The private messaging between users is not encrypted. As for anything serious, I would suggest XMPP/Jabber OTR or messaging using PGP with the keys supplied by both parties. I would love to have that feature built in but it's not a stock feature.