When a NexudeIT user passes away, one of the very first questions families ask us is: "Can we read their messages?" The honest answer is no — and not because we're refusing. We cannot read them either. This page explains why, what is technically possible, and why this is actually a privacy promise the deceased made to themselves when they chose to use the platform.

When two people send each other a message on NexudeIT, the message is scrambled on the sender's device using a secret key. The scrambled version travels through our servers, but only the recipient's device has the matching secret key to unscramble it. The keys never leave the devices. We don't have them. We never had them. There is no master key we've been holding back. That's what "end-to-end" means: encrypted on one end, decrypted on the other end, and unreadable everywhere in between — including on our servers.

If a person's devices are lost, destroyed, or wiped, the keys go with them. There is no court order, no executor authority, no Legacy Contact relationship, and no NexudeIT admin action that can recover the plaintext of those messages afterwards. We could be ordered by the most powerful court on earth to produce the contents, and we would have to honestly reply that we cannot — not because we're refusing, but because the cipher itself is uncrackable without the key. Sometimes families ask if we can "just" reset the password and read them that way. We can't. Passwords protect the account; they do not unlock encryption. The two are separate.

We do retain conversation metadata for 30 days after confirmed death — participants, timestamps, message counts, attachment hashes (but not the attachments themselves). With a court order specifically authorising the disclosure of metadata under your jurisdiction's equivalent of the Stored Communications Act, NexudeIT can produce that metadata to a court or law-enforcement agency within the 30-day window. After 30 days, all ciphertext is permanently deleted from primary storage, and our backup-rotation cycle purges replicas. That deletion is irreversible.

So — if you need to establish "was my late spouse in contact with this person between these dates?", that's possible with the right legal process inside the 30-day window. If you need to read the conversation, that is permanently and physically impossible.

We know it's painful to hear "no" when you're grieving. But consider: if NexudeIT had a master key that let us decrypt anyone's messages on request, we would be one subpoena, one rogue employee, or one data breach away from every NexudeIT user's most private conversations leaking to the world. End-to-end encryption protects living users from exactly that risk. The price is that, after death, the messages are gone with the person. Your loved one chose this trade-off implicitly the day they picked a platform with E2E encryption. It is the same privacy guarantee that protected them while they were alive.

Even though the messages on our servers are unreachable, copies may still live on your loved one's devices. If you can get into their phone, tablet, or computer (with the help of a digital forensics professional if needed, or by working with the device manufacturer's estate-access program), the messages stored locally there can still be read. We mention this because families often don't think to look at the devices themselves.