Change.org can keep and sell your info to third parties (maybe they are already doing it, i.e. you are the product).

I'm not claiming it would be safe in a cybersec way in the EU's servers, but at least they won't sell it.