This analysis describes what Supabase's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
How other platforms handle this
At the end of the retention period, personal information will be deleted, destroyed, or deidentified.
We will promptly destroy personal information at the end of the retention period, as described above. When we destroy personal information, we do so in a way that prevents that information from being restored or reconstructed.
We will retain your Personal Information for as long as we need it to provide you with access to our Services or to fulfill the purposes for which it was collected...
"Where we are processing personal information based on our legitimate interests, we generally will retain such information for a reasonable period of time based on the particular interest...Excerpt from Supabase's Privacy Policy
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “Where we are processing personal information based on our legitimate interests, we generally will retain such information for a reasonable period of time based on the particular interest...”
ConductAtlas has identified this type of provision across 268 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Supabase.