Legal

Terms of Service & Privacy Policy

Last updated: 30 June 2026

On this page

This page contains two documents. Part A — Terms of Service governs how I work with clients and your use of this website. Part B — Privacy Policy explains how I handle personal data under the EU General Data Protection Regulation (GDPR). Together they apply to anyone who visits this website, requests a quote, or engages my services.

Part A

Terms of Service

The agreement between BILAK.MK ("I", "me", "the Provider") and you ("you", "the Client"). By requesting a quote, engaging my services, or using this website, you agree to these Terms.

1Who I am

BILAK.MK is operated by Maksym Bilak, an independent sole operator providing custom workflow automation, Telegram bots, self-hosted infrastructure, and reporting dashboards — primarily built on self-hosted n8n — for small and medium businesses in the EU. I am based in Bratislava, Slovakia. Full contact and legal details are in the Contact section below and on the main site.

2Scope of services

I design, build, and deploy automation workflows and related tooling as agreed with each Client on a per-project basis. The exact scope, deliverables, and price for any engagement are defined in the individual quote or written agreement for that project. These Terms apply in addition to, and do not replace, any project-specific agreement; where the two conflict, the project-specific agreement prevails.

Anything not explicitly listed in the agreed scope is considered out of scope and may require a separate quote.

3Quotes, pricing & packages

Projects are quoted at a fixed price, starting from €950, based on the scope discussed. A quote is valid for 14 days from the date it is issued unless stated otherwise. Prices are exclusive of any third-party costs — such as hosting, API fees, or paid software licenses — unless those are explicitly included in the quote. All prices are in euros (EUR).

4Payment terms

Unless agreed otherwise in writing, projects are billed as follows:

Invoices are due within 14 days of the invoice date unless a different period is stated on the invoice. Work may be paused on overdue payments, and any agreed timeline is extended accordingly. The deposit is non-refundable once work has started, to the extent permitted by applicable law.

5Ongoing support plan

An optional Support plan is available at €250 per month. It covers maintenance, monitoring, and fixes for delivered automations, including issues caused by third-party API changes (for example Telegram, WhatsApp, or other connected services updating their APIs) that are outside my control. Under the Support plan I aim to respond and resolve issues quickly — typically the same business day — but response and resolution times are targets, not guarantees, and may vary with issue complexity.

Without an active Support plan, post-delivery fixes are quoted on a per-issue basis, typically €50–150 depending on the issue.

6Process & timelines

Most projects are delivered within a few business days to a couple of weeks, depending on scope. Any timeline given is a good-faith estimate, not a guarantee, and assumes timely Client cooperation (see section 8). Delays caused by the Client — late feedback, missing access, or scope changes — extend the timeline accordingly.

7Revisions & scope changes

Each project includes a reasonable number of revisions within the agreed scope, as specified in the quote. Requests that go beyond the agreed scope — new features, additional integrations, or significant changes to agreed requirements — are treated as new work and quoted separately.

8Client responsibilities

To deliver on time, I rely on you to:

You are responsible for the lawful use of the automations once handed over, including compliance with the terms of any third-party services they connect to, and including any data-protection obligations you have toward your own customers or staff.

9Third-party services & hosting

Automations may rely on third-party platforms and APIs (for example n8n, Telegram, WhatsApp Business API, email providers, and hosting such as Hetzner). I am not responsible for outages, changes, pricing, deprecations, or policy decisions made by those third parties. Where a workflow depends on a third-party service, its continued operation depends on that service remaining available and on your account with it staying in good standing.

10Intellectual property

On full payment, you receive ownership of, or a license to use, the custom workflows and deliverables built specifically for you, for your own business purposes. I retain ownership of any pre-existing tools, templates, generic building blocks, and know-how I bring to the project, and I may reuse those non-confidential, non-Client-specific components in other work.

Unless you request otherwise in writing, I may reference the project at a high level (e.g. industry and type of automation) in my portfolio, without disclosing your confidential data.

11Confidentiality

I treat non-public information you share for the purpose of a project as confidential and will not disclose it to third parties except as needed to deliver the work, or where required by law. This obligation continues after the project ends.

12Data protection (GDPR)

I process personal data in line with the EU General Data Protection Regulation (GDPR). How I handle data submitted through this website is set out in full in Part B — Privacy Policy. Where a project involves me processing personal data on your behalf (i.e. you are the controller and I act as a processor), the roles and obligations of each party are set out in the project agreement or a separate data processing agreement (DPA) as required by Article 28 GDPR.

13Warranties & disclaimers

I build each project with reasonable skill and care. Beyond that, services and deliverables are provided "as is". I do not warrant that automations will be uninterrupted or error-free, particularly where they depend on third-party services outside my control. Any post-delivery support, maintenance, or bug-fix window is as stated in the project agreement or the Support plan; outside that, further work is quoted separately.

14Limitation of liability

To the maximum extent permitted by applicable law, my total liability arising out of or in connection with any project is limited to the amount you paid for that project. I am not liable for indirect, incidental, or consequential losses, including lost profits, lost revenue, or loss of data. Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law.

15Term & termination

Either party may end an engagement in writing. If you terminate after work has begun, you remain responsible for payment for work completed up to that point. On termination, I will hand over completed, paid-for deliverables where reasonable.

16Force majeure

Neither party is liable for delays or failures caused by events beyond reasonable control, including third-party service outages, infrastructure failures, or other events that could not reasonably be foreseen or avoided.

17Governing law & jurisdiction

These Terms are governed by the laws of the Slovak Republic. Any disputes are subject to the competent courts of the Slovak Republic, without prejudice to any mandatory consumer-protection rights you may have under the law of your country of residence.

18Changes to these Terms

I may update these Terms from time to time. The version in force is the one published on this page, with the "last updated" date shown above. The Terms applying to a given project are those in force when that project is agreed.

19Contact

Questions about these Terms? Email hello@bilakmk.com or reach out via the contact options on the main site.

Note: These Terms are a general framework for how I work, not legal advice. Before relying on them commercially, have them reviewed by a qualified lawyer in your jurisdiction to confirm they fit your specific situation.
Part B

Privacy Policy

How BILAK.MK collects, uses, and protects personal data under the EU General Data Protection Regulation (GDPR). This policy covers data handled through this website and during initial enquiries.

1Data controller

The controller responsible for your personal data is:

Maksym Bilak (trading as BILAK.MK)
Na križovatkách 39, 821 04 Bratislava, Slovakia
hello@bilakmk.com

Operating as an individual (pre-registration). Business ID (IČO / DIČ) and EU VAT number will be added here once registered.

2What data I collect

When you use the contact form on this website, I collect only what you choose to provide:

To reduce lost leads, the form may transmit your name and industry to my system after the first steps, before you finish — so that an abandoned enquiry can still be followed up. This data is treated exactly the same way as a completed enquiry and under the same legal basis (see section 4).

Technical data. Like most websites and servers, my hosting and application logs may automatically record technical information such as IP address, browser type, and timestamps. This is used only for security, stability, and abuse prevention, and is not used to build profiles of visitors.

3How I use your data

I use the data you submit only to:

I do not sell your data, and I do not use it for unrelated marketing.

4Legal basis for processing

I process enquiry data on the basis of legitimate interest (Article 6(1)(f) GDPR) — namely, responding to a business enquiry you initiated and assessing whether we can work together. Where you contact me to begin a project, processing is also necessary for steps prior to entering into a contract (Article 6(1)(b) GDPR). Technical/security logging relies on legitimate interest in keeping the service secure and available. Where any optional cookies or analytics are used, they rely on your consent (see section 8).

5Where your data goes (processors & transfers)

I keep the data footprint deliberately small and EU-first. The infrastructure that stores and processes your enquiry is located in the EU:

ServicePurposeLocation
Hetzner Online GmbHServer hosting & self-hosted n8n automationGermany (EU)
mailbox.org (Heinlein Support GmbH)Email handling for hello@bilakmk.comGermany (EU)
TelegramInternal notifications to me about new enquiriesInternational
Meta Platforms (WhatsApp)Only if you choose WhatsApp as your contact methodUnited States

The automation engine (n8n) runs on my own EU servers and is not a separate third party. If you choose to contact me via WhatsApp, your message and number pass through Meta's systems (United States); this is your choice of channel. International transfers, where they occur, rely on the relevant safeguards (such as EU Standard Contractual Clauses) provided by those services.

6How long I keep it

Enquiry data is kept for up to 24 months after our last contact, after which it is deleted, unless a project goes ahead — in which case project-related records are kept for as long as needed for the engagement and for any legal or accounting obligations. You can ask me to delete your data sooner at any time (see section 7).

7Your rights

Under the GDPR you have the right to:

To exercise any of these, email hello@bilakmk.com. I'll respond within the timeframe required by law (normally one month).

8Cookies & analytics

Currently, this website uses only a single functional cookie that remembers your cookie-consent choice. It is strictly necessary for the consent banner to work and does not track you.

When analytics are enabled (for example Google Analytics 4, Meta Pixel, or similar tools, which I may add to understand how the site is used), they will:

Some of these tools (e.g. Google, Meta) process data in the United States; if and when they are enabled, this section will name them explicitly and describe the transfer safeguards. You can change or withdraw your cookie choice at any time by clearing the site's cookies in your browser.

9Data security

Data is hosted on EU servers (Hetzner, Germany) with industry-standard security measures. Access to enquiry data is limited to me. Fonts and assets are self-hosted, so simply loading this website does not send your IP address to third-party content networks.

10Right to complain

If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Slovak supervisory authority:

Úrad na ochranu osobných údajov Slovenskej republiky
(Office for Personal Data Protection of the Slovak Republic)
Hraničná 12, 820 07 Bratislava, Slovakia
dataprotection.gov.sk

You may also complain to the supervisory authority in your own EU country of residence.

11Changes to this Privacy Policy

I may update this Privacy Policy as the service evolves — for example, when new tools or analytics are added. The current version is always the one published on this page, with the "last updated" date shown at the top. For material changes, the updated date will reflect the revision.

Note: This Privacy Policy describes my current data practices in good faith. It is not legal advice. For a binding, jurisdiction-specific review, consult a qualified data-protection lawyer.