Off the Record
There should be functionality to have messages off the record. When the item is received (isread) the receivers update call will actually delete the item completely. This should have a setting for the administrator to allow or disallow.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information