What happens to the already scanned metadata?

The data that isn’t flagged from scanning is prohibited from being stored in the first place. Flagging is required to have maximum accuracy and reliability according to the state of the art. Data that was flagged is stored as long as needed to confirm (by human review) and report it. Data that isn’t confirmed must be deleted without delay.