[mtmail]

You're allowed to store personalized information. The GDPR is about getting consent from the user (active opt-in), document how you use the data (including to whom you share it to), give the user an option to request any information you store about them, and deleting that data after use (e.g. when a user cancels their account).