Two searches that answer the safety question

Fifteen photographs of a face from different angles is a different category of data from one photograph. Noticing that is accuracy, not paranoia.

Search one: a retention period with a number

Not a paragraph about caring — a figure. A service that keeps source photographs indefinitely rarely writes that down; it writes it down by omitting the number.

Search two: the word training

Not "is my data shared", which is a different question with a more comforting answer. Whether the images feed the model that serves other people. Silence there is itself the answer.

The document people skip and should not

The subprocessor list. It is company names and countries rather than prose, and prose can stay vague while a list cannot. Start there.

When it stops being your decision

The moment an employer uploads photographs of staff. Those are third parties' personal data, consent sits with the employer, and the reasonable question from an employee is simply how long the portraits are kept and whether declining has consequences.