We provide various downloadable IP datasets that have no PII information, and we expect our users/customers in the EU to comply with any GDPR requirements internally within their organization. So the data is stored on your end.
As far as IPinfo is concerned, we have no view into what our users/customers do with our IP data since all we provide is generic IP location data that is not matched to any particular person.