Privacy Policy
Last updated: 1 November 2026
This policy explains how AdVelocity AI Limited handles personal data in OneTruth, our marketing attribution platform, and in OneTruth AI, its AI assistant.
Who we are
AdVelocity AI Limited is a company registered in England and Wales, number 11633823.
Registered office: Office 4, Elizabethan House, Leicester Road, Lutterworth, LE17 4NJ.
Contact: info@advelocity.ai · 01163 501 704
Our two roles
For people who use OneTruth, such as our clients' staff and agencies, we decide how your data is used. We're the data controller.
For our clients' website visitors and customers, our client decides why their data is collected, and we process it on their instructions. The client is the data controller and we're their data processor. If you've visited a client's website, called them or filled in their form, their privacy policy applies, and they should be your first contact.
If you use OneTruth
What we collect
- Your name, work email, role and the company you work for.
- Your login details, handled by our sign-in provider. We don't store your password.
- How you use OneTruth, including IP address, browser and activity logs.
- Your messages to us and your questions to OneTruth AI.
Why we use it, and our legal basis
- To provide your account and the service (our contract with you or your employer).
- To keep OneTruth secure, fix problems and improve it (our legitimate interests).
- To send service messages and any insight emails you've chosen to receive (contract, or your consent where required).
- To meet legal obligations.
If you've visited a website that uses OneTruth
On our clients' instructions, we process the following.
Website activity. Each website owner decides how our tracking runs on their site, including whether it waits until you accept cookies on their banner. We explain the options and what each means for their reporting; the choice, and responsibility for it, is theirs. That site's cookie notice tells you how it works there. Tracking covers pages viewed, time and date, how you arrived (including advertising click identifiers such as gclid, fbclid and msclkid), IP address, browser and device, and a visitor ID stored in a cookie.
Forms you submit. The details you enter, such as name, email, phone number and your enquiry.
Phone calls. Some clients show call tracking numbers, so they can see which marketing led to a call. Depending on the website's setup, these numbers can appear whatever you choose on the cookie banner. We log the caller's number, the time and the length of the call. Where the client has switched it on, calls are recorded and transcribed, and the client must tell callers and obtain any consent the law requires. Calls aren't linked to your website visits where tracking didn't run for you.
Chats. Some clients use a chat assistant on their website. If you use one and it captures your details, your contact details and a record of the conversation appear in OneTruth as an enquiry for that client.
Orders and sales. Where a client connects their shop or CRM: order details, email address, and the value of quotes and sales.
How your data is used. To show the client which marketing produces enquiries and sales. To sort and summarise enquiries, including with AI (for example, whether a call was a sales enquiry). These summaries help the client's staff and don't produce decisions with legal or similar effects on you.
Sharing data with advertising platforms
Where a client turns this on, we tell their advertising platforms that an enquiry or sale happened, so those platforms can measure and improve the client's campaigns.
| Platform | What's sent |
|---|---|
| Google Ads | Conversion details and the click identifier; hashed email and phone where the client has enabled it |
| Microsoft Advertising | Conversion details and the click identifier |
| Meta (Facebook and Instagram) | Conversion details, hashed email, phone and name, click identifier, IP address and browser details |
“Hashed” means converted with SHA-256, so the platform can compare it with data it already holds without us sending the original text. We never send a form's message or a call's content.
Clients must confirm they've obtained the consent needed before turning this on. We don't send a person's data to these platforms unless a website visit has been tracked for them. Each platform handles what it receives under its own privacy policy.
Data we receive from connected advertising accounts
When a client connects Google, Meta, Microsoft or a similar platform, we read advertising data such as campaigns, ads, spend and performance, and the list of accounts they can access. These are business figures, and we don't receive personal data about the people who saw the ads.
Meta: we use data from Meta's platform only to provide OneTruth to the client who connected it. We don't sell it or use it for anyone else.
Google: our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who else processes data
We use these providers to run OneTruth, under contracts that limit what they can do with your data.
| Provider | What for | Where |
|---|---|---|
| Google Cloud and Firebase | Hosting, databases, sign-in | UK (data stored in London) |
| Cloudflare | Tracking delivery and security | Global network |
| Vercel | Serving the OneTruth website | Global network |
| Anthropic | AI analysis and OneTruth AI | USA |
| AI voice and chat provider | Where a client also uses voice or chat assistants | USA |
| Our telecoms provider | Call tracking and recording | USA / UK |
| Email delivery provider | Sending emails | USA |
We also share data when the law requires it, to protect our rights, or as part of a sale or merger of our business, with the same protections continuing.
We don't sell personal data.
International transfers
Our main databases are in the UK. Some providers above are in the USA. Where data leaves the UK, we rely on UK adequacy regulations or the UK's approved contract terms.
How long we keep data
- Account data: while your account is open, then as needed for legal and accounting reasons.
- Client data: for as long as our client's contract runs, unless they ask us to delete it sooner.
- Connection tokens: until the connection is removed.
Keeping data secure
Data is encrypted in transit and at rest. Access is limited by role, and each client's data is kept separate. Access tokens are held in a dedicated secrets store. No system is completely secure, and we'll tell you and the ICO about a serious breach where the law requires it.
Deleting your data
If you use OneTruth: email info@advelocity.ai from your account's address, and we'll delete your account data within 30 days, except what the law requires us to keep.
To remove a connection to Meta, Google or Microsoft: disconnect it in OneTruth under Configuration → Integrations, or remove our app in that platform's settings (on Facebook: Settings → Business Integrations). Then email us, and we'll delete the stored tokens and data read through that connection within 30 days.
If you've visited a client's website, or called or contacted them: contact that business, as they control your data. You can also email us with the website and your contact details, and we'll pass your request on and help them act on it.
Your rights
Under UK data protection law you can ask for access to your data, correction, deletion, restriction or a portable copy, and you can object to processing or withdraw consent. Contact info@advelocity.ai; we aim to reply within one month.
You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we'd welcome the chance to help first.
Cookies
OneTruth's website uses cookies needed for sign-in and for keeping you logged in. On client websites, our visitor ID cookie follows the setup that client has chosen, and that site's cookie notice explains how to change your choice.
Children
OneTruth is a business service and isn't intended for children.
Changes
If this policy changes, we'll update the date above and tell account holders about significant changes.
© AdVelocity AI Limited