We are fully GDPR compliant.

We don't receive any personally identifiable information as part of an API request - it is just one or more sets of lat-long coordinates and the parameters for the request (e.g the mode of transport, and time of day).

The request is processed in memory and nothing is written to disk except for performance monitoring purposes (e.g the API key used, and the response time).