Legal

Terms of Service & Privacy Policy

Last updated: 6 August 2026

On this page

This page contains two documents. Part A – Terms of Service governs how I work with clients and your use of this website. Part B – Privacy Policy explains how I handle personal data under the EU General Data Protection Regulation (GDPR). Together they apply to anyone who visits this website, requests a quote, or engages my services.

Part A

Terms of Service

The agreement between BILAK.MK ("I", "me", "the Provider") and you ("you", "the Client"). By requesting a quote, engaging my services, or using this website, you agree to these Terms.

1Who I am

BILAK.MK is operated by Maksym Bilak, an independent sole operator providing custom workflow automation, Telegram bots, self-hosted infrastructure, and reporting dashboards – primarily built on self-hosted n8n – for small and medium businesses in the EU. I am based in Bratislava, Slovakia. Full contact and legal details are in the Contact section below and on the main site.

2Scope of services

I design, build, and deploy automation workflows and related tooling as agreed with each Client on a per-project basis. The exact scope, deliverables, and price for any engagement are defined in the individual quote or written agreement for that project. These Terms apply in addition to, and do not replace, any project-specific agreement; where the two conflict, the project-specific agreement prevails.

Anything not explicitly listed in the agreed scope is considered out of scope and may require a separate quote.

3Quotes, pricing & packages

Projects are quoted at a fixed price, starting from €950, based on the scope discussed. A quote is valid for 14 days from the date it is issued unless stated otherwise. Prices are exclusive of any third-party costs – such as hosting, API fees, or paid software licenses – unless those are explicitly included in the quote. All prices are in euros (EUR).

4Payment terms

Unless agreed otherwise in writing, projects are billed as follows:

Invoices are due within 14 days of the invoice date unless a different period is stated on the invoice. Work may be paused on overdue payments, and any agreed timeline is extended accordingly. The deposit is non-refundable once work has started, to the extent permitted by applicable law.

5Ongoing support plan

An optional Support plan is available at €250 per month. It covers maintenance, monitoring, and fixes for delivered automations, including issues caused by third-party API changes (for example Telegram, WhatsApp, or other connected services updating their APIs) that are outside my control. Under the Support plan I aim to respond and resolve issues quickly – typically the same business day – but response and resolution times are targets, not guarantees, and may vary with issue complexity.

Without an active Support plan, post-delivery fixes are quoted on a per-issue basis, typically €50–150 depending on the issue.

6Process & timelines

Most projects are delivered within 3 to 12 business days, depending on scope; larger or multi-part builds can run longer. Any timeline given is a good-faith estimate, not a guarantee, and assumes timely Client cooperation (see section 8). Delays caused by the Client – late feedback, missing access, or scope changes – extend the timeline accordingly.

7Revisions & scope changes

Each project includes a reasonable number of revisions within the agreed scope, as specified in the quote. Requests that go beyond the agreed scope – new features, additional integrations, or significant changes to agreed requirements – are treated as new work and quoted separately.

8Client responsibilities

To deliver on time, I rely on you to:

You are responsible for the lawful use of the automations once handed over, including compliance with the terms of any third-party services they connect to, and including any data-protection obligations you have toward your own customers or staff.

9Third-party services & hosting

Automations may rely on third-party platforms and APIs (for example n8n, Telegram, WhatsApp Business API, email providers, and hosting such as Hetzner). I am not responsible for outages, changes, pricing, deprecations, or policy decisions made by those third parties. Where a workflow depends on a third-party service, its continued operation depends on that service remaining available and on your account with it staying in good standing.

10Intellectual property

On full payment, you receive ownership of, or a license to use, the custom workflows and deliverables built specifically for you, for your own business purposes. I retain ownership of any pre-existing tools, templates, generic building blocks, and know-how I bring to the project, and I may reuse those non-confidential, non-Client-specific components in other work.

Unless you request otherwise in writing, I may reference the project at a high level (e.g. industry and type of automation) in my portfolio, without disclosing your confidential data.

11Confidentiality

I treat non-public information you share for the purpose of a project as confidential and will not disclose it to third parties except as needed to deliver the work, or where required by law. This obligation continues after the project ends.

12Data protection (GDPR)

I process personal data in line with the EU General Data Protection Regulation (GDPR). How I handle data submitted through this website is set out in full in Part B – Privacy Policy. Where a project involves me processing personal data on your behalf (i.e. you are the controller and I act as a processor), the roles and obligations of each party are set out in the project agreement or a separate data processing agreement (DPA) as required by Article 28 GDPR.

13Warranties & disclaimers

I build each project with reasonable skill and care. Beyond that, services and deliverables are provided "as is". I do not warrant that automations will be uninterrupted or error-free, particularly where they depend on third-party services outside my control.

Each project includes a free-fix guarantee period running from delivery, during which I fix defects in the delivered workflow logic and code at no charge: 14 days for the Quick Win package and 30 days for the Full System package, unless a different period is stated in your project agreement. The guarantee covers workflow logic bugs, crashes originating on my side, and code errors. It does not cover new features, changes you make yourself, or third-party API changes; those are quoted separately or covered by the Support plan. Outside the guarantee period and without an active Support plan, further work is quoted separately.

14Limitation of liability

To the maximum extent permitted by applicable law, my total liability arising out of or in connection with any project is limited to the amount you paid for that project. I am not liable for indirect, incidental, or consequential losses, including lost profits, lost revenue, or loss of data. Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law.

15Term, termination & data export

Either party may end an engagement in writing. If you terminate after work has begun, you remain responsible for payment for work completed up to that point. On termination, I will hand over completed, paid-for deliverables where reasonable.

Data export. For 14 days from the end of an engagement, you may request a full export of everything belonging to you: the workflow definitions, your database contents, documentation, and any credentials still held by me. I provide it in a standard, readable format at no charge, and I assist with the handover. After that period I may delete material held only on my own infrastructure, subject to the retention rules in Part B and to any legal or accounting obligations.

16Force majeure

Neither party is liable for delays or failures caused by events beyond reasonable control, including third-party service outages, infrastructure failures, or other events that could not reasonably be foreseen or avoided.

17Governing law & jurisdiction

These Terms are governed by the laws of the Slovak Republic. Any disputes are subject to the competent courts of the Slovak Republic, without prejudice to any mandatory consumer-protection rights you may have under the law of your country of residence.

18Changes to these Terms

I may update these Terms from time to time. The version in force is the one published on this page, with the "last updated" date shown above. The Terms applying to a given project are those in force when that project is agreed.

19Contact

Questions about these Terms? Email hello@bilakmk.com or reach out via the contact options on the main site.

Note: These Terms are a general framework for how I work, not legal advice. Before relying on them commercially, have them reviewed by a qualified lawyer in your jurisdiction to confirm they fit your specific situation.
Part B

Privacy Policy

How BILAK.MK collects, uses, and protects personal data under the EU General Data Protection Regulation (GDPR). This policy covers data handled through this website and during initial enquiries.

1Data controller

The controller responsible for your personal data is:

Maksym Bilak (trading as BILAK.MK)
Bratislava, Slovakia
hello@bilakmk.com

Services are provided by Maksym Bilak as an independent sole operator. Any applicable business identifiers (IČO / DIČ) and EU VAT number are shown here when they apply.

2What data I collect

When you use the contact form on this website, I collect only what you choose to provide:

To reduce lost leads, the form may transmit your name and industry to my system after the first steps, before you finish – so that an abandoned enquiry can still be followed up. This data is treated exactly the same way as a completed enquiry and under the same legal basis (see section 4).

Technical data. Like most websites and servers, my hosting and application logs may automatically record technical information such as IP address, browser type, and timestamps. This is used only for security, stability, and abuse prevention, and is not used to build profiles of visitors.

Analytics data. If you accept analytics cookies, the tools listed in section 8 also collect usage data about your visit: pages viewed, approximate location derived from IP, device and browser type, and interactions with the page. Nothing analytics-related is collected before you accept.

3How I use your data

I use the data you submit only to:

I do not sell your data, and I do not use it for unrelated marketing.

4Legal basis for processing

I process enquiry data on the basis of legitimate interest (Article 6(1)(f) GDPR) – namely, responding to a business enquiry you initiated and assessing whether we can work together. Where you contact me to begin a project, processing is also necessary for steps prior to entering into a contract (Article 6(1)(b) GDPR). Technical/security logging relies on legitimate interest in keeping the service secure and available. Analytics cookies and the processing they involve rely on your consent (Article 6(1)(a) GDPR), which you can give or refuse in the cookie banner and withdraw at any time (see section 8).

5Where your data goes (processors & transfers)

I keep the data footprint deliberately small and EU-first. The infrastructure that stores and processes your enquiry is located in the EU:

ServicePurposeLocation
Hetzner Online GmbHServer hosting & self-hosted n8n automationGermany (EU)
mailbox.org (Heinlein Support GmbH)Email handling for hello@bilakmk.comGermany (EU)
TelegramInternal notifications to me about new enquiriesInternational
Meta Platforms (WhatsApp)Only if you choose WhatsApp as your contact methodUnited States
Google Ireland Ltd. (Tag Manager, Analytics 4)Website analytics, loaded only after you accept cookiesIreland (EU), with transfers to the United States
Microsoft Corp. (Clarity)Website usage analytics, loaded only after you accept cookiesUnited States

The automation engine (n8n) runs on my own EU servers and is not a separate third party. If you choose to contact me via WhatsApp, your message and number pass through Meta's systems (United States); this is your choice of channel. The analytics providers in the table run only with your consent and are described in section 8. International transfers, where they occur, rely on the relevant safeguards (such as EU Standard Contractual Clauses) provided by those services.

Note on enquiry data: what you type into the contact form is sent to my own n8n instance on Hetzner in Germany. It is not sent to the analytics providers above.

6How long I keep it

Enquiry data is kept for up to 24 months after our last contact, after which it is deleted, unless a project goes ahead – in which case project-related records are kept for as long as needed for the engagement and for any legal or accounting obligations. Analytics data is retained according to the retention settings of the tools in section 8, typically up to 14 months. You can ask me to delete your data sooner at any time (see section 7).

7Your rights

Under the GDPR you have the right to:

To exercise any of these, email hello@bilakmk.com. I'll respond within the timeframe required by law (normally one month).

8Cookies & analytics

Strictly necessary. This website sets one functional cookie that remembers your cookie-consent choice. It is required for the consent banner to work and does not track you. It is set whether you accept or reject analytics.

Analytics, only after you accept. This website uses the following analytics tools, loaded through Google Tag Manager:

Both are gated by Google Consent Mode v2: until you press "Accept" in the cookie banner, consent is set to denied and no analytics or advertising storage is used. If you press "Reject", they stay off. You can change your mind at any time by clearing this site's cookies in your browser, which brings the banner back.

Transfers. Google and Microsoft process data in the United States. Those transfers rely on the safeguards those providers offer, including the EU–US Data Privacy Framework and EU Standard Contractual Clauses. If you would rather not have this happen, simply reject analytics cookies – the site works exactly the same either way.

No advertising cookies. I do not run advertising or remarketing pixels on this site. If that ever changes, this section will name the tool before it goes live.

9Data security

Data is hosted on EU servers (Hetzner, Germany) with industry-standard security measures. Access to enquiry data is limited to me. Fonts and assets are self-hosted, so simply loading this website does not send your IP address to third-party content networks. Analytics scripts are the only third-party code on the site, and they load only after you accept.

10Right to complain

If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Slovak supervisory authority:

Úrad na ochranu osobných údajov Slovenskej republiky
(Office for Personal Data Protection of the Slovak Republic)
Hraničná 12, 820 07 Bratislava, Slovakia
dataprotection.gov.sk

You may also complain to the supervisory authority in your own EU country of residence.

11Changes to this Privacy Policy

I may update this Privacy Policy as the service evolves – for example, when new tools or analytics are added. The current version is always the one published on this page, with the "last updated" date shown at the top. For material changes, the updated date will reflect the revision.

Note: This Privacy Policy describes my current data practices in good faith. It is not legal advice. For a binding, jurisdiction-specific review, consult a qualified data-protection lawyer.