Privacy Policy

What we collect

• Your account: your email address, used to send sign-in codes and to identify your account. We do not use passwords.
• What you put into VenLab: venture ideas, descriptions, answers to readiness questions, interview notes, survey drafts, financial assumptions, and anything else you type or upload.
• What VenLab produces for you: the AI-generated theses, assessments, plans, decks and analyses, stored with your venture.
• Credits and usage: your credit balance, your tier, and a record of each AI run (when it ran, whether it succeeded, and why it failed) so we can enforce fair-use limits and fix problems.
• People you share with: if you publish a survey, we store the answers respondents submit. If you share an investor room, we record each visit (the email the visitor enters, if you require one, when they opened it, and the time spent on each section) and show it to you.
• Cookies: only the ones needed to keep you signed in, and, on an investor room, one cookie that ties a visitor's page views to their visit. We do not use advertising or third-party analytics cookies.

How AI processing works

To generate results, VenLab sends the relevant parts of your venture (your idea, the confirmed thesis and earlier results) to an AI model provider. Depending on how the service is configured, this is an AI API provider called directly by VenLab, or a workflow service (n8n) operated for VenLab that calls AI providers on its behalf. AI output can be wrong; treat it as a starting point, not advice.

Who processes your data

• Supabase — database, authentication and sign-in emails.
• The AI provider — currently DeepSeek in the default configuration — receives venture content to generate results.
• n8n workflow hosting — only when VenLab runs its workflows there instead of in-app.
• Our email delivery provider — sends sign-in codes.
• Google Fonts — serves the typefaces, which shares your IP address with Google.
• Our hosting provider — runs the application server.

We do not sell your data and do not use it for advertising.

Retention and deletion

We keep your account and ventures for as long as your account exists. There is no self-service delete button yet: to delete a venture or your whole account, contact us (below) and we will confirm once it is done. Deleting a venture removes everything attached to it, including its results, evidence, surveys, survey responses and investor rooms. Backups held by our database provider expire on their own schedule.

Your choices

You can ask for a copy of your data, a correction, or deletion at any time. Investor-room visitors and survey respondents can ask the founder who shared the link, or contact us.

Contact

[Contact address to be added before launch.] See also the Terms of Service.