Who is responsible

CONVRO LTD, registered in England and Wales (company number 17444294), 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom is the controller of personal information processed to operate CheapWork Secure Messenger at cheapwork.stream. For privacy questions, access or deletion requests, email [email protected] and identify CheapWork Secure Messenger in your subject. You may also write to our registered office.

Information we process

Account records include your optional, non-unique display name, generated contact number, public identity and device keys, a password-derived authentication record stored as a salted hash, and your encrypted identity vault. The service does not require your telephone number. Your account password and private message keys are not submitted to the relay as plaintext.

Service records include saved contacts and aliases, conversation membership, group names, routing identifiers, encrypted message envelopes and attachments, delivery and read status, timestamps, message sizes and expiry settings. Contact lists, group names and routing metadata are not the same as encrypted message content.

Network and security systems process information such as IP addresses, request timing, browser/client headers, operational errors and rate-limit events. If you contact us, we process what you send, your contact details and the information needed to answer. Do not send passwords or unnecessary identity documents.

Purposes and legal bases

We process information necessary to create and administer your account, authenticate access, connect contacts, deliver encrypted messages and provide requested features to perform our agreement with you. Without the necessary account and routing information, we cannot provide those features.

We rely on legitimate interests to secure infrastructure, prevent misuse, investigate faults, respond to enquiries and establish or defend legal claims, balanced against your rights. We process information where necessary to meet legal obligations. Optional features requiring consent or device permission, such as notifications, microphone access or camera access, operate only when enabled; you may withdraw the relevant permission in your browser or device settings.

Device storage and cookies

The app uses an essential session cookie for authentication and browser storage for settings, encrypted identity access, device keys and local encrypted message history. When Require Authentication is enabled, returning to the app requires your password. When it is disabled, this browser can remember access using encrypted local material, subject to a valid server session.

Signing out removes saved sign-in access but may leave encrypted device history in that browser. Clearing site storage or losing a device can remove the keys needed to read local history. The current messenger does not include behavioural advertising trackers. We will provide appropriate information and obtain consent where required before introducing non-essential tracking.

Recipients and service providers

People you communicate with receive your messages and the identifiers and conversation information needed to communicate. They can keep their own copies. Browser and operating-system features may display notifications or handle files when you enable or use them.

Hosting, network delivery, security and other operational providers process information needed to operate their services. Authorised personnel may access account, support and operational information where necessary for their duties. We may disclose information where required by applicable law, to protect rights and security, or in a lawful business transfer subject to appropriate protections. We do not sell personal information or use private conversations for behavioural advertising.

How long information is kept

Account and contact information is retained while needed to provide the account and handle closure requests, subject to legal, security and dispute-related requirements. Session records expire after seven days unless ended sooner. Local keys, settings and retained encrypted history stay in your browser until removed by the app, you, or your browser’s storage controls.

Message records are subject to the selected expiry, currently from one minute to six days, and optional burn-on-read timers. Expired or shredded records are removed through the service’s cleanup processes; removal need not occur at the exact millisecond a timer expires. Local histories follow the relevant message state when the device synchronises.

Operational and security records are retained for the period reasonably needed for security, troubleshooting, applicable legal duties and claims, taking account of the event, its severity and any continuing investigation. Infrastructure and recovery copies may remain until overwritten under their retention cycles. Timers do not erase recipients’ independent copies or guarantee immediate removal from every backup.

International processing

CONVRO is based in the United Kingdom. Service providers and network infrastructure may process information in other countries. Where an international transfer is subject to UK or EU data-protection requirements, applicable safeguards must be used, such as an adequacy decision or approved contractual safeguards with any required supplementary measures. Contact us for information about relevant providers, processing locations and safeguards.

Your rights and choices

Depending on applicable law, you may request access, correction, erasure, restriction, objection to processing based on legitimate interests, and portability of qualifying information. You may withdraw consent where it is the basis for processing, without affecting prior lawful processing. Send requests to [email protected]. We may ask for proportionate information to verify the account and request; do not provide your password.

We respond within the applicable legal period, generally one month, subject to permitted extensions and exceptions. We cannot supply plaintext history that is available only through keys on participating devices, and a request cannot require us to erase a recipient’s independent copy. We explain any lawful reason that prevents us from fulfilling a request.

You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or another competent supervisory authority, including an authority in your country of residence where applicable. You do not have to contact us first. We do not use personal information for decisions based solely on automated processing that produce legal or similarly significant effects.

Children and updates

The service is intended for people aged 16 or over, subject to any higher applicable minimum age and required permission. If you believe a child is using it contrary to these requirements, contact [email protected].

We update this notice when our processing or legal requirements change and provide appropriate notice of material changes. The revision date identifies the current notice. Publishing an update does not substitute for consent or another legal step where one is required.