Toimur User Agreement

Version 1 — effective 24 September 2026

The short version

This summary is here to help you. It does not replace the full terms below.

• Business use only. You use Toimur for your trade, business or profession, not as a consumer (section 2).
• No way back to Free. Once your account has been on a paid plan, it can never return to the Free plan (5.6).
• Cancelling stops the next renewal; you keep your plan until the paid period ends. Your account is then read-only for 30 days, after which your access ends and we may delete the account without further notice (7, 9).
• No refunds for part of a period — including when you delete your account while a subscription is running: deletion is immediate and permanent, and the remaining days are not refunded. Section 7 lists the exceptions.
• Toimur is not accounting software. It does not decide VAT, number your invoices, send them or collect payment. What your documents say is your responsibility (3).
• Keep your own records. Export your data and download the invoice PDFs you need before your access ends. Keeping records for as long as the law requires is your duty (3.4, 9.5).
• Our liability is limited to what you paid us in the 12 months before a claim, or €100 if that is more, and excludes indirect loss — except where the law does not allow such limits (15).
• Prices and these terms can change. If you already subscribe, we tell you by email at least 30 days in advance, and you can cancel first (5.4, 18).

1. About this agreement

1.1 This User Agreement is a contract between you and GÜNES CONSULTING OÜ, a private limited company registered in Estonia (registry code 14536342, registered address Sepapaja tn 6, 15551 Tallinn, Estonia) — "we" or "us". Email: support@toimur.com.

1.2 It governs your use of Toimur, the web application at toimur.com. Annex A (Data Processing) is part of it. How we handle personal data about you as our customer is explained in our Privacy Policy at https://www.toimur.com/en/privacy.

1.3 You accept this agreement when you create a Toimur account. If you do not accept it, please do not use Toimur.

1.4 If you use Toimur for a company, "you" means that company, and you confirm that you are authorised to accept this agreement on its behalf.

1.5 This agreement is written in English, and the English version governs. Any translation is provided for convenience only.

1.6 The current version is published at https://www.toimur.com/en/terms, where you can save or print it. We keep earlier versions and will send you the one you accepted if you ask.

2. Business use only

2.1 Toimur is made for people who work for themselves: sole traders, freelancers, independent consultants and one-person agencies. By accepting this agreement, you confirm that you use Toimur for the purposes of your trade, business or profession, and not as a consumer.

2.2 If mandatory consumer protection law applies to you nonetheless, nothing in this agreement takes away the rights it gives you. Where a term of this agreement conflicts with those rights, those rights apply instead.

2.3 You must be at least 18 years old and have the legal capacity to enter into this agreement.

3. What Toimur is, and what it is not

3.1 Toimur helps one person organise clients, projects, orders, tasks, time, estimates and invoices, and create documents from them.

3.2 Toimur is a tool. It is not an adviser, an accounting system or an official register. In particular:

• (a) It does not allocate invoice numbers. You type them, and Toimur is not a legal register of them.
• (b) It does not decide tax. It shows the VAT rate you enter on each line and calculates amounts from it. It never chooses a rate for you, and it never checks a VAT or registration number against any register.
• (c) It does not send your documents or collect your payments. You send your invoices and estimates yourself, and your clients pay you directly.
• (d) Its time records are a working tool for your own planning and billing. They are not an official timesheet or record of working time.
• (e) Nothing in Toimur is tax, legal or accounting advice.

3.3 You alone decide what every document you create with Toimur says, and you are responsible for it: its content, numbering, tax treatment, legal correctness and delivery. Check each document before you send it.

3.4 Toimur is not your archive. You are responsible for keeping your own records, including copies of the invoices you issue, for as long as the law that applies to you requires. Section 10.5 explains how to export them.

4. Your account

4.1 An account is for one person. Do not share your sign-in details, and do not let anyone else use your account.

4.2 Give accurate information and keep it up to date. Keep your email address working: it is how we contact you, and how you get back into your account if you lose your password.

4.3 Keep your password secret. You are responsible for what is done through your account, unless it happened because of a failure on our side. If you think someone else has accessed your account, tell us straight away at support@toimur.com.

4.4 You may not transfer your account to anyone else.

5. Plans and prices

5.1 Toimur has a free plan ("Free") and paid plans (currently Personal and Professional). What each plan includes, its limits and its price are shown on the pricing page at toimur.com.

5.2 Free. Free requires no payment and no card. It has lower limits than the paid plans, and PDFs created on it carry a watermark. We may improve Free at any time. We may also reduce its limits or features, or stop offering it, after giving you at least 30 days' notice by email. A reduction deletes nothing, but you may not be able to create new items while you are over the new limits. If we stop offering Free, you can move to a paid plan or export your data before the date in our notice; if you do neither, your access ends on that date and section 9.4 applies.

5.3 Paid plans are subscriptions paid monthly in advance. They renew automatically each month until cancelled. The price, and any tax on it, is shown at checkout before you pay.

5.4 Price changes. We may change our prices. A new price applies to new subscriptions from the date we set. For a subscription you already have, we will tell you by email at least 30 days in advance, and the new price applies from your first renewal after that notice period. If you do not want to pay it, cancel before that renewal. A change in tax that the law requires applies from the date the law sets.

5.5 Changing plans. You can move between paid plans at any time. The payment partner shows you any price difference before you confirm. Moving to a smaller plan deletes nothing: everything stays readable and editable, but you may not be able to create new items while you are over the smaller plan's limits.

5.6 No return to Free. Once your account has been on any paid plan, it can never return to the Free plan — whether you move to a smaller plan, cancel or stop paying. You are asked to confirm that you understand this before your first payment. If your subscription ends, section 9 applies.

6. Payments

6.1 Payments for paid plans are handled by a payment partner that acts as merchant of record for them. The partner runs the checkout, charges your payment method, calculates and collects any VAT or sales tax, and issues and sends your receipts and invoices. It is named at checkout and on your receipts.

6.2 When you pay, you also accept the payment partner's own terms. They govern the payment: charging, receipts and invoices, tax, refunds the partner grants, and payment disputes. This agreement governs your use of Toimur. If the two conflict on a payment matter, the partner's terms apply.

6.3 You manage your subscription — payment method, billing details, receipts and cancellation — through the payment partner, as shown in Toimur and on your receipts.

6.4 If the payment partner lets you pay in another currency, the partner makes the conversion, and the amount may differ from one payment to the next.

6.5 If a payment fails, the payment partner may try again. If the payment is not recovered, your subscription ends and section 9 applies.

6.6 For questions about a charge, contact the payment partner or us. For questions about Toimur itself, contact us.

7. Cancellation and refunds

7.1 You can cancel your subscription at any time. Cancellation takes effect at the end of the period you have already paid for. You keep full access until then, and you are not charged again.

7.2 We do not refund or credit any part of a period — whether you cancel, move to a smaller plan, stop using Toimur or delete your account — except:

• (a) where the law requires a refund;
• (b) where the payment partner grants one under its own refund policy; or
• (c) in the cases in section 7.3.

7.3 If your subscription ends early because of something we decide, we refund the part of your current period that you have paid for but can no longer use, calculated day by day. This applies when we discontinue Toimur (13.4), when we end this agreement with notice (12.5), when you end your subscription because of a change that significantly reduces your paid plan (13.2), and when you end this agreement after objecting to a new sub-processor (Annex A, A6).

7.4 To ask for a refund, use the contact option on your receipt to reach the payment partner, or write to us at support@toimur.com.

8. Deleting your account

8.1 You can delete your account at any time from Toimur's settings. Deletion is immediate and permanent: once you confirm it, your account and everything in it are erased from Toimur straight away. It cannot be undone, and we do not restore deleted accounts (see also Annex A, A10).

8.2 If a subscription is running, deleting your account cancels it immediately. The remaining days of the period you paid for are not refunded, except as section 7.2(a) and (b) provide. If you want to use those days, cancel your subscription instead, and delete your account later.

8.3 Before you delete, export your data and download the invoice PDFs you need (section 10.5).

9. When a subscription ends

9.1 A subscription ends when your cancellation takes effect, or when a payment fails and is not recovered.

9.2 Your account then becomes read-only for 30 days. You can still sign in, read everything, download your documents, export your data, delete your account or subscribe again. You cannot create or change anything.

9.3 After those 30 days, your access ends. You can no longer read or export your data. Until the account is deleted, you can still subscribe again, which restores full access, or delete the account yourself.

9.4 Once your access has ended, we may permanently delete your account and all its data at any time, without further notice. Annex A, A10 sets the latest date by which we will do so.

9.5 It is your responsibility to export your data and download your invoice PDFs before your access ends.

10. Your content

10.1 "Your content" is everything you put into Toimur or create with it: clients and contacts, projects, orders, tasks, time, rates, estimates, invoices, logos and other details.

10.2 Your content belongs to you. You allow us to store, copy, process and display it, and to create documents from it, only as needed to provide, secure and support Toimur, and where the law requires. This permission ends when your content is deleted.

10.3 We do not sell your content, use it for advertising, or send it to a language model or use it to train one.

10.4 Your content is stored in the European Union.

10.5 Export. Until your access ends, you can download an export of your account's data as a JSON file from Toimur's settings. The export does not include invoice PDFs: download the ones you need separately.

10.6 You are responsible for your content being lawful and for having the right to put it in Toimur. For the personal data of your clients and contacts you are the controller, and we process it on your behalf under Annex A.

10.7 Backups. We take reasonable measures to protect your content, including the backups kept by our database provider. We do not promise that lost or damaged data can always be recovered. Keep your own copies.

11. Acceptable use

11.1 You must not:

• (a) use Toimur for anything unlawful — including creating false documents, such as invoices for work that was never done, or for fraud, money laundering or tax evasion;
• (b) store content that is illegal or that infringes someone else's rights, or upload malicious code;
• (c) attack, probe or overload Toimur, get around its security or its plan limits, or access it by automated means other than those we provide;
• (d) copy, decompile or reverse-engineer Toimur, except where the law expressly allows it;
• (e) resell Toimur or make it available to others;
• (f) share your account, or open several Free accounts to get around Free's limits.

11.2 We do not routinely look at your content. We look at it only as section 10.2 allows — for example, to investigate a fault you report, a notice we receive or a security problem.

11.3 Reporting illegal content. Anyone can tell us about content in Toimur that they believe is illegal by writing to support@toimur.com. Please explain why it is illegal and where exactly it is, give your name and email address, and confirm that you believe your report is accurate and complete. We will confirm that we received it and tell you what we decided.

11.4 Our decisions. If we restrict your use of Toimur because we believe your content is illegal or breaks this agreement, we will tell you what we did, why, and how to contest it. These decisions are taken by a person, not by automated means. You can contest a decision by replying to our email or by writing to support@toimur.com, and we will look at it again. This does not limit your right to go to court.

12. Suspension and termination

12.1 We may suspend or close your account if you seriously or repeatedly breach this agreement — for example by abusing or attacking Toimur, storing illegal content, sharing your account or not paying.

12.2 Where there is a security risk, a legal risk or a legal obligation to act, we may do so immediately. Otherwise, we will first tell you what is wrong and give you a reasonable time to put it right — normally at least 7 days.

12.3 If we close your account for a breach, we will give you a way to obtain an export of your data within 30 days, unless the law or a security risk prevents it. No refund is due, except as section 7.2(a) and (b) provide.

12.4 You can end this agreement at any time by deleting your account (section 8).

12.5 We may also end this agreement for any other reason by giving you at least 60 days' notice by email. You can use Toimur and export your data until the end of the notice period, and section 7.3 applies.

13. Changes, availability and discontinuation

13.1 We keep developing Toimur. We may add, change or remove features for good reasons — for example to improve it, keep it secure, comply with the law, respond to changes at our providers, prevent misuse or keep it viable to run.

13.2 If a change significantly reduces what your paid plan includes, we will tell you by email at least 30 days before it applies to you, unless security or the law requires us to act sooner. If you do not accept the change, you can end your subscription — with immediate effect, if you wish — within 30 days of our notice or of the change, whichever is later. Section 7.3 then applies to any unused part of your period.

13.3 Availability. We aim to keep Toimur available, but it may be interrupted — for maintenance, updates, security measures or problems at our providers. We try to keep interruptions short. We do not guarantee any particular level of availability.

13.4 Discontinuation. We may stop offering Toimur altogether. If we do, we will tell you by email at least 60 days in advance. You can use Toimur and export your data until the date in our notice, and section 7.3 applies to any time you have paid for beyond it.

14. No warranties

14.1 We provide Toimur with reasonable care. Beyond that, and as far as the law allows, Toimur is provided "as is" and "as available". We do not promise that it will be uninterrupted or free of errors, that it will meet your particular needs — including the legal requirements for invoices in your country — or that data can always be recovered.

15. Liability

15.1 We are not liable for indirect or consequential loss, including loss of profit, revenue, business, goodwill or data.

15.2 Our total liability to you under or in connection with this agreement is limited to the amount you paid for Toimur in the 12 months before the event giving rise to the claim, or €100 if that is more.

15.3 These limits do not apply where the law does not allow liability to be limited — in particular for damage caused intentionally or through gross negligence, or for death or personal injury — and they do not reduce any mandatory rights you have as a consumer.

15.4 Please take reasonable steps to limit any loss, in particular by checking your documents before you send them and by keeping your own copies of your data.

15.5 Neither of us is liable for a failure caused by circumstances beyond our reasonable control that could not reasonably have been foreseen or avoided (force majeure) — such as a widespread failure of the internet or of the power supply, a natural disaster, war, or an order of a public authority.

16. Claims caused by your use

16.1 If someone else — for example one of your clients or an authority — makes a claim against us because of your content, the documents you create with Toimur, your breach of this agreement or your processing of personal data, you will compensate us for the resulting loss and reasonable costs, including legal costs, unless we caused the claim.

17. Intellectual property and feedback

17.1 Toimur — its software, design, texts and name — belongs to us or our licensors. While this agreement lasts, we give you a personal, non-exclusive and non-transferable right to use Toimur for your business in line with this agreement. We grant no other rights.

17.2 If you send us suggestions or feedback, we may use them freely and without any obligation to you.

18. Changes to this agreement

18.1 We may change this agreement for valid reasons, such as changes in the law or in how it is applied, a decision of a court or authority, changes to Toimur's features, plans or prices, changes at our providers or payment partner, security, preventing misuse, or making the text clearer.

18.2 Material changes — changes that are to your disadvantage in a significant way — are announced by email at least 30 days before they take effect. The email will say what changes and when, and that if you continue to use Toimur after that date, you accept the new version. If you do not accept it, you can cancel or delete your account before that date. If you cancel, the previous version continues to apply to you until your paid period ends.

18.3 Other changes — corrections, clarifications and changes in your favour — take effect when we publish them, and we will point them out in Toimur or by email. A change the law requires us to make sooner takes effect when the law requires, and we will tell you as early as we can.

18.4 The version number and date at the top of this agreement show which version applies.

19. Notices and contact

19.1 We contact you by email, at the address on your account, and in Toimur. We may treat that address as correct until you change it. Service and account emails — about security, billing, your account and changes to this agreement — are part of Toimur.

19.2 You agree that this agreement is concluded, and notices under it are given, electronically.

19.3 You can reach us at support@toimur.com. Messages sent there are read by a person.

19.4 The same address is our single point of contact under the EU Digital Services Act, for users and for authorities. Authorities may write to us in English or Estonian.

20. Law and disputes

20.1 This agreement is governed by the law of the Republic of Estonia.

20.2 If something goes wrong, please write to us first at support@toimur.com. Most problems can be solved that way.

20.3 Disputes are decided exclusively by the courts of Estonia, with Harju County Court (Harju Maakohus) in Tallinn as the court of first instance.

20.4 If you are a consumer, section 20.3 does not apply to you. You keep the protection of the mandatory law of the country where you live, and you may bring proceedings in the courts there.

21. General

21.1 This agreement, including Annex A, together with the description of your plan on the pricing page, is the whole agreement between you and us about Toimur.

21.2 If a court finds any part of this agreement invalid, the rest remains in force.

21.3 If we do not enforce a right straight away, we have not given it up.

21.4 We may use other companies to help us provide Toimur, and we remain responsible for them. We may transfer this agreement to a company that takes over Toimur, if it takes over this agreement too. We will tell you in advance, and you can cancel or delete your account if you do not want to continue.

21.5 You may not transfer this agreement to anyone else without our written consent.

21.6 Terms that by their nature should continue after this agreement ends — including sections 3, 10.3, 14, 15, 16 and 20, and Annex A until your data has been erased — continue to apply.

Annex A — Data Processing

This Annex is the agreement required by Article 28(3) of the General Data Protection Regulation (EU) 2016/679 ("GDPR"). Words such as "controller", "processor", "personal data" and "personal data breach" have the meaning the GDPR gives them.

A1. Roles. For personal data contained in your content ("customer personal data"), you are the controller and we are your processor. For personal data about you as our customer — your account, sign-in and billing details — we are the controller, as our Privacy Policy explains.

A2. The processing.

• Subject-matter and purpose: providing Toimur to you under this agreement.
• Nature: storing, hosting, organising, displaying, creating documents from, exporting, transmitting, backing up and erasing data.
• Duration: for as long as this agreement lasts, and afterwards until the data is erased under A10.
• Types of personal data: names; contact details such as email addresses, phone numbers and postal addresses; business and tax identifiers such as VAT and registration numbers; bank details you add; and what you record about your work — projects, orders, tasks, time, rates, estimates, invoices and notes.
• Data subjects: your clients and their contact persons, anyone else you record in Toimur, and you yourself where your content contains your own personal data.
• Toimur is not designed for special categories of personal data (Article 9 GDPR) or for data about criminal convictions and offences (Article 10). Do not store them in it.

A3. Instructions. We process customer personal data only on your documented instructions. This agreement and your use and settings of Toimur are those instructions. We process it otherwise only where EU or Member State law requires us to; in that case we will tell you first, unless that law forbids it. If we believe an instruction infringes data protection law, we will tell you immediately. Transfers outside the European Economic Area (EEA) are covered by A7.

A4. Confidentiality. Everyone we authorise to process customer personal data is bound by a duty of confidentiality.

A5. Security. We take the technical and organisational measures that Article 32 GDPR requires, appropriate to the risk. They include encrypted connections; encryption of stored data by our database provider; access to production systems limited to those who need it and protected by strong authentication; passwords stored only as salted hashes; backups kept by our database provider; keeping software up to date; and reviewing these measures regularly.

A6. Sub-processors. You give us general authorisation to engage sub-processors. The current list is published with our Privacy Policy. At the date of this version it is:

We impose on each sub-processor, by contract, data protection obligations that are the same in substance as those in this Annex, and we remain fully liable to you for how they perform them. We will tell you by email at least 14 days before we add or replace a sub-processor. You may object within that period on reasonable data protection grounds. If we cannot resolve your objection, you may end this agreement before the change takes effect, and section 7.3 applies. If a change is urgent — for security, or to keep Toimur running — we may make it sooner, and we will tell you as soon as we can.

A7. Where data is processed. Customer personal data is stored in the EU. Some of our sub-processors belong to groups based outside the EEA, and data can pass through or be accessed from outside the EEA — for example when a request travels through our hosting provider's global network, or when a provider gives technical support. Any such transfer is made only under a mechanism recognised by Chapter V GDPR, such as an adequacy decision (including the EU–US Data Privacy Framework, for certified recipients) or the European Commission's standard contractual clauses.

A8. Requests from data subjects. Toimur lets you access, correct, export and erase the data in your account yourself, which answers most requests. If we receive a request about customer personal data directly, we will pass it to you and will not answer it ourselves unless you instruct us to. Where you need more help to respond, we will assist you as far as reasonably possible.

A9. Breaches and assessments. We will notify you without undue delay after becoming aware of a personal data breach affecting customer personal data, and give you the information you need to meet your obligations under Articles 33 and 34 GDPR, as far as it is available to us — in stages if necessary. We will also give you the information reasonably available to us for a data protection impact assessment or a prior consultation with a supervisory authority (Articles 35 and 36).

A10. Erasure and return. While you have access, you can export customer personal data (return) and erase it at any time. When you delete your account, it is erased from Toimur straight away. When your access ends in any other way, we erase the remaining customer personal data within 90 days after access ended, unless EU or Member State law requires us to keep it. After erasure, copies in our database provider's backups expire automatically within six hours; we do not use them to restore individual accounts.

A11. Audits. We will make available to you the information needed to demonstrate compliance with Article 28 GDPR, including this Annex, the sub-processor list and, on request and subject to confidentiality, relevant certifications or audit reports of our providers. Where that information is not sufficient, we will allow for and contribute to an audit, including an inspection, by you or an auditor you mandate: on at least 30 days' written notice, no more than once in any 12 months (unless a supervisory authority requires it, or after a personal data breach), during business hours, without access to other customers' data, at your cost, and with the auditor bound by confidentiality. Our providers' facilities are audited through their own certifications and reports.

A12. Liability. Section 15 applies to this Annex as far as the law allows. It does not limit either party's liability to data subjects under Article 82 GDPR.

A13. Precedence. Where this Annex and the rest of the agreement conflict about the processing of customer personal data, this Annex prevails.