator is not liable for lost profits or indirect damage, and the total amount of its liability is limited to the amounts paid by the User concerned for the Services in the 12 months before the event giving rise to the liability, and for the free plan to EUR 100.

18.4. The limitations in this section do not apply in the case of intent or gross negligence (Art. 94 of the Obligations and Contracts Act (ZZD)) or of harm to life or health, and they do not limit those rights of Consumer Users that cannot be excluded by law.

18.5. The User compensates the Operator for damage, fines and reasonable costs incurred as a result of a breach of the law or of these general terms by the User.

19. Changes to the general terms

19.1. The Operator may change these general terms in the event of changes in legislation, in the Services or in the business model. Registered Users are notified of material changes by email or in the Platform at least 30 days before they take effect.

19.2. If the User does not agree with the changes, they may terminate the contract without penalty before the changes take effect. Continued use after that date means acceptance of the changes.

19.3. Changes required by law or by an act of a competent authority, as well as changes entirely in the User's favour, may take effect earlier.

20. Communication

20.1. The Operator sends Users messages related to the Services — about security, payments, and changes to the Services or to these terms — by email and in the Platform. These messages are not marketing. Marketing messages are sent only with consent (see the Privacy Policy).

20.2. The User sends their notices to [email protected]. Notices are deemed received on the day they are sent if sent on a working day by 17:00, and otherwise on the next working day.

21. Governing law and disputes

21.1. Bulgarian law applies to matters not covered by these terms. This does not deprive a Consumer User of the protection afforded to them by the mandatory provisions of the law of the country of their habitual residence.

21.2. The parties resolve disputes by mutual agreement. If no agreement is reached, the dispute is referred to the competent Bulgarian court; for disputes with Business Users, to the competent court in Varna.

21.3. A Consumer User may also apply to a body for the alternative resolution of consumer disputes — the General Conciliation Commission at the Commission for Consumer Protection, seated in Varna (for the Varna, Dobrich and Silistra regions), or another approved body from the list at kzp.bg.

22. Final provisions

22.1. If any provision of these general terms is invalid, this does not affect the remaining provisions. The invalid provision is replaced by the mandatory rules of law.

22.2. Failure by the Operator to exercise a right does not constitute a waiver of that right.

22.3. These terms are drawn up in Bulgarian. The English translation is provided for convenience; in case of any discrepancy, the Bulgarian text prevails.

Annex 1. Personal data processing agreement

This annex is an agreement under Art. 28 of Regulation (EU) 2016/679 (GDPR) between the User (the Owner), acting on behalf of the Company as controller, and the Operator as processor. It applies to the personal data that the User enters in the Platform about their partners, customers, suppliers, employees and other persons. For the data of the Account itself, for plan payments and for the website, the Operator is an independent controller in accordance with the Privacy Policy.

1. Subject matter, duration, nature and purpose. The Operator processes the personal data only in order to provide the Services — storage, display, calculation, sending, printing, scanning, signing, reports, AI analyses at the User's request, backups and support — for the term of the contract and of the download period under clause 17.

2. Types of data and data subjects. Names, Unified Civil Number (EGN) or Personal Number of a Foreigner (LNCh) (when entered as a partner identifier), addresses, email addresses, telephone numbers, bank accounts, roles (materially responsible person (MOL), recipient, person who drew up the document), the content of documents and payments, scanned images, code signatures and the technical data related to them — of customers, suppliers and their representatives, employees and users of the Company, and other persons named in the documents.

3. Instructions. The Operator processes the data only on documented instructions from the controller — these general terms and the User's settings and actions in the Platform — including with regard to transfers to a third country, unless EU or Bulgarian law requires otherwise. The Operator informs the User if it considers that an instruction infringes the GDPR.

4. Confidentiality. Persons who have access to the data on the Operator's side are bound by confidentiality and have access only to the extent needed.

5. Security. The Operator applies measures under Art. 32 GDPR, including: encrypted connection (TLS), encryption of sensitive data, password hashing, two-factor authentication, isolation of each Company's data at database level, role-based access control, an activity log, encrypted backups and regular review of the measures.

6. Sub-processors. The User gives general authorisation for the Operator to use sub-processors. The current list is in the Privacy Policy. The Operator notifies the User by email or in the Platform at least 14 days before adding or replacing a sub-processor; the User may object on reasonable grounds and, if no solution is found, terminate the contract without penalty. The Operator imposes the same data protection obligations on sub-processors and is liable for their performance.

7. Transfers outside the EEA. Transfers to a third country take place only in compliance with Chapter V of the GDPR — on the basis of an adequacy decision or of standard contractual clauses.

8. Assistance. Taking into account the nature of the processing, the Operator assists the User in responding to requests from data subjects and in fulfilling the User's obligations under Art. 32–36 GDPR (security, breach notification, impact assessment, consultation with the supervisory authority). The User handles most requests themselves using the Platform's features (correction, download, deletion).

9. Security breaches. The Operator notifies the User of a personal data breach without undue delay after becoming aware of it, where possible within 48 hours, with the available information on its nature, the categories affected and the measures taken.

10. End of processing. After termination of the contract and expiry of the download period under clause 17, the Operator deletes the personal data, unless the law requires it to be retained. During the download period, the User may obtain their data in a machine-readable format.

11. Audits. The Operator provides the User with the information necessary to demonstrate compliance with Art. 28 GDPR and allows audits — as a rule by means of a written questionnaire and documentation, and, where there is a reasonable suspicion of a breach, also an on-site audit after reasonable notice, at the User's expense.

Annex 2. Standard form for exercising the right of withdrawal

(complete and send this form only if you wish to withdraw from the contract; for Consumer Users only)

To DOBG Ltd. („ДО БГ“ ЕООД), Varna, [email protected]

I hereby give notice that I withdraw from the contract concluded by me for the provision of the following service: ____________________

Ordered on: ____________ · Name of the consumer: ____________ · Account email: ____________

Signature (only if this form is on paper): ____________ · Date: ____________