Privacy Policy

Last updated: February 13, 2026

Introduction

suparbase is an open-source tool designed to help you synchronize database schemas and data between Supabase environments. We are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we handle information when you use our service.

Data We Collect

Database Connection Information

When you add a database connection, we encrypt and store your database connection strings using AES-256-GCM encryption. These credentials are stored securely and are only used to establish connections for synchronization purposes.

Account Information

If you create an account, we collect your email address and authentication information through Supabase Auth. This information is used solely for account management and authentication.

Usage Data

We may collect information about how you use the service, including sync job history, connection activity, and error logs. This data helps us improve the service and troubleshoot issues.

How We Use Your Data

  • To provide and maintain our service
  • To process synchronization requests between your databases
  • To notify you about changes to our service
  • To provide customer support
  • To monitor and analyze usage patterns

Data Security

We implement industry-standard security measures to protect your data:

  • Encryption: All database connection strings are encrypted using AES-256-GCM before storage
  • Secure Storage: Data is stored in Supabase with Row Level Security (RLS) policies
  • No Data Transmission: We never transmit your database data through our servers; all synchronization happens directly between your databases
  • Access Control: Only you have access to your connections and sync jobs

Data Retention

We retain your data for as long as your account is active or as needed to provide our services. You can delete your connections and sync jobs at any time. When you delete your account, all associated data is permanently removed from our systems.

Your Rights

Under GDPR and other privacy laws, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Data portability

Third-Party Services

We use the following third-party services:

Supabase

We use Supabase for authentication and data storage. Supabase's privacy policy applies to data stored in their systems.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us through our GitHub repository or the contact information provided on our website.