Our data processing agreement (DPA) is included in our terms of service at https://terms.makeplans.net.
For customers who request to retrieve their personal data you can use the data export function. Go to 'Customers' to find the customer and then click the export link. An email with exported data (CSV) will be sent to the customer.
The data in your account is available for export at 'Setup' -> 'Export'.