They are saved in plaintext in the database but cannot be accessed by mods or admins unless reported (or having database access). For private communication you should use something like Matrix.

They’re not.