I may be extra paranoid, but I'm almost certain that, even if they delete it from your folders (I don't think they do, at least not Right away), they still keep it for maintaining a profile of each person. As for the ransomware, yeah, if you don't pay them, you're likely to lose access. That's the definition of ransom, no?