We will never sell or share your data. Ever.
Missived is self-funded and privately owned. There are no investors to answer to and no advertising business on the side. You and your group are the customers, so your data stays yours.
If you make an account, we will never sell or share your data, ever.
The promise, in plain words
- Never sold. Not your messages, files, contacts, calls or the fact that you use Missived. Not to anyone, at any price.
- Never shared for advertising, AI training, data brokers or "partners". There is no list of partners. There is no ad network.
- No training on your content. We don't train AI models on what you write, say or upload, and we don't hand it to anyone who would.
- No trackers. No advertising or analytics scripts on this site or in the app, no tracking pixels in our emails, no fingerprinting.
- Only the infrastructure we run on. The companies below touch your data only so Missived can run: servers, storage, email delivery and notifications. Nothing else, and they are all named here.
- Integrations only when your group connects them. Nothing flows to another service until an admin in your space turns that integration on, and it moves only what it needs.
- Only when the law requires it. We'd only ever disclose data when the law requires it, such as a valid court order.
Every company that touches your data
| Company | What for | What they handle |
|---|---|---|
| OVHcloud | The servers we rent and run ourselves in the US (Virginia): the Missived API, its database and cache, and our own call server for voice, video and the Virtual Office. | Everything Missived stores, on machines we administer. Messages and calls go straight to these servers. |
| Cloudflare | Our domain and DNS, hosting this website and the web app's files, file storage (R2), our nightly backups, the desktop app's downloads and updates, and forwarding mail sent to [email protected]. | Uploaded files and backups, encrypted before they get there (workspace icons and profile pictures are the exception: they're pictures meant to be shown). Visits to this site, the app's pages and the download server. Your messages and calls don't pass through Cloudflare. |
| Resend | Sending our email: sign-in codes, invites, meeting invitations and the notifications you switch on. | Your email address and the emails we send you, which can include message text when you switch on a digest or reminder (a prayer digest includes the requests in it). |
| Your browser's push service | Delivering notifications, only if you turn them on: Apple, Google, Mozilla or Microsoft, depending on your browser or device. | The notification (sender's name and the start of the message) is encrypted for your browser; the push service sees only that one was sent. |
| Google and Twilio | For now, when a call starts, your browser asks their public "STUN" servers what its network address is, so it can connect to our call server. | Your IP address, and nothing about the call. We're replacing them with our own server. |
| Our support mailbox | Mail you send to [email protected] is forwarded to the mailbox we read it in. | What you write to us, held by that mail provider. |
Calls run on our own server. Voice, video and the Virtual Office use LiveKit, open-source software we run on our OVH media server, not a calling service that sees your calls.
Link previews, images in chat and direct audio links are fetched by our server, so the website on the other end sees Missived's server, not you. Uploaded office music and overlay sounds stay on our storage. A YouTube, Vimeo or Figma embed someone puts on a whiteboard still loads from its provider.
Optional YouTube, Spotify and SoundCloud players are content an organisation explicitly chooses to play on a floor or stream overlay. If it opts in, that provider can see who's listening, including their IP address. The visible player says which provider it contacts; ordinary audio links and uploads do not contact those providers from your browser.
Not used today, listed so you know before anything changes: GIF search would send search words (not who you are) to GIPHY through our server; checking passwords against known breaches (Have I Been Pwned) would send only the first five characters of a hash, never the password; and the native phone app, once it ships, will deliver notifications through Expo's push service. If a church connects API.Bible for more translations, our server sends it only the passage reference. Anything new goes on this page before it is switched on.
When your group connects something
Missived can connect to Twitch, GitHub, Planning Center, Zapier and many others. None of them receive anything until an admin in your space connects them. Each one gets only what it needs, admins can see and remove every connection, and apps and bots never read your direct messages.
The same goes for AI: if you connect your own assistant (Claude, for example) through Missived's MCP server, it reads only what your account can see, only after you approve it, and you can disconnect it at any time.
Questions?
Write to [email protected] and a person will answer.
This page is our promise in plain words, and it applies to missived.com and the hosted Missived service.