What protects your archive

Nothing is aggregated across customers: no cross-customer benchmark, no shared index, no pooled model of anybody's behaviour. This website measures its own pages only if a visitor allows it, and has no path to any archive.

A trail of changes alone cannot tell you who looked. We do not claim the log covers everything a system does; we claim that access to your messages is in it.

That is why the company can end a grant without asking for a handset back. The person working the account authorizes a device from a link; the session never leaves.

The region is on DigitalOcean, a United States provider, so the transfer relies on Standard Contractual Clauses and a transfer impact assessment. Media is encrypted under your organization's own key before it is written. Our email provider stores account data, email metadata, logs and API records in the United States whatever the sending region: recipient addresses, subject lines, timestamps and delivery events. Message content never crosses, and that is a rule in the system, not a policy preference.

Number and SMS supply for provisioned accounts. Model providers, on no-training terms, for the message content the AI features you use send them. The hosting provider, for compute, the database and file storage. The transactional email provider, for the alerts. The dated annex is available on request, and adding to it requires notice under the agreement.

Collection stopped, needs re-authorization and blocked are mailed from the day the organization is created. Our session shows in that account's Telegram devices as Nicegram Business, and one tap there ends it; we say so before you connect, detect the termination and alert every owner. Messages that arrived while our session was gone are not recovered, and no alert changes that: the honest shape of a product built on somebody else's platform.

It runs under dual control: one person approves, another executes. It is slow, not self service, and we quote no turnaround. Restoring an owner grants a role and opens no archive; access follows the roles you set. A second owner at setup means you never need it.

The data protection impact assessment runs alongside the first outside accounts and gates general availability, so a finding can force a change to something already built.