updated 22 september 2026 · website information handling
draft answers
Answers and selected files stay in the current browser tab before submission. Closing or reloading the tab clears them. If you choose to save a draft, the website encrypts your answers on your device using your passphrase and downloads a file. The passphrase is not sent to Lab2Sky. Keep it safe: we cannot recover it. Draft files do not include pitch decks.
email introductions
If online submission becomes unavailable, you can download an introduction or prepare an email in your own email app. You decide whether to send it and attach a pitch deck. The website does not send that email or confirm its delivery.
submitted enquiries
For online submissions, we collect the contact details, business answers and optional founder pitch deck you submit. These are stored for the Lab2Sky review team to consider the enquiry and respond. No identity documents, bank details or marketing subscription are requested by these questionnaires.
careers and the talent network
Talent applications, PDF CVs, consent choices and review history are stored privately in Supabase for authorised lab2sky reviewers. We use them to consider future founder, team and specialist opportunities. OpenAI processes the supplied professional evidence and CV; public research uses your supplied professional links and your name to distinguish the correct profile. Resend sends application and assessment summaries to [email protected]. These service providers may process information outside South Africa.
AI skill assessments are preliminary decision support. They do not make hiring decisions or establish identity, qualifications, employment history or references. Only relevant professional evidence is assessed; sensitive personal traits are excluded. Please omit identity numbers, dates of birth, photographs, health information and confidential employer/customer material from your application and CV.
Joining requires permission to retain your information for future opportunities for up to 12 months. Portfolio-company sharing is a separate optional choice; without it we ask before sharing. Records and CVs are removed from the active system when that period expires. Backups, previously delivered emails and provider records follow their own retention processes. Email [email protected] from your verified address with your application reference to request correction, access or withdrawal. Applicants are not subscribed to marketing, and application answers or CVs are not sent to analytics.
AI-assisted review
The final submission notice asks you to acknowledge that OpenAI may process your business answers and uploaded PDF for a preliminary assessment. Contact fields are excluded from the structured analysis input, but a deck may contain personal information. Public research can use company names, websites, sectors, markets and the professional profiles you supply, including founders, investor representatives, corporate contacts and prospective venture builders. Professional corroboration is recorded separately from identity verification. We do not request personal identity documents in the questionnaire. Do not share material you are not authorised to disclose.
AI scores and source findings are provisional. People decide how an enquiry proceeds; the website makes no automatic partnership or investment decision. Provider processing may take place outside South Africa. AI processing may retain provider records under the provider’s applicable terms; removing a site record does not itself remove those provider records.
access & bot protection
The website runs on Vercel, with private enquiry records and documents in Supabase. Reviewer access requires verified email sign-in and an authorised reviewer role. Email verification uses Supabase Auth and the configured delivery service. Where enabled, Resend processes the recipient address and email content for enquiry alerts and staff-approved replies. Response previews, decisions and delivery acknowledgements are retained with the private enquiry history. A meeting invitation may link to an external booking service; its information-handling notice applies when you use that service. A secure, short-lived session cookie maintains your sign-in. Secure submissions use Google reCAPTCHA, alongside request limits. A short-lived salted hash derived from the request IP is used for rate limiting. The website counts questionnaire starts and answer-review screens by day and journey. These aggregate counts contain no answers or persistent visitor identifier. They are used to improve the introduction process. The website does not run advertising trackers.
retention & requests
Enquiries remain in the review system until a reviewer removes them. There is no automatic retention schedule configured. Reviewer deletion removes the site’s stored answers, deck and review history; it does not automatically remove copies previously sent to service providers or by email.
Contact [email protected] to request access, correction or deletion, or to ask about information handling. We will confirm the scope of the request and any records that need to be retained.