Privacy policy clauses for Square
Square is a fintech payment processing platform that enables businesses to accept credit card payments, manage point-of-sale transactions, and process online orders. Websites integrate Square to securely handle customer payment information and transaction processing through tokenized payment methods.
Free scan · No signup · Results in 60 seconds
What data Square collects
Your privacy policy must disclose each of the following data types when you use Square.
When does Square trigger privacy obligations?
Installation triggers immediate data collection
The moment you integrate Square into your checkout flow or POS system, you begin collecting and processing payment card details (tokenized), transaction amounts, customer contact information, and order data. This triggers obligations immediately—before a single transaction completes.
Regulated financial data flow
Square operates as a payment processor under PCI-DSS Level 1 compliance, meaning you are jointly responsible for the security of cardholder data. This is not discretionary: any site accepting card payments is subject to PCI Data Security Standard (PCI-DSS) requirements, enforced by card networks (Visa, Mastercard) and acquiring banks. Additionally, transaction data is subject to
