and the Privacy Policy states "In the event of a corporate sale, merger, reorganization, dissolution or similar event, Personal Data may be part of the transferred assets."
Sending images to do this is bad enough, but I'd hope that they have some serious protections around that data in transit and on the servers themselves. If they are saving these images at all that's not any good.
