> IANAL, but that company's reply is bullshit and could be easily brought to court.
Nobody has money and time for that unfortunately and if you are using a platform that you like or need, then it is impossible, because you'll risk getting your account deleted.
You don't need to hire a lawyer, you can (and should) go to the data protection authority of your country, if you're in Europe or if it's a European company.