9. The messages themselves
Message content, including pictures sent to or from a business, is stored in the business's account so that the conversation is there when someone needs it. Picture messages are held in VERA's own database rather than on a public file host, and are served through a link that expires, so a media attachment is not left addressable on the open internet.
The business controls how long its records are kept and can delete a conversation. Deleting a VERA account deletes its messaging records. Consent and opt-out records may be retained after a conversation is deleted where that is needed to keep honoring the opt-out, which is the one case where holding the record protects the person rather than the business.
