Terms of Service

Last updated: 15 August 2026

1. Who this agreement is with

These Terms govern your use of the BizInvoice service ("Service"), operated by Goh Woen Yeh (SSM Registration No. 003879967-X) ("we", "us"), registered address Block 20, Tingkat Terubong Jaya 2, 11060 Ayer Itam, Pulau Pinang, contactable at donaldgoh13@gmail.com. By creating an account, you agree to these Terms and to our Privacy Policy.

This section is provided as a business-identity disclosure consistent with the transparency requirements for online businesses under the Consumer Protection (Electronic Trade Transaction) Regulations 2024.

2. What the Service does

The Service helps Malaysian businesses build, digitally sign, and submit e-Invoices to the Inland Revenue Board of Malaysia (LHDN) via the MyInvois API, and to manage saved customers, products, and invoice records. The Service is a technical tool, not a substitute for tax, legal, or accounting advice.

3. Your account and your MyInvois credentials

• You must provide accurate business information and keep your login credentials confidential.
• You connect your own MyInvois client ID/secret and your own digital signing certificate. We store these encrypted, and use them only to act on your instructions to submit or cancel documents on your behalf.
• You are responsible for the accuracy of every invoice, credit note, debit note, or refund note you submit through the Service -- we do not validate the substance of your transactions, only the technical structure of the document.

4. Pricing, payment, and access

• Pricing: current subscription prices for each plan are shown in Ringgit Malaysia (RM) on our Pricing page and at checkout before you pay, inclusive of any applicable tax unless stated otherwise.
• Payment: payments are processed securely by Stripe, our third-party payment processor; we do not receive or store your full card number. Accepted payment methods are those offered by Stripe at checkout.
• Access after payment: your plan's features are activated automatically once payment is confirmed, and remain active for the billing period you paid for.
• Billing cycle: paid plans are billed in advance via Stripe. The monthly plan includes a free trial period as shown at checkout; longer plans do not.

5. Cancellation and refunds

• You can cancel anytime from the Billing page; cancellation takes effect at the end of the current billing period, and you keep access until then.
• Fees already paid are non-refundable except where required by law.
• Prices may change; we'll give you notice before a change affects your renewal.

6. Complaints and dispute resolution

If you have a complaint about the Service or a billing issue, contact us first at donaldgoh13@gmail.com -- we aim to acknowledge complaints within 3 business days. If a payment dispute can't be resolved directly with us, you may also raise it with Stripe or, where applicable, your card issuer.

7. Acceptable use

You agree not to use the Service to submit fraudulent documents, to misrepresent another business without authorization, or to attempt to circumvent LHDN's validation or our security controls.

8. Liability

The Service is provided "as is." To the maximum extent permitted by law, we are not liable for LHDN rejecting a document, penalties arising from incorrect data you submitted, or downtime of LHDN's own systems. [This section in particular needs a lawyer's attention -- liability caps for a tool that files tax documents are not something to leave as a placeholder.]

9. Termination

You may stop using the Service and delete your account at any time. We may suspend or terminate accounts that violate these Terms or applicable law.

10. Governing law

These Terms are governed by the laws of Malaysia. [Confirm venue/jurisdiction with your lawyer.]

11. Changes

We may update these Terms from time to time. Continued use of the Service after a change means you accept the updated Terms.

12. Contact

Questions about these Terms: donaldgoh13@gmail.com.

Personal Data Protection Notice

Last updated: 15 August 2026. Issued in accordance with Section 7 (Notice and Choice Principle) of the Personal Data Protection Act 2010.

1. Who this notice is from

This notice is issued by Goh Woen Yeh (SSM Registration No. 003879967-X) ("we", "us"), the operator of BizInvoice (the "Service"), in respect of the personal data we collect from you as a user of the Service.

2. What personal data we collect

• Account: your email address and password (stored as a one-way hash, never in plain text).
• Business profile: business name, TIN, registration number, MSIC code, address, and contact details -- used to auto-fill the supplier side of your invoices.
• MyInvois credentials: your LHDN client ID/secret and digital signing certificate/private key, stored encrypted at rest, used only to submit or cancel documents on your instruction.
• Saved customers and products: buyer and line-item details you choose to save for reuse (this may include personal data of your own customers, where they are individuals rather than businesses).
• Invoice records: a local copy of each document you submit (invoice number, buyer, amounts, LHDN status) so you have a history and can download a PDF copy.
• Billing information: handled directly by Stripe -- we never see or store your full card number. We keep a reference to your Stripe customer/subscription IDs and plan.
• Technical logs: an audit log of logins, submissions, and account changes (IP address, timestamp, event type), kept for security and troubleshooting.

This Service is intended for use by business owners and their staff, not by children. We do not knowingly collect personal data from individuals under 18 years of age.

3. Purpose of collection (Notice and Choice Principle)

We collect and process your personal data to: operate the Service (build, sign, and submit your e-Invoices to LHDN); maintain your account and the data you save in it; process your subscription payments via Stripe; secure your account and investigate misuse; and comply with our own legal and tax obligations. We do not sell your data, and we do not use it for advertising.

4. Your consent and choices (General Principle)

By creating an account and using the Service, you consent to the processing of your personal data for the purposes above. Where we rely on your consent, you may withdraw it at any time by contacting us (see Section 12) -- though withdrawing consent for data necessary to operate the Service (e.g. your login credentials) will likely mean we can no longer provide the Service to you, and may result in your account being closed.

5. Is providing your data obligatory?

Providing your account and business profile data is obligatory -- without it, we cannot create your account, build a compliant e-Invoice on your behalf, or process your subscription. Some fields (e.g. billing email) are optional and clearly marked as such in the relevant forms. If you choose not to provide obligatory data, you will not be able to use some or all of the Service.

6. Who we disclose your data to (Disclosure Principle)

• LHDN (MyInvois): the actual invoice documents you choose to submit, using your own connected credentials -- this is the core function of the Service and happens on your explicit instruction each time.
• Stripe: billing/subscription data necessary to process your subscription payment.
• Render: our hosting provider -- the servers and database that store your data are operated by Render (render.com).
• We do not disclose your business or personal data to any other third party for purposes beyond those stated in Section 3, except where required by law (e.g. a valid court order or regulatory request).

7. How we protect your data (Security Principle)

We take practical steps to protect your personal data from loss, misuse, unauthorised access, or disclosure. MyInvois credentials, signing certificates, and private keys are encrypted at rest. Passwords are hashed, never stored in plain text. All traffic to the Service is encrypted in transit (HTTPS/TLS). Our servers and database are hosted by Render, a managed hosting provider, and access to production systems is restricted to us.

8. How long we keep your data (Retention Principle)

We keep your account and invoice records for as long as your account is active, and only for as long as necessary to fulfil the purposes in Section 3 or as required by law. If you delete your account, your data is deleted immediately and permanently -- see "Delete account" in Account settings. Note that Malaysian businesses are generally required to keep their own tax and invoice records for at least 7 years under the Income Tax Act 1967; that obligation is yours as the business, not something this Service keeps on your behalf after account deletion, so keep your own copies (e.g. downloaded PDFs) of anything you may need for that purpose.

9. Keeping your data accurate (Data Integrity Principle)

You can review and update your business profile, saved customers, and saved products directly in the Service at any time, so the data we hold about you stays accurate, complete, and current. We rely on you to keep this information up to date, since it's used to build documents submitted to LHDN on your behalf.

10. Your right to access and correct your data (Access Principle)

Under Section 30 of the PDPA, you have the right to request access to the personal data we hold about you, and to request that we correct it if it is inaccurate, incomplete, or out of date. Most of your data can be accessed and corrected directly within the Service (your profile, saved customers, and saved products). For anything else, or to request a copy of your full data, contact us using the details in Section 12. We may charge a nominal processing fee for access requests as permitted under the PDPA, and may need to verify your identity before actioning a request.

11. Cookies

We use a session cookie to keep you logged in and to remember your language preference. We do not currently use third-party analytics or advertising cookies.

12. Contact us / exercising your rights

Questions about this notice, or to exercise any of the rights above (access, correction, withdrawing consent): donaldgoh13@gmail.com.

13. Changes to this notice

We may update this notice from time to time. Material changes will be communicated before they take effect, and the "Last updated" date above will be revised.