Yes. All user submitted data is stored locally on your server only, unless you expressly configure the plugin to send it elsewhere, for example via an email action. We never see or collect any user submitted data, nor do we act as Data Controllers or Data Processors per GDPR Article 4 for any data submitted by users of the forms you create. Your forms can be configured to flag and/or not record Personally Identifiable Information (PII) on a per form basis. If you do collect PII using Ninja Forms, you can <a href="https://ninjaforms.com/docs/gdpr-compliance-ninja-forms/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=FAQ&utm_content=GDPR">automate export or delete data requests</a>.