You ought to obey EU data protection law for EU registered people. This would perhaps include deleting data that customers ask you to delete, not storing perso

You ought to obey EU data protection law for EU registered people. This would perhaps include deleting data that customers ask you to delete, not storing personal data without direct permission, nor when you no longer need it to provide your service, etc.