At a glance, their Data Processing Addendum[0] seems to address GDPR, along with country-specific regulations like Swiss DPA and UK GDPR
[0] https://planetscale.com/legal/data-processing-addendum