Summary: this service is stateless and stores nothing. No database, no accounts, no cookies, no analytics.
Request parameters — the base64 signed UBL 2.1 document, its documentHash and codeNumber, and your bring-your-own MyInvois ERP credentials (x-myinvois-client-id, x-myinvois-client-secret) sent as HTTP headers — are used in memory only to mint an OAuth2 access_token and forward the submit / query / cancel call to the government LHDN MyInvois gateway, then discarded. The document is already signed on your side; this server never signs, never holds a certificate, and never persists the credentials or the access_token. Invoice data is processed and stored by MyInvois (LHDN) under the merchant's own taxpayer context. The host (Vercel) keeps short-lived HTTP logs per its privacy policy; credential headers are never logged by the application.
Because nothing is stored, there is nothing to delete or export.
Contact: reports@wishpool.app · Source (MIT): github.com/junter1989k-ai/malaysia-invoice-mcp