Square keeps your personal data for as long as it needs to provide services and meet legal requirements, and may retain it longer for regulatory or tax reasons.
This analysis describes what Square's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Open-ended retention language means your data could be held indefinitely under broad regulatory compliance justifications, limiting the practical effectiveness of deletion requests.
Interpretive note: The policy does not specify concrete retention periods for individual data categories, making it difficult to assess whether retention practices comply with GDPR's storage limitation principle or CPRA requirements in specific contexts.
Previous version 'Data Retention After Account Closure' had empty excerpt; current version provides detailed excerpt clarifying retention duration based on service necessity and legal obligations without specific mention of post-closure scenarios.
View full change record →Even after you stop using Square or request deletion of your data, certain records may be retained for extended periods based on legal, tax, or regulatory obligations, which is a standard practice in financial services but reduces the completeness of deletion outcomes.
How other platforms handle this
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
It also means we are unable to provide any information about messages in your Revolut Messenger even if you ask us for it.
"We retain your personal information for as long as necessary to provide you with our Services and to comply with our legal obligations. In some circumstances, we may retain your personal information for longer periods of time, for instance where we are required to do so in accordance with legal, regulatory, tax, or accounting requirements.Excerpt from Square's Privacy Notice
REGULATORY LANDSCAPE: Data retention in the financial services context is shaped by Bank Secrecy Act and AML requirements (which may mandate multi-year retention of transaction records), IRS requirements, state financial regulations, and GDPR's storage limitation …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Open-ended retention language means your data could be held indefinitely under broad regulatory compliance justifications, limiting the practical effectiveness of deletion requests.
Even after you stop using Square or request deletion of your data, certain records may be retained for extended periods based on legal, tax, or regulatory obligations, which is a standard practice in financial services but reduces the completeness of deletion outcomes.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Square.