We do not store any personally identifiable information (including attachments). 

In the case of merging tickets that contain an attachment, we can redact the original ticket, but not from the internal merging message. In this case, the attachment can still be opened in the merged ticket, despite the redaction of the original ticket. 

There has been no success in deleting the original ticket, although we have tried.