Your PrivMX server keeps all data in .db files located in folder server/data. The data is encrypted by client applications and is unreadable, but those files generally should not be available to download for anyone. If you are not sure if your data files are safe OR the installer script told you that “your encrypted data files are available for download for everyone (…)”, then check it yourself - check if your .db files are downloadable - try URLs like https://yourserver.com/privmx/server/data/users.db in your web browser. If they are, then:
- check if your web server supports .htaccess files. There are .htaccess files contained in PrivMX WebMail distribution package – thanks to them web server blocks access to certain folders, including the server/data. If you are using Apache web server, then there should be no problem with that (it should work), but if you are using an other web server such as Nginx then you probably should do some additional configuration.
- if you still have problems with .htaccess files and/or want to use a different solution, then you can move data out of your website’s folders.