Terms of Service

These Terms of Service set out the rules for the provision of services by electronic means through the FIRMSET website and application. They constitute the terms of service required by Article 8 of the Polish Act of 18 July 2002 on the provision of services by electronic means.

FIRMSET is a trade name (brand) of the service. The provider of the Service, the party to the Agreement and the issuer of invoices is Dash Stack sp. z o.o..

• Company name: Dash Stack sp. z o.o. (the service is provided under the FIRMSET brand);
• Registered office and address: ul. Generała Henryka Dąbrowskiego 18, 64-600 Oborniki, Poland;
• Registered name: DASH STACK SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ;
• VAT ID (NIP): 6060122069;
• Statistical number (REGON): 543650418;
• Register number (KRS): 0001215484;
• Registry court: Sąd Rejonowy Poznań – Nowe Miasto i Wilda w Poznaniu, IX Wydział Gospodarczy Krajowego Rejestru Sądowego;
• Share capital: 5 000,00 PLN;
• Email: biuro@dashstack.pl;
• Phone: +48 602 518 615.

These Terms are made available free of charge before the Agreement is concluded, in a form that allows them to be obtained, reproduced and stored — the text can be displayed at a permanent address in the Service, saved to a file or printed at any time. At the Customer request, the provider sends the text of these Terms by e-mail.

The binding version of these Terms is the Polish one. This English text is a translation provided for information purposes; in the event of any discrepancy, the Polish wording prevails.

The following terms have the meanings set out below:

• Provider — Dash Stack sp. z o.o., the entity providing the Service under the FIRMSET brand;
• Customer — a business, an accounting office, another entity or a natural person who has concluded the Agreement or is taking steps to conclude it;
• Consumer — a natural person entering into a legal transaction with the Provider that is not directly related to their business or professional activity;
• Sole trader treated as a consumer (PNPK) — a natural person concluding the Agreement directly in connection with their business activity, where the Agreement is not of a professional nature for them, in particular in the light of the subject of their activity disclosed in the Polish CEIDG register (Article 7aa of the Consumer Rights Act);
• Service — the public FIRMSET website together with the application available after logging in;
• Account — the set of resources and settings assigned to the Customer in the Service and accessible after authentication; an owner Account may include employee accounts with permissions granted by the owner;
• Module (add-on) — a distinct set of functions of the Service, activated and billed separately;
• Subscription — a paid, renewable entitlement to use the base plan or a Module during a given billing period;
• Integration — a connection between the Customer Account and a third-party system (a sales platform, a carrier system, a public administration system) made through that party programming interface;
• Platform — a third party operating a system to which the Customer connects through an Integration, in particular a marketplace, an online shop or a logistics system;
• Agreement — the agreement for the provision of services by electronic means concluded between the Provider and the Customer on the terms described herein;
• Price List — information on the fees, published on the „Cennik" (Pricing) page of the Service.

The Service consists in making available to the Customer, in a software-as-a-service model, a business management application that runs in a web browser. The Provider does not supply the Customer with any medium or copy of the software — the application runs on the Provider infrastructure and is accessed remotely.

The base plan gives the Customer access to the core functions:

• Pulpit (Dashboard) — an overview of the business;
• Faktury (Invoicing) — issuing VAT invoices, credit notes and recurring invoices, and support for the Polish National e-Invoicing System (KSeF);
• Księgowość (Accounting) — VAT registers, JPK markings, payment records, exports to accounting systems, audit log;
• Magazyn (Warehouse) — product records, stock levels, data import;
• CRM — a database of business partners with the history of cooperation;
• Integracje (Integrations) — configuration of connections with external systems.

Beyond the base plan, the Provider offers additional Modules, activated and billed separately. These include in particular: Magazyn Plus (extended warehouse), Sprzedaż Pro (sales pipeline), Kadry (HR), document sharing with additional storage packages, a password vault, encrypted notes, tasks and notes, meeting agendas, an e-commerce module and the integration Modules listed below.

Integration Modules allow the Account to be connected with third-party systems. The Provider currently offers integrations with:

• Allegro — order synchronisation, product mapping, issuing and transferring invoices, support for multiple accounts;
• WooCommerce — synchronisation of orders, products and categories, support for multiple shops;
• Erli.pl — publishing offers, order synchronisation, event notifications;
• EmpikPlace — publishing offers by EAN codes, stock and price synchronisation, order handling;
• TikTok Shop — connecting the seller account through the official TikTok Shop authorisation, synchronisation of the category dictionary, category attributes and category requirements, and the creation, update and withdrawal of listings together with moderation-result tracking; further functions of this Module, including stock and price synchronisation and order handling, are released in stages;
• InPost — creating shipments through the ShipX interface, labels, status tracking;
• KSeF — sending and retrieving structured invoices;
• Dashshop — two-way exchange of product records, stock levels and orders with the Customer shop;
• public registers and reference sources — retrieving business partner data from public registers and currency exchange rates.

The Service also offers AI-assisted functions (for example suggested offer descriptions), provided with the participation of an external language model provider. Content generated in this way is a suggestion and must be verified by the Customer before publication.

The binding scope of a given Module follows from its description presented in the Customer panel before activation and in the Price List. The Provider develops the Service in stages — individual functions of a Module may be released gradually, as indicated in the Module description.

The Provider does not provide tax, accounting or legal advice. The Service is a tool; decisions concerning settlements and documentation are made by the Customer.

Using the Service requires:

• a device with access to the Internet;
• a current version of a commonly used web browser (Chrome, Firefox, Safari, Edge) supporting HTML5 and CSS3;
• JavaScript enabled — the interface is a dynamic application and does not work without it;
• cookies necessary to maintain the session of a logged-in user; blocking them makes logging in impossible;
• an active e-mail address to which confirmations and notifications are sent;
• software able to open PDF files and CSV or XLSX spreadsheets — for export and printing functions;
• for Integrations — an active Customer account on the given Platform with permissions allowing authorisation to be granted.

The Provider informs about the typical risks connected with using services provided by electronic means: interception of login credentials by malicious software, messages impersonating the Provider (phishing), and hijacking of an unsecured session on a public network. Customers are advised to use a unique, strong password, to enable the two-factor authentication available in Account settings, and to keep their operating system and browser up to date.

Information about the cookies used in the Service, their purpose and how to manage them is set out in the Privacy Policy. The Service stores on the user device only the data necessary to provide the service requested, in particular the session identifier and the token protecting forms.

The Agreement for maintaining an Account is concluded upon completion of registration. Registration proceeds as follows:

1. the Customer completes the registration form, providing a name or first and last name, an e-mail address, a password and the account type (business or accounting office);
2. the Customer declares that they have read and accept these Terms and acknowledges the information on the processing of personal data;
3. the Provider sends a verification message to the address given; confirming the address is a condition for using the full functionality of the Account;
4. once the address is confirmed, the Account is activated.

Creating an Account is free of charge and does not require payment card details or any other payment data. A paid Subscription starts only when the Customer activates it themselves in the panel.

A Subscription to the base plan or to a Module is activated by selecting it in the subscription settings and giving the express consent presented before confirmation. The Provider records the wording of that consent together with the date, time and IP address from which it was given, and makes it available to the Customer in the panel. Each Module is activated separately; some Modules require another Module to be active first, as indicated in their description.

These Terms do not provide for a trial period. The Provider may separately announce promotions or free periods; their conditions, including duration and the rules for moving to a paid Subscription, are set out in the commercial information presented at the time of ordering, and prevail over Chapter 7 to the extent regulated therein.

The Customer may create employee accounts and assign them permissions. The Customer is responsible for the acts of persons to whom access to the Account has been granted as for their own acts.

An Integration is a function of the Service that the Customer uses voluntarily. It is the Customer who connects their own seller account or their own shop: the Customer logs in on the authorisation screen operated by the Platform and grants consent (OAuth authorisation), or enters their own access keys. The Provider does not create accounts on Platforms and does not act towards a Platform on behalf of the Customer beyond the scope of the authorisation granted.

• the operations the Service may perform in the Platform system are limited by the permissions granted by the Customer in the authorisation; missing permissions are signalled in the panel;
• the Provider acts as a software provider and, with respect to personal data processed within an Integration on the Customer instructions, as a processor within the meaning of Article 28 GDPR (Chapter 10);
• the Provider is not a party to the agreement between the Customer and the Platform and is not responsible for the Platform decisions concerning the seller account, offers, orders, settlements or policy sanctions;
• the Customer is responsible for the compliance of their sales with the rules and policies of the given Platform and with the law, including requirements on product safety, product information, consumer rights and tax obligations;
• credentials and access tokens are stored in encrypted form and are not shown in the interface after being saved;
• the Service keeps a technical log of calls to the Platform interface (without tokens or credentials) to enable diagnostics and support requests to the Platform.

The Customer may withdraw the authorisation at any time: through the disconnect function available in the Service panel, or in the settings of their account on the Platform. Withdrawing the authorisation immediately deletes the tokens held by the Service and stops the exchange of data with the Platform; data retrieved earlier remains on the Customer Account until deleted under Chapter 12. Removing a connection does not terminate the Agreement and does not release the Customer from fees for the current billing period.

In the case of TikTok Shop, the connection is made solely through the official TikTok Shop authorisation mechanism. The Service refreshes the tokens obtained automatically and informs the Customer in the panel when the authorisation is about to expire or has been lost. The Customer may end the connection at any time, and every request sent to the TikTok Shop interface is signed in accordance with that Platform requirements.

The availability of individual Integrations may depend on the approval of the Provider application by the Platform operator and on the scope and version of the interface it makes available. A change, restriction or shutdown of the interface by a Platform may temporarily or permanently limit the operation of an Integration; the Provider informs the Customer of this and applies Chapter 15 where the change affects the scope of the Service.

The fees for the base plan and for individual Modules are set out in the Price List published on the „Cennik" (Pricing) page of the Service and in the Module description shown in the panel before activation. The price applicable to a given Subscription is presented to the Customer before the activation declaration is submitted.

• prices in the Price List are given as net amounts in Polish zloty; VAT at the statutory rate (currently 23%) is added to the net price;
• a Consumer and a PNPK are shown the total price including tax before submitting the activation declaration;
• the billing period is one month; the fee for a Module is added to the fee for the base plan;
• for each billing period the Provider issues a VAT invoice; the payment date and method are stated on the invoice;
• the Provider does not automatically charge the Customer payment card — payment is made on the basis of the invoice issued;
• failure to pay on time entitles the Provider to suspend access to the Service after a prior demand sent to the Customer e-mail address and the ineffective lapse of the additional deadline set out in it.

The Customer may cancel a Subscription to the base plan or to a Module at any time using the function available in the panel. Cancellation takes effect at the end of the paid billing period — access remains active until that day and no further fee is charged. The fee for a billing period already started is not refunded pro rata, subject to Chapter 14 (withdrawal) and to cases where a refund follows from the law.

A change to the Price List does not affect fees for billing periods already paid. A change in the amount of fees for ongoing Subscriptions is subject to the procedure for amending these Terms described in Chapter 15, including the right to terminate the Agreement before the change takes effect.

The Customer is prohibited from supplying content of an unlawful character. In particular, the Customer undertakes:

• to provide true data and keep it up to date, in particular the data needed to issue an invoice;
• to protect passwords and credentials and to report any suspected unauthorised access to the Account without delay;
• not to enter into the Service content that infringes the law, personal rights, copyright, industrial property rights or the business secrets of third parties;
• not to use the Service to send unsolicited commercial information or for activities infringing competition and consumer protection law;
• not to introduce malicious software into the Service or take actions that disrupt its operation, including attempts to circumvent security measures, technical limits or billing mechanisms;
• not to share the Account with unauthorised persons or resell access to the Service without the Provider consent;
• to process third-party personal data entered into the Service lawfully and to have a legal basis for that processing.

Reports concerning unlawful content stored in the Service may be sent to the e-mail address: biuro@dashstack.pl. A report should identify the reporting person, indicate the location of the content and explain why it is considered unlawful.

Upon receiving official notice or reliable information about the unlawful character of content, the Provider may disable access to that content and, in the case of serious or repeated infringements, suspend the Account. The Provider informs the Customer of the action taken and its reasons, unless prevented by law, and allows the Customer to respond through the complaint procedure set out in Chapter 13.

The Provider makes every effort to keep the Service running continuously and correctly. These Terms do not establish a guaranteed service level (SLA); a specific availability level may follow only from an individual agreement concluded in writing.

The Provider may introduce technical breaks necessary for maintenance, updates or securing the Service. Planned breaks that may materially affect the use of the Service are announced in advance in the panel or by e-mail. Emergency outages are remedied without undue delay.

The Provider is not liable for the unavailability or malfunction of third-party systems, in particular Platforms, public administration systems and payment operators, nor for the effects of force majeure. Nor is the Provider liable for the consequences of incorrect data supplied by the Customer, for the content of documents issued by the Customer, or for the use of suggestions generated by AI-assisted functions without verification.

Towards a Customer who is neither a Consumer nor a PNPK, the Provider liability is limited to actual damage and to the amount of the fees paid by that Customer during the twelve months preceding the event causing the damage, excluding lost profits. This limitation does not apply to damage caused intentionally or to cases in which excluding or limiting liability is not permitted by law.

Towards a Consumer and a PNPK, the Provider liability, including liability for the conformity of the digital service with the agreement, is governed by the Consumer Rights Act and the Civil Code; the limitations described above do not apply.

The Provider supplies the updates necessary to keep the Service in conformity with the Agreement for its duration and informs about them to the extent that they affect how the Service is used.

With respect to the personal data of visitors to the Service and of persons using Accounts, the Provider is the controller. The rules of that processing, including purposes, legal bases, categories of recipients and data subject rights, are described in the Privacy Policy.

With respect to personal data entered into the Service by the Customer (data of business partners, customers, employees, data from orders retrieved from Platforms), the Customer is the controller and the Provider processes such data as a processor, on the documented instructions of the Customer. Those instructions consist of these Terms, the Account settings and the actions taken by the Customer in the Service.

The entrustment lasts for the term of the Agreement and covers the operations necessary to provide the Service (collection, recording, storage, organisation, retrieval, transmission to Platforms and systems designated by the Customer, erasure). The Provider undertakes in particular:

• to process the data only on the Customer instructions, unless required otherwise by law;
• to ensure that persons authorised to process the data are bound by confidentiality;
• to apply technical and organisational measures appropriate to the risk, including encryption of Platform credentials;
• to assist the Customer in responding to data subject requests and in complying with Articles 32-36 GDPR;
• to report personal data breaches to the Customer without undue delay, in accordance with the Personal Data Breach Notification Procedure;
• after the end of the provision of services, to delete the data or return it to the Customer in accordance with Chapter 12;
• to make available the information necessary to demonstrate compliance and to allow audits on terms agreed with the Customer.

The Provider uses further processors, in particular a hosting infrastructure provider and a transactional e-mail provider; their current list is set out in the Privacy Policy. The Provider informs the Customer of any intended change to that list far enough in advance to allow an objection; an objection that cannot be accommodated entitles the Customer to terminate the Agreement with effect at the end of the paid billing period.

Where the parties have concluded a separate data processing agreement, its provisions prevail over this Chapter. Personal data matters may be reported at: biuro@dashstack.pl.

All rights to the Service, including the source code, the interface, the documentation, the databases compiled by the Provider and the FIRMSET designation, belong to the Provider or its licensors and are legally protected.

Upon conclusion of the Agreement, the Provider grants the Customer a non-exclusive, non-transferable licence to use the Service for the term of the Agreement, solely for the purposes of the Customer own business and in accordance with the intended use of the Service. The licence does not include the right to grant sub-licences.

• reproducing, decompiling or modifying the software is prohibited except where permitted by mandatory provisions of copyright law;
• automated harvesting of the content of the Service in a manner that burdens the infrastructure beyond ordinary use is prohibited, other than through the programming interfaces made available;
• removing or altering the Provider markings, and making the Service available to third parties as the Customer own service, are prohibited.

Data and content entered by the Customer remain the property of the Customer. The Provider acquires the right to process and store them only to the extent necessary to provide the Service, including making technical copies and transmitting data to systems designated by the Customer.

Throughout the term of the Agreement the Customer has access to the data entered and may download it using the export functions available in the Service, in particular printouts and PDF files of documents, reports in CSV or XLSX formats and exports intended for accounting systems. Customers are advised to download copies of business-critical data regularly.

The data remains available for download for as long as the Account exists, including after the Agreement ends. The Provider does not delete the data automatically on the day the Agreement ends, but neither does it undertake to keep it for any fixed period — the exports should therefore be downloaded before the Agreement ends. If the Customer needs a copy of the data after termination, they request it to the e-mail address: biuro@dashstack.pl; the Provider delivers the copy in a commonly used, machine-readable format, provided the data has not yet been deleted.

The Customer data is deleted once the Account is deleted, and also once the purpose of keeping it ceases. Deletion does not cover data whose further storage is required by law or necessary to establish, pursue or defend claims — in particular the billing records concerning fees for the Service, kept for the period required by tax and accounting regulations.

The Customer may delete the Account themselves in the profile settings. Deleting the Account is irreversible, terminates the Subscriptions and results in the loss of access to the data held on the Account; the necessary exports should be downloaded beforehand. Deleting the Account does not release the Customer from the obligation to pay amounts due before its deletion.

Complaints concerning the operation of the Service, the quality of the Service and billing may be submitted by e-mail to the e-mail address: biuro@dashstack.pl or in writing to the registered address of the Provider indicated in Chapter 1.

A complaint should contain:

• identification of the Customer and the e-mail address assigned to the Account;
• a description of the objections together with the date and time when the problem occurred, if applicable;
• the request of the Customer;
• where possible, screenshots or identifiers of the documents concerned.

A complaint submitted by a Consumer or a PNPK is examined by the Provider within 14 days of its receipt. Failure to reply within that period means that the complaint is deemed accepted, in accordance with Article 7a of the Consumer Rights Act. For other Customers the Provider examines the complaint without undue delay, making every effort to reply within 14 days; where examination requires information from a Platform or another third party, the Provider informs the Customer of the expected reply date.

The reply is sent to the e-mail address from which the complaint was received, unless the Customer indicates another means of contact. Submitting a complaint does not suspend the due date of payments, unless the complaint concerns the correctness of their calculation and is upheld.

The Agreement is concluded for an indefinite period. The Customer may terminate it at any time and without giving a reason — by cancelling the Subscriptions in the panel and, as regards the Account, by deleting it. Cancelling a Subscription takes effect at the end of the paid billing period; no minimum commitment period applies to the Customer.

The Provider may terminate the Agreement subject to a 30-day notice period or, in the event of a gross breach of these Terms by the Customer, with immediate effect after an ineffective demand to cease the breach. Where the Provider terminates for reasons not attributable to the Customer, the fee for the unused part of the paid billing period is refunded pro rata.

A Consumer and a PNPK who concluded the Agreement at a distance may withdraw from it without giving a reason within 14 days of its conclusion. It is sufficient to send the withdrawal statement before that deadline to the e-mail address: biuro@dashstack.pl; the model withdrawal form set out in Annex 2 to the Consumer Rights Act may be used for that purpose, but is not mandatory.

• where the entitled person requested that the provision of the Service begin before the withdrawal deadline, they retain the right of withdrawal and, upon withdrawing, pay for the services performed until withdrawal in an amount proportionate to the scope of performance, in accordance with Article 35 of the Consumer Rights Act;
• the Provider refunds the payments received without delay and no later than within 14 days of receiving the withdrawal statement, using the same means of payment, unless the entitled person expressly indicates another means that entails no cost for them;
• the right of withdrawal does not apply to Customers other than Consumers and PNPK, in particular to commercial companies.

A declaration that the Agreement is not of a professional nature for a natural person may be made no later than at the time the Agreement is concluded. The Provider does not make the conclusion of the Agreement conditional upon such a declaration.

The Provider sends confirmation of the conclusion of the Agreement together with the text of these Terms to the Customer on a durable medium, by e-mail, no later than at the time the provision of the Service begins.

The Provider may amend these Terms only for a valid reason. Valid reasons are:

• a change in the law or in its interpretation affecting these Terms or the manner in which the Service is provided;
• a decision, recommendation or ruling issued by a court or an administrative authority, including the President of the Polish competition authority (UOKiK) or the President of the data protection authority (UODO), concerning the Service;
• the introduction of new functions or Modules, or the withdrawal of functions that have ceased to be available, including as a result of changes on the side of Platforms;
• technical and organisational changes on the side of the Provider, including a change of technical requirements or of infrastructure suppliers;
• a change in the scope or amount of the fees, on the terms set out in Chapter 7;
• the need to remove ambiguities, errors or clerical mistakes from the text;
• a change in the registration or contact details of the Provider.

The Provider announces any amendment by e-mail to the address assigned to the Account and by a message in the panel, at least 14 days before the amendment takes effect, indicating its scope and reason.

A Customer who does not accept an amendment may terminate the Agreement before the amendment takes effect, free of any charge; the termination takes effect at the end of the paid billing period. Failure to terminate within that period means acceptance of the new wording. An amendment does not affect rights acquired before it takes effect, nor Agreements to the extent that this would not be permissible towards a Consumer.

Archived versions of these Terms are made available by the Provider upon request sent to the e-mail address: biuro@dashstack.pl.

The Agreement and these Terms are governed by Polish law. The choice of Polish law does not deprive a Consumer of the protection afforded by the mandatory provisions of the law of their country of habitual residence.

Disputes with a Customer who is neither a Consumer nor a PNPK are settled by the court having jurisdiction over the registered office of the Provider. Disputes with a Consumer and a PNPK are settled by the courts determined under the Polish Code of Civil Procedure — these Terms do not impose the jurisdiction of the court of the Provider registered office.

A Consumer may use out-of-court means of handling complaints and pursuing claims, in particular by:

• seeking free assistance from a district (municipal) consumer ombudsman or from a social organisation whose statutory tasks include consumer protection;
• requesting mediation before the provincial inspector of the Trade Inspection;
• requesting that the case be heard by the permanent arbitration court operating at the provincial inspector of the Trade Inspection;
• using the information and the register of entities authorised to resolve consumer disputes out of court, kept by the President of the Office of Competition and Consumer Protection (uokik.gov.pl).

Recourse to an out-of-court procedure is voluntary and requires the consent of both parties. The Provider has not undertaken to use out-of-court consumer dispute resolution and does not apply a code of good practice within the meaning of the Act on counteracting unfair market practices; this does not limit the Consumer rights described above.

The Provider does not refer to the European online dispute resolution (ODR) platform: that platform ceased to operate on 20 July 2025 and Regulation (EU) No 524/2013 has been repealed.

These Terms, version 1.0, take effect on 1 September 2026 and from that date apply to Agreements concluded after it and, under the procedure set out in Chapter 15, to ongoing Agreements.

If any provision of these Terms proves invalid or ineffective, the remaining provisions remain in force and the relevant provisions of law apply in place of the invalid one. Nothing in these Terms excludes or limits the rights of a Consumer or a PNPK arising from mandatory provisions of law; in the event of conflict, those provisions prevail.

A Customer who is neither a Consumer nor a PNPK may not transfer the rights and obligations under the Agreement to a third party without the written consent of the Provider. The Provider may transfer the rights and obligations under the Agreement in connection with a transformation, merger or sale of the business, informing the Customer in advance and without worsening the Customer position.

Matters not regulated in these Terms are governed by Polish law, in particular the Civil Code, the Act on the provision of services by electronic means, the Consumer Rights Act and Regulation (EU) 2016/679 (GDPR).

The Provider can be contacted on any matter concerning the Service to the e-mail address: biuro@dashstack.pl and using the other contact details indicated in Chapter 1 and on the Contact page of the Service.