Trust Center · Data

Where it lives, how long it stays, how it ends.

Hosting, retention, backups, export and deletion, including what is not built yet.

Last reviewed October 2026

Where data lives

On Cloudflare's network.

Hosting: CM Chat is operated by Image Depot LLC and hosted on Cloudflare, Inc.'s global network.
Location: We do not ask Cloudflare to keep stored data inside a particular country or jurisdiction, so we do not promise a specific country or data center for stored data.
What we do control: Who can connect. Workspaces accept connections from the United States only by default, and owners can change that. See Access.
Schools and districts: If your district requires data to stay in a specific place, talk to us about your district's requirements before you decide.

See Subprocessors for every third party that handles data.

Retention

Messages and files: Kept until a person or an admin deletes them, unless the workspace owner sets a retention period. With a period set, older messages, with their replies, reactions and attached files, are deleted automatically every day.
Threads: A thread is kept until its newest reply is past the period, then the whole thread goes together.
Admin activity log: Kept for the life of the workspace. Retention does not delete it.
Short-lived items: Sign-in codes, invitation links and file download links expire quickly.

Backups

What is backed up: The database is backed up regularly, and backups are stored protected.
How long: Backups expire on a short, fixed schedule. Deleted data can remain in a backup until it expires, and it is not readable.
Admin view: Backups are run and checked by the platform operator. Workspace admins do not have a backup screen.

Export

Moving in: You can import history from Slack: upload a Slack export and preview it before anything is created. Slack-format webhooks work as they are.

Deletion

Deleted content is made unreadable. The records and files are then removed.

1
Delete
An owner permanently deletes a channel, or asks us to delete the workspace.
2
Made unreadable
The data is made unreadable. For a workspace, sessions end and its address stops answering.
3
Records removed
The records and stored files are then removed in stages.
4
Copies age out
Older backups expire on their short schedule, and the data in them cannot be read.

What remains after a workspace is deleted: A small record that keeps the address reserved, and platform-level audit entries. Nothing else of the customer remains.
Cannot be undone: We cannot recover deleted channels or workspaces.
Asking for deletion: A workspace owner can ask us to delete the workspace by writing to hello@cmchat.app.

Write to hello@cmchat.app and a person will reply. To report a vulnerability, write to security@cmchat.app (see how to report, and security.txt).

Detailed security documentation is available on request: security@cmchat.app.

Schools and districts: talk to us about your district's requirements. We would rather answer a specific question than hand you a badge.