Also, where is the data kept? Is this GDPR safe? I'm in the UK and I'd like to keep this company/user data somewhere safe :)