I'm not a lawyer, but i have high probability they have "Legitimate interest" to keep the keys (something like preventing fraud) and keys have expiry time