Where Chat Media Goes and What It Costs to Keep

Text messages are tiny and boring to store. Media is neither: a busy business can take in gigabytes a year of customer photos of the kind described in when a photo answers the question faster, plus voice notes and documents, and a good proportion of it is more sensitive than anything in the text. Our guide to the half of chat that is not text covers the storage question because it produces both a bill and an obligation.

Limits you will meet

The messaging platform caps file sizes, and the caps differ by type — images are generously handled, documents less so, video least of all. The practical consequence is that a long video or a high-resolution scan may simply fail to send, usually without a helpful explanation.

Voice notes are the highest-volume item for most teams, which is part of why the transcription workflow in handling voice notes without losing an hour a day matters. The other limit is time. Media sent through the platform is available for a limited window, after which the original is no longer retrievable. If your CRM does not copy files into its own storage as they arrive, you have a chat history full of thumbnails that no longer open, and you will discover this the day someone needs a photo from last year.

Where it should live

A CRM worth using downloads media on receipt and stores it in its own object storage, linked to the conversation and the contact. That gives you three things the messaging platform does not: permanence, access control, and the ability to delete on request.

• Permanence — the file is still there in three years when a warranty claim arrives.
• Access control — the file is served through a link that expires and checks who is asking, rather than a public address anyone with the URL can open.
• Deletion — when a customer asks to be erased, their images go with everything else, which is impossible if the only copy is in someone's phone gallery.
• Attachment to a record, so the photo is on the job rather than lost in a thread.

“

If a customer's photo only exists in one employee's phone, you do not have a record. You have a favour.

— be digital ai team

Who can see it

Media inherits the access rules of the conversation it belongs to, which is usually correct and occasionally not. A photo of a medical condition, a copy of a passport or an image of a customer's home should not be casually browsable by a new part-time agent looking through old threads.

Where you handle genuinely sensitive material, restrict who can open old conversations rather than relying on nobody thinking to look. The general framework is in securing customer data in a shared inbox.

What deletion means

Deleting a message in a chat interface often hides it rather than removing the underlying file. For a deletion request that has to be honoured properly, the file itself must go, including from backups within a stated period.

Ask your provider what happens to media on deletion, and how long backups are retained — the answer belongs in your privacy documentation, and the questions to ask are set out in how long to keep chats and customer data. "We delete on request" means nothing if the images sit in a backup for a further two years and nobody has written that down.

The cost is small, the neglect is not

Object storage is cheap. A small business generating a few gigabytes a year spends less on storing every photo it has ever received than on a single month of messaging, so deleting media to save money is almost never worth the risk of losing the record.

What does cost you is the absence of a policy. Businesses that keep everything forever without deciding to are the ones that cannot answer a deletion request, cannot say where an identity document went, and have four years of customer photographs sitting somewhere nobody has reviewed.

Getting it out again

One question worth asking before you commit to any system: how do you get your media out? A CRM that stores everything beautifully and offers no bulk export has your customer photographs as well as your contact list, and the cost of leaving is higher than it looks.

Test the export once, early, while you have little to lose. Check that files come out with names that connect them to contacts rather than as a folder of random identifiers, because an export nobody can interpret is not an export.

A policy that fits on a page

Decide three things and write them down. How long media is kept — the same period as the conversation it belongs to, unless there is a reason otherwise. What gets deleted early: identity documents once verified, anything you asked for but did not need. And who can access old media, which for most businesses means the team, and for a clinic or a legal practice means considerably fewer people than that.