Accounts use Supabase authentication. Merchant features require a separate business profile and approval.