Summary: this service is stateless and stores nothing. No database, no accounts, no cookies, no analytics.
Request parameters — amounts, item descriptions, buyer name and tax number, and your bring-your-own NAV technical-user credentials (x-nav-login, x-nav-password, x-nav-signkey, x-nav-exchangekey, x-nav-taxnumber) sent as HTTP headers — are used in memory only to build and sign the InvoiceData XML and forward it to the government NAV Online Számla API (Nemzeti Adó- és Vámhivatal), then discarded. The password is hashed (SHA-512), the request is signed (SHA3-512) and the exchange token is AES-128 decrypted in memory; none of these values are persisted. Invoice data is processed and stored by NAV under the merchant's own tax context and never persisted by this service. The host (Vercel) keeps short-lived HTTP logs per its privacy policy; credential headers are never logged by the application.
Because nothing is stored, there is nothing to delete or export.
Contact: reports@wishpool.app · Source (MIT): github.com/junter1989k-ai/hungary-invoice-mcp