Redirection runs on your site. The only personal information collected is a visitors IP address, and you can configure the collection of this data from the options page.
Any privacy or GDPR compliance issues are the responsibility of the site owner. Nothing is stored externally.
Use of the plugin does not constitute an agreement of any kind, and Redirection is not a service provider.