Why the question comes up
HighLevel's Conversations inbox holds your back-and-forth with each contact, so it's natural to ask whether that history can be your record. For a firm that has to keep and produce its communications, for example one that answers to the SEC or FINRA, the question isn't whether messages are stored. It's whether they can be removed, and who controls how long they're kept.
Below is what HighLevel's own documentation says on those two points. We're describing the platform, not the rules your firm is under.
What HighLevel's documentation says
Each of these comes from HighLevel's help center or its API documentation.
- Select conversations with their checkboxes and a Bulk Actions toolbar appears, with Delete on it. That deletion is permanent.
- Deleted conversations can't be recovered through the documented inbox feature.
- The public API has an endpoint that deletes a conversation, identified by its conversation ID.
- Internal Comment entries work differently. Once posted they can't be edited or deleted one by one, and contacts never see them.
- HighLevel describes write once, read many (WORM) protection for its infrastructure backups.
- HighLevel also says customers can't configure custom data retention policies.
Backups are not an archive
The WORM line is the one that confuses people. It describes how HighLevel protects its own infrastructure backups. HighLevel doesn't document it as a store you control, search, place on hold or export from on request. Protecting a platform's systems and keeping a firm's records are different jobs.
Internal comments are the narrow exception on changes: they stay as posted. Don't stretch that to customer messages, which live in conversations that can be deleted.
Stored isn't the same as archived. Ask who can delete it, and who decides how long it stays.
Rather have it set up for you?
We'll document every deletion path in your account and set HighLevel up around the archive your compliance lead chooses. That starts with a 30-minute 1:1 with Rob.
What to check before you rely on it
If your team uses HighLevel for client conversations, work through this list and bring the answers to whoever owns compliance at your firm.
- List every way a conversation can be deleted in your account: the inbox Bulk Actions toolbar, and any app or script with access to the conversations API.
- Note who on your team can reach each of those paths.
- Treat internal comments and customer messages as separate when you assess what is kept.
- Read HighLevel's security and compliance overview for its backup and retention scope, and note that retention can't be customized.
- Choose the archive with your compliance lead or archiving vendor, using that list.
- Write down what HighLevel is and isn't for at your firm, so a new hire never treats the inbox as the record.
Where we stop
We plan, build and run HighLevel accounts. We don't decide what your recordkeeping rules require, and nothing on this page is legal or compliance advice.
What we can do is show your compliance lead how conversations move through your account, every place they can be deleted, and what HighLevel documents about retention, so the archive decision is made on facts rather than assumptions.