What's the story on data retention and privacy? Are there servers you store data on and it downloads from? Do you back up messages?

Perhaps this is implicit from Matrix protocol but I didn't see a clear call out on the site.