Mullvad stores account (kyc) + payment information in line with Swedish tax laws for (I think) 7 years.

What Mullvad apparently don't have are data-plane logs. But then, surveillance laws mandate forceful & secret compliance in certain cases (Mullvad may be exempt but who knows: https://news.ycombinator.com/item?id=43018290)