Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is the legal agreement that governs your use of Supabase's database and backend cloud platform, covering everything from how you can use the service to what happens when disputes arise. The most important thing to know is that the agreement includes mandatory arbitration and a class action waiver, meaning disputes must generally be resolved individually through arbitration rather than in court, unless you opt out within 30 days of your first acceptance. If you want to preserve your right to sue in court or join a class action, you should send a written opt-out notice to legal@supabase.io within 30 days of first accepting these terms.
This Agreement governs access to and use of Supabase's proprietary hosted cloud services platform, constituting a binding contract between the customer and Supabase Pte. Ltd., a Singapore-incorporated entity, effective upon click-through acceptance or service access. The agreement states that customers receive a non-exclusive, non-transferable, non-sublicensable license to the services for internal business purposes only, while Supabase retains all intellectual property rights including in Aggregated Data derived from customer use; the terms also authorize Supabase to suspend services without prior notice under defined circumstances including security threats, illegal activity, or payment failures. Notably, the agreement includes a mandatory individual arbitration clause and class action/jury trial waiver applicable to all disputes, with an opt-out mechanism, and a broad competitive use restriction prohibiting use of Supabase IP for competitive analysis or development of competing products; the enforceability of the arbitration clause and class action waiver may be constrained under certain jurisdictions, including EU member states and some US state courts, and does not automatically override applicable consumer protection law. The agreement engages GDPR and other data privacy frameworks through its Personal Information and Aggregated Data definitions and its data processing representations; customers operating under GDPR, CCPA, or sector-specific regulations should evaluate whether Supabase's use of Aggregated Data derived from customer data and the DPA referenced in the agreement satisfy their upstream compliance obligations. Customers subject to Singapore law as governing law should note that Section 13 dispute resolution provisions are stated to apply to the fullest extent permitted by applicable law, which may limit enforceability outside the US context.
Institutional analysis available with Professional
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Start Professional free trial1 important change detected
2 versions captured · Last updated: May 2026
Monitoring
Supabase has updated this document before.
Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Professional Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Professional free trialCross-platform context
See how other platforms handle Aggregated Data Commercialization and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.