If I understand GDPR and “the Right to be forgotten” properly, then yes - they would have to actually delete the information.
Edit: at least when it comes to PII, which I presume should include photos of you, or any personal detail of you. The content you may have posted there up until then - that might be a different story
Comments
Do most SaaS actually delete or do they just store a tombstone in the database for your account?
If I understand GDPR and “the Right to be forgotten” properly, then yes - they would have to actually delete the information.
Edit: at least when it comes to PII, which I presume should include photos of you, or any personal detail of you. The content you may have posted there up until then - that might be a different story