Thank you for your answer.
So far, it seems that data are only saved at the wordpress-server. Mails are generated by the MailPoet-Plugin and will be sent via our own server.
However, can you guarantee that data won’t be sent to somewhere/someone else (third party)?