They actually removed subscriptions just because of that: they were required to keep some info to process payments, but this was incompatible with their vision for privacy.

With single payments they don't need to keep it for so long.

The VPN provider does not, but the owner of the data center still can store whatever she likes or some entity asks her to store.