GDPR does mandate that data should only be stored for a long as it is required for your specific purposes. If a user closes their account and is no longer a customer their data should be purged after 3-5 years under GDPR.