Privacy Policy

Last updated: 9 October 2026.

Who this covers

Website visitors who chat with an assistant on a business’s website, and businesses (and their team members) who use Mr C to run that assistant. When you chat on a business’s website, IOVector handles your messages on behalf of that business.

What Mr C collects

• Chat messages. When a visitor asks a question, the message is sent to our servers and to the AI provider that writes the answer. Conversations (the visitor’s messages, the answers, the sources used and the times) are stored, encrypted with a key unique to that business, so the business can review them in its Mr C console.
• Ratings. If a visitor marks an answer helpful or not helpful, that rating is stored with the conversation.
• Page context. The current page’s address, title and description may be sent with a question so the answer fits the page. It is used only for that answer.
• Approved content. The website pages, PDFs and FAQs a business chooses for Mr C to answer from. Original PDF files are kept in secure file storage and are never shown to visitors. Approved content is only ever used to answer questions on that business’s own website.
• Enquiries. If a visitor chooses “Talk to the team”, the details they enter (such as name, email, phone and message) and the question they asked are stored so the business can contact them. The form says who receives the details before the visitor confirms. If the assistant fills in the form from what the visitor already typed in the chat, the visitor checks every field before sending. Enquiry details are encrypted with a key specific to that business, shown only in that business’s console, and never used for marketing. Alert emails to the business say an enquiry is waiting but never include the visitor’s details, and Mr C does not email visitors. Contact details are never required to get an answer. A spam check (Cloudflare Turnstile) runs when an enquiry is sent.
• Business accounts. For people who use the console: name, work email, role, organisation and website. Sign-in uses one-time email links (no passwords) and a sign-in cookie for the console only. Important actions, such as exports, domain verification and plan changes, are recorded in an audit log.
• Billing. Payments are handled by Stripe; card and bank details go to Stripe, not to Mr C. We keep the plan, usage and invoice status.
• In the visitor’s browser. The chat widget uses this browser tab’s session storage to remember whether the chat is open and to continue the current conversation as the visitor moves between pages. It is cleared when the tab closes. The widget sets no cookies.
• User guide feedback. “Was this page helpful?” stores only the page and the answer, not who gave it.

Emails we send

One-time sign-in links, team invitations, enquiry alerts (without customer details), billing notices, and a weekly summary to owners and admins, which they can turn off with one click. We don’t send marketing email from Mr C.

How data is protected

Mr C is hosted in Sydney, Australia. Conversations and enquiry details are encrypted with a key unique to each business, every business’s data is kept separate at the database level, and the chat only works on websites the business has verified. See Security for details.

What Mr C does not do

• It does not use advertising or tracking cookies.
• It does not sell visitor data to anyone.
• It does not use one business’s approved content or conversations to answer another business’s visitors.

AI providers and other services

To write an answer, the visitor’s question, recent turns of the conversation and the relevant parts of the business’s approved content are sent to an AI provider. By default that is Groq; Google (Gemini), OpenAI, Anthropic, DeepSeek and Alibaba Cloud (Qwen) are used only when a business selects them, and a backup provider may answer if the first one is unavailable. Most of these providers process data outside Australia and are bound by their own terms. Questions the assistant couldn’t answer are grouped into topics for the business, and email addresses, phone numbers and long numbers are removed before those questions are sent to an AI provider for grouping. Enquiry contact details are not sent to AI providers, except when a visitor asks the assistant to fill in a form from what they typed. Every service that processes data, and where, is listed on our Sub-processors page.

IOVector staff

A small number of IOVector staff can access a business’s account to provide support, to set it up when the business asks us to, or to keep the service safe. That access is recorded in the audit log.

How long we keep data

• Conversations are deleted automatically 12 months after they took place.
• Enquiries are deleted automatically 24 months after they are submitted.
• Approved content, settings and team accounts are kept while the business uses Mr C, and deleted on request after its plan ends.
• A business can delete individual conversations from its console at any time.

Your rights

If you’re a website visitor and want to see or delete a conversation you had with a business’s assistant, or an enquiry you sent, contact that business or us. If you’re a business using Mr C and want content, settings or data corrected, exported or removed, owners and admins can export enquiries from the console, and we’ll action anything else directly. Email [email protected].

Changes to this policy

We may update this policy as Mr C’s features change. Material changes will be reflected here with a revised “Last updated” date above.

This policy describes Mr C’s actual current data handling and is intended to be accurate, but it is a working draft rather than a substitute for independent legal review. If you’re relying on it for a commercial engagement, please have it reviewed by your own legal counsel first.