Where your data is stored, and who can see it
What is held, where it lives, how long it stays, and how to get somebody out of it.
Where it is
The application, the database and the backups are in Europe. Conversations do not travel through a third-party messaging service on the way to your inbox: the real-time connection is ours.
Files sent in chats go to our own object storage, not to a public bucket.
Who can see it
Your team, according to their role.
Us, in the narrow sense that we run the service and our engineers can reach production in order to operate it. Access is logged. We do not read conversations for any other purpose, and nothing here is used to train anything.
Nobody else. We do not sell personal data and we do not share it for advertising.
What is held
Per conversation: the messages, who sent them and when, any files, and the page the chat started on.
Per contact: whatever they gave you, plus whatever your own site passed to us, plus a rough location from their IP address and the browser they used.
Settings → Data & privacy shows the live counts rather than a description: how many people, conversations and files you are holding right now.
How long
You choose, under Data & privacy. A closed conversation is deleted once it reaches the age you set, along with its files. Open conversations are never touched by it.
Your plan caps the longest you can choose: thirty days on Free, a year on Starter, and kept until you say otherwise on Pro and Business.
Visitor sessions, meaning who was on the site and roughly where from, are deleted after thirty days regardless.
When somebody asks about their data
Open their contact and use:
- Download their data, which produces a file containing everything held about that person.
- Erase, which removes the contact, their conversations, their messages, their files and their visit history.
Erasure removes the files from storage rather than only unlinking them. There is no recycle bin, and we cannot recover it afterwards.
Both are available on every plan, including the free one.
Your own end of it
For the chats your visitors have with you, you are the controller and we are your processor. It is your privacy notice that has to describe this, and requests from your customers come to you rather than to us. The privacy notice sets out the relationship, and there is a data processing agreement if you need one.
Last updated 22 September 2026.