Privacy policy clauses for Lemon Squeezy
Lemon Squeezy is a merchant of record platform that processes payments and subscriptions for SaaS and digital products. Websites use it to handle payment collection, tax compliance, and invoice generation without directly processing credit cards themselves.
Free scan · No signup · Results in 60 seconds
What data Lemon Squeezy collects
Your privacy policy must disclose each of the following data types when you use Lemon Squeezy.
When does Lemon Squeezy trigger privacy obligations?
Lemon Squeezy integration triggers privacy obligations the moment you embed its payment form or checkout on your site or app, because customer email, billing address, payment method details, and subscription data immediately flow to Lemon Squeezy's servers in the United States.
GDPR (if you serve EU customers): You become a joint data controller with Lemon Squeezy for payment and customer data. GDPR Article 13 requires you to provide a privacy notice disclosing Lemon Squeezy as a processor *before* collecting data. You must have a Data Processing Agreement (DPA) in place with Lemon Squeezy covering Standard Contractual Clauses (SCCs) or equivalent adequacy mechanism, as the US has no adequacy finding post-*Schrems II*. This is mandatory, not optional.
CCPA/CPRA (California customers):
