My product collects limited number of personal information and in theory it has always been compliant. Only thing I have doubt about is AdSense. I have disabled personalized ads, but I have no idea if that is compliant. Also working on data portability, so users can export their data. (Never got a request for that though) If revenue from ads will go down I will be considering closing the business. I don't feel comfortable going paid subscription route.