Privacy Policy | CM Chat

CM Chat is provided by Image Depot LLC ("we", "us"). This policy explains what we collect, why, who helps us run CM Chat, and the choices you have. It covers this website and the CM Chat workspaces we host.

1. Two roles

CM Chat is used by organizations. For the content a workspace puts into CM Chat, the organization that owns the workspace decides what is collected and who has access, and we process that content on its behalf. For account security and for running the service, we act on our own behalf. Your organization's own privacy notice also applies to how it uses your information.

2. What we collect

Account data: email address, display name, job title, status text, time zone, profile picture, role, and your sign-in methods (such as passkey public keys and their names, an authenticator secret, and recovery code fingerprints).
Content: messages, reactions, channel names and topics, files and file names, and the workspace name.
Security and usage data: sign-in records and session details (browser description, approximate country, IP address and time), audit log entries about administrative and security actions, and counts such as messages sent and storage used.
Email records: the sign-in codes, invitations and notification emails we send you, with delivery status. We use these to deliver mail and to stop sending to addresses that bounce or complain.
Website forms: if you use the workspace lookup form on this website, we process the address you enter and the result of a bot check.

We do not run advertising or analytics trackers on this website or in the apps, and we do not sell personal information.

3. How we use it

To run CM Chat, sign you in, deliver messages and notifications, provide search and administration, protect against abuse, keep security records, support our customers and meet legal duties.

4. Encryption and access

Message text, files and file names, names, email addresses, titles, status text, channel names, authenticator secrets, IP addresses, browser details and audit details are protected with industry-standard encryption in transit and at rest, and each workspace is kept separate from every other workspace. Detailed security documentation is available on request: security@cmchat.app.

CM Chat is not end-to-end encrypted. Our systems decrypt content in order to deliver it, search it and support administration. We have no tool for browsing customer messages, and access to production systems is restricted. Workspace admins can see audit records and can delete content, but cannot read direct messages through the admin console.

5. Who else handles your data

We share data only with providers that help us run CM Chat, under terms that limit their use of it:

Cloudflare, Inc. provides our hosting and network (Workers), our database (D1), file and backup storage (R2), real-time connections (Durable Objects) and queues. It also provides Cloudflare Email Service, which sends the sign-in codes, invitations and notifications, Cloudflare Email Routing, which receives email sent to our addresses and to channels that use email-to-channel, and Cloudflare Turnstile, which checks that forms are filled in by people.
Google LLC (Firebase Cloud Messaging) will deliver push notifications to the CM Chat Android app once that feature is switched on. The notification tells the phone that something new arrived. It does not contain message text.

We may disclose information if the law requires it, to protect rights and safety, or as part of a business transfer. We do not otherwise share workspace content.

6. Cookies

This website sets no advertising or analytics cookies. The workspace apps use one strictly necessary cookie that keeps you signed in. Cloudflare Turnstile may set its own technical cookies when a form uses it.

7. How long we keep data

Content stays until a user or admin deletes it. A workspace owner can set a retention period of 30 to 3,650 days, and CM Chat then deletes older messages, with their replies, reactions, search entries and attached files, automatically once a day.
Deleting a channel or workspace permanently makes its data unreadable. The stored records are then removed.
Backups of the database are taken nightly and kept for 30 days or less. They hold the same encrypted content as the live service. Deleted data can remain in backups and in the database's short point-in-time recovery window until those copies expire, and it cannot be read once its keys are destroyed.
Audit log entries are kept for the life of the workspace.
Sign-in codes expire after 10 minutes and invitation links after 7 days.

8. Where data is processed

CM Chat runs on Cloudflare's global network. By default each workspace accepts connections from the United States only, and workspace owners can change the allowed countries. Data may be processed in the United States and in other places where our providers operate.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to know who we share it with. Most requests should go first to your workspace admin, who controls the workspace. You can also email us and we will respond within the time the law requires. We will not treat you differently for using these rights.

10. Children

CM Chat is for organizations and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

11. Security

We use encryption, passkey support, invitation-only workspaces, access controls and logging of administrative activity. No system is perfectly secure. If a breach affects you, we will notify you as the law requires. Read more on our Security page.

12. Changes

We will post changes here and update the effective date. We will tell Customers in advance of material changes.

13. Contact

Image Depot LLC. Email: hello@cmchat.app.