Looking for that same information. It seems like all other plugins I use are very open and share their GDPR & Privacy Shield information which makes me worry that iTheme Security might not be even close to living up to the requirements :/ I hope I’m wrong though!
