The fact that you don't want to immediately delete the data after processing is a cause for concern.

I can't think of any reason not to immediately delete the data, other than that you intend to use it for something else in the future.

That said, I appreciate your honesty. If you had actually nefarious intentions, you would presumably just claim that you deleted the data when you don't

I would honestly suggest just deleting the photo after use, there is such a big minefield with something like this and the EU

Can’t you just remove all the stored data?