In general we try to be very cautious about what we store:

• we don't store spending credentials for attached wallets in plaintext on the server
• we hash user email addresses
• we allow hard/deep deletion of withdrawal invoices after 7 days