Effective August 15, 2026
Privacy policy.
This policy explains what SupraList collects, why it is used, and the controls available to people in the United States and Canada.
Information collected
Account information: email address, display name, market, seller type, optional Instagram handle, authentication records, and email preferences.
Listing information: vehicle details, location at the city/region level, VIN, photographs, description, price, moderation status, and review history. A seller can choose to hide part of the VIN from public display.
Communications: buyer name, buyer email, message content, reports, and delivery status. Seller email addresses are not displayed to buyers.
Technical information: security and delivery logs, browser information, approximate network information, and pseudonymous abuse-prevention identifiers. Payment information, if donations are enabled, is handled by the payment provider and is not stored by SupraList.
How information is used
Information is used to authenticate accounts; publish and moderate listings; save favorites and alerts; relay messages; send emails people requested; prevent fraud, spam, and abuse; troubleshoot the service; comply with law; and protect users and the marketplace.
Email choices and consent
The weekly Supra Dispatch is opt-in and is separate from listing-alert preferences. Consent time and unsubscribe time are recorded. Every weekly issue includes an unsubscribe mechanism, and preferences can also be changed from the account page. Service and security messages may still be sent when necessary to operate an account.
Service providers
SupraList uses service providers to operate the platform, including Supabase for authentication, database, and file storage; Vercel for hosting and delivery; and Resend for outbound email when activated. These providers process information on SupraList’s behalf under their own security and privacy terms.
Sharing
Public listings display the vehicle information, city and region, selected seller details, and photos a seller submits for publication. Personal information may also be disclosed to service providers, to comply with lawful requests, to investigate abuse, or as part of a business reorganization. SupraList does not sell personal information.
Retention and security
Information is retained only as long as reasonably necessary for the purposes above, including dispute, fraud-prevention, backup, and legal needs. Published, sold, rejected, and removed listings may have different retention periods. SupraList uses access controls, row-level database policies, private draft-photo access, encrypted transport, and restricted administrative roles. No online system can guarantee absolute security.
Your choices
You can update profile and email preferences from your account. You may request access, correction, export, or deletion of personal information, subject to identity verification and lawful retention requirements. Canadian users may also have rights under applicable federal or provincial privacy law.
Children and changes
SupraList is not directed to children under 16. This policy may be updated as the service changes; the effective date will be revised when it does.
Contact
Privacy requests and questions may be sent to privacy@supralist.co.