You're absolutely right - we don't have any right to share the files that the OP has sent. We respect the law, as we have stated multiple times.
As for the refund - we will refund the OP as soon as we have legal grounds for that. We really hope that this situation is resolved as soon as possible.

About the GDPR: it's a part of global improvement package that we are implementing. It's a work in progress, and we are introducing changes as they come.
In our public statement we have mentioned that in just a year we have grown from a tiny service into a relatively big project. We are collaborating with legal specialists and advisors in order to keep up with all requirements of the market and to be compliant with all the necessary things. Unfortunately, some implements take some time to get up and running, more than we'd like to. In any case, we are trying to do everything in our power to become the most transparent, convenient, and understandable service on the market and we are eternally grateful for all the constructive comments you've given us.