The data that is handled by Paul is only Github data, therefore it contains information about the github users and repos that Paul is installed on
Paul does not currently store any data and the data is transported from Github to Paul encrypted
The system that Paul runs on is based in the Netherlands
It is completely on the user on what level of access to give to Paul, this can be configured by following Githubs Guide
Currently only the Pauls Developer Spazzy757 has access to the running instance of Paul, Paul logs out errors that include the URL of the repo that he is trying to access, therefore please keep this in mind when using Paul