If you mean EU countries GDPR is the main guide and it’s not that it is illegal to store data outside of EU - it’s preferable by users to store them inside EU; GDPR is more about how do you store / secure them and making sure that your users are aware of that for which you need a privacy policy.
You check more details here Bubble GDPR Intro Guide - Bubble Blog