Privacy Policy
Last updated25 September 2026
How we collect, use, share and protect personal data across the Welocity platform.
Effective Date: 25 September 2026
Version: 2.0
Supersedes Version 1.0, effective 1 November 2025
I. Who we are and who this policy covers
Welocity is an AI native talent delivery platform that connects professionals with roles at the companies we work with. This policy explains how we collect, use, share and protect personal data about:
Candidates: people who apply through our platform, people we contact about a role, and people whose details a hiring company shares with us
Client representatives: people who work for, or on behalf of, companies that use our services
Visitors and contacts: people who visit our websites, contact us, or sign up for events or communications
This policy is written to meet the UK General Data Protection Regulation and Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), and India's Digital Personal Data Protection Act, 2023.
Data controller
Welocity is the data controller for personal data processed on our platform, including all candidate data, however it reaches us: whether you apply directly, we contact you about a role, or a hiring company shares your details with us.
Welocity is operated by NetConnect Global UK Limited (company number 17296227), registered office: 41 Luke Street, London EC2A 4DP, United Kingdom.
Our UK office is at 41 Luke Street, London EC2A 4DP, United Kingdom.
- Data Protection Officer: dpo@welocity.ai
Hiring companies
When we put you forward for a role, the hiring company receives the information it needs for its own selection decision. From that point, it is a separate, independent controller of the copy it receives, responsible for its own use of that data under its own privacy notice. Welocity and hiring companies are not joint controllers.
Some hiring companies ask us to keep their identity confidential in the early stages of a search, in which case we refer to the role by a project name. We will always tell you who the hiring company is before we share your personal data with it.
The limited case where we act as a processor
If a company asks us to screen its own applicants against its own criteria, and those applicants do not join the Welocity talent pool, we act as that company's processor and follow its instructions. We will tell you when this applies, and that company's privacy notice will apply alongside this one.
II. Information we collect
A. Candidates
Identity and contact details: name, email address, phone number, location
Professional information: CV, work history, education, skills, certifications, portfolio links
Application information: roles you are considered for, your preferences, availability and any expectations you share with us
Interview data: video and audio recording of your AI assisted interview, a transcript, and your answers
Assessment results: the AI generated summary and scores against the role's requirements, and notes made by our human reviewers
Communications: emails, messages and chat with our team
Technical data: IP address, device and browser type, timestamps, and connection quality during the interview
Records of your choices: which version of our notices you were shown, when, and any choices you made or withdrew
We do not ask for special category data (such as health, ethnicity, religion or sexual orientation), and we ask you not to include it in your answers. If we invite you to take part in optional diversity monitoring, we will ask for your explicit consent separately. That information is kept apart from your application and never used to assess you.
B. Where candidate data comes from
We collect candidate data:
directly from you, when you apply, create a profile or take an interview
from professional information you have made publicly available, such as professional networking profiles, published CVs and portfolios
from job boards and CV databases where you have made your CV available to recruiters
from people who refer you
from a hiring company that shares your details with us
If we obtain your data from someone other than you, we tell you where it came from in our first message to you, and in any case within one month.
C. Client representatives
We collect business contact details (name, job title, company, email, phone), account and login information, platform usage data, and billing information.
D. Website visitors
We collect technical and usage data through cookies and similar technologies, as explained in our Cookie Policy. Optional cookies are only set with your consent.
III. How we use your data and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Identifying you as a potential fit for a role and contacting you about it | Legitimate interests (matching experienced professionals with relevant opportunities). You can object at any time and we will stop. |
| Managing your application and progressing you through a recruitment process | Steps taken at your request before entering into a contract, and legitimate interests |
| Recording your AI assisted interview and assessing your answers | Steps taken at your request before entering into a contract, and legitimate interests (assessing candidates consistently for the roles on our platform) |
| Sharing your profile, interview and assessment with the company hiring for the role you applied for | Steps taken at your request before entering into a contract |
| Matching your profile, interview and assessment to other roles on our platform, and presenting you to those hiring companies | Legitimate interests (running a talent matching platform and putting candidates in front of relevant employers quickly). You can object at any time and we will stop. |
| Keeping your profile and interview after a process closes, so you can be considered for other roles | Legitimate interests. You can object at any time and we will delete them. |
| Optional diversity monitoring | Your explicit consent |
| Providing our services to clients and managing client accounts | Contract |
| Security, fraud prevention and protecting our platform | Legitimate interests |
| Handling complaints, legal claims and regulatory enquiries | Legal obligation and legitimate interests |
| Business communications with client representatives | Legitimate interests, or consent where the law requires it |
In India, we process personal data on the basis of your consent or a legitimate use permitted under Section 7 of the Digital Personal Data Protection Act, 2023.
Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that took place before it.
IV. AI assisted interviews and decisions
How the interview works. Octo, our AI interviewer, asks you a structured set of questions relevant to the role. Our AI transcribes your answers and reviews the transcript, looking at content, relevance, clarity and reasoning. It then produces a summary and scores against the role's requirements.
What the AI does not do. Your video is recorded so that human reviewers can watch it, but it is not analysed by AI. We do not use facial recognition, analyse facial expressions, body language or emotions, infer your personality, or identify you biometrically.
Human review. No decision about your application is made solely by automated means. A member of our team reviews your interview and the AI summary before any decision is taken about whether you progress. You have the right to ask for human review, to give your point of view, and to contest any assessment.
Matching you with other roles. Welocity is a matching platform. Your interview is assessed once and used to put you forward for the role you applied for and for other roles that fit your experience. You can ask us at any time which companies have received your profile or interview, and you can switch matching off whenever you like. We then stop sharing and ask any company that already holds your interview to delete it.
Adjustments. The AI interview is the first stage for every role on our platform. If a disability, health condition or anything else makes the video format difficult for you, contact us before your interview at dpo@welocity.ai and we will arrange an alternative. It will not count against you.
If you would rather not take it. You can decline, and we will not chase you about it. Tell us and we will either delete your details or keep your profile on file so you can apply for roles directly.
V. What we do not do with your data
We do not use your interview recording, transcript or answers to train, fine-tune or test any AI model, whether ours or a third-party provider's. Our AI providers are contractually prohibited from using your data to train their models.
We do not use candidate interviews in demonstrations, marketing or sales presentations. If we ever want to use an interview as an example of how the platform works, we ask that candidate separately, after their process has finished, and they are free to say no or to change their mind later.
We do not sell your personal data.
We may produce anonymous, aggregated statistics (for example, how many interviews were completed in a month) that cannot identify you.
VI. Who we share your data with
Hiring companies, as described in section I. Hiring companies are contractually required to use candidate data only for their own selection decisions.
Service providers that help us run our platform, in these categories: cloud hosting and storage, video processing, AI model providers, email and communication tools, analytics, and payment processing for client billing. They act only on our instructions under written contracts, cannot use your data for their own purposes, and are bound by confidentiality and security obligations.
Cloudflare, Inc., which provides Cloudflare Turnstile, a security check on our website forms that tells people from bots. When you use a form, Cloudflare receives your IP address and technical information about your browser and device to run the check. It is strictly necessary to keep our forms secure, so it doesn't need your consent. See Cloudflare's privacy policy.
Authorities and advisers, where required by law, court order or a regulator, or to establish or defend legal claims.
A buyer or successor, if all or part of our business is sold or reorganised. This policy would continue to apply to your data.
VII. International transfers
Your data is stored on encrypted cloud infrastructure in the United Kingdom (AWS London) and the European Union (AWS Frankfurt). Our teams in India access personal data to provide our services, and some of our service providers operate in other countries, including the United States.
Where personal data from the UK or the European Economic Area is transferred to a country without an adequacy decision, including India, we use the UK International Data Transfer Agreement or the UK Addendum, and the EU Standard Contractual Clauses, together with supplementary security measures. You can ask us for a copy of these safeguards.
VIII. How long we keep your data
| Data | Retention |
|---|---|
| Interview recordings, transcripts and assessments | 12 months after the process for that role closes, then permanently deleted |
| Candidate profile | 12 months after the last process you were considered for closes |
| Profile of someone we contacted who did not respond | 6 months after our first contact |
| Records of the notices you were shown and any choices you made | For as long as we hold your data, and up to 6 years afterwards to show we met our obligations |
| Client and billing records | Duration of the business relationship plus 5 years, for legal and tax purposes |
| Security and audit logs | At least 24 months, or as required by law |
You can ask us to delete your data sooner, and we will, unless we need to keep it to meet a legal obligation or to defend a legal claim, in which case we will tell you. If you are hired, the hiring company's own policies govern the copy it holds.
IX. How we protect your data
We use technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit and at rest, role-based access limited to the people working on your application, viewing of interview video only inside our platform, with no download, forwarding or copying, multi-factor authentication, access logging, regular security testing, and staff training. If a personal data breach is likely to put your rights at risk, we will notify the relevant supervisory authority and, where required, you.
X. Your rights
You have the right to:
access the personal data we hold about you, including your interview recording and assessment
correct inaccurate or incomplete data
delete your data
restrict how we use your data in certain circumstances
object to processing based on our legitimate interests, including being contacted about roles
data portability, where processing is based on consent or contract
withdraw consent at any time
not be subject to a decision based solely on automated processing (see section IV)
In India, you also have the right to grievance redressal and to nominate another person to exercise your rights in the event of your death or incapacity.
How to exercise your rights: email dpo@welocity.ai. We will respond within one month.
Complaints. If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to a supervisory authority:
UK: the Information Commissioner's Office, ico.org.uk, 0303 123 1113
EU: the data protection authority in the country where you live or work
India: the Data Protection Board of India
XI. Cookies
We use cookies and similar technologies on our websites. Optional cookies are only set with your consent, which you can change at any time. Cloudflare Turnstile, the security check on our website forms, is strictly necessary and runs without consent (see section VI). See our Cookie Policy for details.
XII. Children
Our services are for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it.
XIII. US residents
We do not sell or share personal data for cross-context behavioural advertising as defined under the California Consumer Privacy Act. You can contact dpo@welocity.ai with any request.
XIV. Changes to this policy
We will tell you about material changes by email or platform notice at least 15 days before they take effect. We record the version of this policy in force whenever you give consent, and earlier versions are available on request.
XV. Contact us
Data Protection Officer: dpo@welocity.ai
Post: Data Protection Officer, Welocity, 41 Luke Street, London EC2A 4DP, United Kingdom
Version: 2.0
Effective: 25 September 2026