[ocdtrekkie]

Do you feel that three months is adequate warning to actively delete people's data? If they've entrusted their photos solely to you, they may not have any way to recover data that is incredibly unique... you can't just recreate a photo.

I definitely think it's enough time to cut off new upload for people over the limit, but you should strongly consider whether or not your storage costs are that high as to make it worth it to not give a longer runway for people to export.