While the GDPR is based in the EU, it may apply to your business. The law was designed to protect the rights of EU citizens, so if you have users in the EU, you are subject to comply with the GDPR.

Read more in our article on GDPR in the US: Requirements for US Companies.