All files are sent to the Capture ATP cloud over an encrypted connection. SonicWall does not keep the files. All file types, whether they are malicious or benign are removed from the Capture ATP server after a certain time period.
The SonicWall privacy policy can be accessed at https://www.MySonicWall.com/privacypolicy.aspx.