files are keeped in database

I wanted to know if the files the user uploads to the Contact form remain in the website database.
Or is it deleted?
As it is a case of sensitive files, it is important for me to understand how it works to decide whether to allow it or not.