This analysis describes what Supabase's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
For EU, UK, and Swiss users, transferring personal data to the US requires specific legal mechanisms under GDPR, and Supabase's acknowledgment that US protections may be weaker is a significant disclosure that warrants verification of transfer safeguards.
Supabase collects a range of personal data including account registration details, usage behavior, device information, and cookie-based tracking data, and may share this with business partners and marketing vendors for advertising purposes. End users of applications built on Supabase are not covered by this policy at all and are directed to seek privacy information from the specific customer whose application they use, which may reduce transparency for those individuals. You can exercise data rights including access, correction, deletion, and marketing opt-out by contacting privacy@supabase.com or adjusting cookie preferences via the Privacy Settings button on the site.
How other platforms handle this
If you are located in the European Economic Area, the United Kingdom, or Switzerland, please be aware that we may transfer your personal information to countries outside of these regions, including to the United States, where data protection laws may not provide the same level of protection as those...
You will provide personal information directly to our website in the United States. We may also transfer personal information to our partners and service providers in the United States and other jurisdictions. Please note that such jurisdictions may not provide the same protections as the data prote...
ClickUp is based in the United States and the information we collect is governed by U.S. law. By accessing or using our Services or otherwise providing information to us, you consent to the processing and transfer of information in and to the U.S. and other countries, where you may not have the same...
Monitoring
Supabase has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Note for International Visitors: Personal information may be transferred to, stored and processed in a country other than the one in which it was collected. For example, the Sites are primarily hosted in and provided from the United States. Please note the country to which personal data is transferred may not provide the same level of protection for personal information as the country from which it was transferred.— Excerpt from Supabase's Supabase Privacy Policy
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
For EU, UK, and Swiss users, transferring personal data to the US requires specific legal mechanisms under GDPR, and Supabase's acknowledgment that US protections may be weaker is a significant disclosure that warrants verification of transfer safeguards.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Supabase.