Customer privacy is important in an industry that aims to promote privacy, but reading your privacy page indicates the following:
When legally required. We abide by the law when we receive governmental requests or those related to a lawsuit regarding your data. We will inform you when such requests are made unless we’re legally restrained from doing so. We only disclose your data if we sincerely believe that the law necessitates it. This policy doesn’t aim to restrict any legal defenses or objections you might have to a third party’s request to disclose your information.
It is true that the wording is good, but this means that you keep the business data for a long time. How long do you keep it, is there a possibility of deleting it, and do you exchange it with third parties?
Once it’s no longer needed, we destroy it unless we are legally obligated to retain it.
You did not indicate here the appropriate time to do this or respond to the user’s request with other words that you can keep forever.
There is also no mention of legal data and where the main servers of the service are located, even if they are subject to certain authorities.