As a small team, we haven't yet had a chance to look into being compliant with GDPR as we make sure to never store any client or business data.
All data processed is only securely transferred into the user's Google Sheets via OAuth or other forms of authentication and never stored on SyncWith's servers.