At AruList, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect data.
Last updated: December 2025
When you sign in using Google OAuth, we access the following data:
Your name, email address, and profile picture from your Google account. This data is used to create and manage your AruList account.
Your Google email address is used for account verification and communication about your listings and account activity.
Your name from your Google account is used to display your profile on AruList.
Your Google profile picture may be used as your profile picture on AruList (optional).
We use your data solely for the following purposes:
Creating and managing your AruList account, including authentication and authorization.
Providing our marketplace services, including posting and managing listings, saving favorites, and communicating with other users.
Sending important notifications about your account, listings, and service updates (essential communications only).
Analyzing usage patterns to improve our service (anonymized data where possible).
We only share your data in the following situations:
We use Supabase to securely store user data and handle authentication. Supabase is a GDPR-compliant cloud database service with strict security measures.
We NEVER sell, rent, or share your personal data with third parties for marketing or commercial purposes.
We may share data if legally required or to protect our rights, but only in accordance with applicable laws.
We only work with trusted service providers (such as Supabase) who are contractually obligated to protect your data and only use it for the services we provide.
We take the security of your data very seriously:
All data is stored encrypted in Supabase, a secure cloud database service with end-to-end encryption.
All data transfer occurs over secure HTTPS connections to prevent data interception.
Only authorized personnel have access to user data, and only for support and maintenance purposes.
We conduct regular security audits and work with our service providers to ensure security.
Your rights regarding your data:
We retain your data as long as your account is active. If you delete your account, your personal data will be permanently deleted within 30 days, unless we are legally required to retain certain data longer.
You can delete your account at any time through your profile settings. This will remove all personal data associated with your account.
You can request deletion of your data at any time by contacting us at mail@arulist.com. We will process your request within 30 days.
You have the right to receive a copy of all your data. Contact us at mail@arulist.com to request an export of your data.
For questions about this privacy policy, please contact us at mail@arulist.com