All data is hosted securely on servers in the United States and protected with enterprise-level firewall and DDOS protection. On account closure, all data is completely removed after 90 days. All data can be completely removed at any time on request. The platform also avoids requesting any identifying sensitive data like addresses, email addresses, phone numbers, etc. except where absolutely necessary. If you have any questions or concerns, please contact support.