

I may be extra paranoid, but I’m almost certain that, even if they delete it from your folders (I don’t think they do, at least not Right away), they still keep it for maintaining a profile of each person. As for the ransomware, yeah, if you don’t pay them, you’re likely to lose access. That’s the definition of ransom, no?
At the very least they should allow you to get them all back, I’m not talking about allowing to store more.