PhotoDay's retention language contradicts itself
As of this review, PhotoDay's privacy policy says biometric data is deleted on request, on job or account deletion, or one year after collection. Its FaceFind FAQ instead says three years of account inactivity. Both documents are current. If you shoot schools, ask PhotoDay which one controls and get the answer in writing.