Legal
Privacy policy
This is a planning demo — there is no real data collection to disclose. A production build would need a real policy covering what's collected, how it's stored, and users' rights over it (see docs/17-security-and-multitenancy.md).
What's stored in this demo
A real Supabase Postgres database and Supabase Storage bucket, holding seed accounts, listings, uploaded photos, and whatever bookings/reviews you create while testing. There's no analytics or tracking — just the app's own data.
Login
Real email/password authentication (NextAuth, bcrypt-hashed passwords) — but this is still a demo, so don't reuse a password you use elsewhere.
Resetting data
Running the seed script wipes and recreates all demo data in the connected database. There's no persistence guarantee beyond that.