Absolutely, we embrace and comply to the new European privacy laws (GDPR) which are the most strict on the planet. We do so by having account owners agree to our Data Processor Agreement (DPA) once they sign up for an account. And by having each user of the system agree to a User consent when typing in data.
We encrypt everything, both your connection to the browser via ssl (https) and on the database server.
Everything we run ourselves is hosted in the amazon cloud in Ireland (EU) and everything else is run by trusted companies also complying to GDPR.