Square · Square Privacy Notice · View original document ↗

Sensitive Personal Information Collection and Use

High severity Rare · 2 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Square recorded 7 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Square Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Square collects sensitive personal information such as financial account details, government IDs, and precise geolocation, and uses it for service delivery and compliance purposes.

This analysis describes what Square's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Collection of sensitive data like government IDs and financial account numbers increases privacy risk, and under California law you have the right to limit how this data is used.

Consumer impact (what this means for users)

Square collects extensive personal and financial data, including transaction history, device identifiers, and inferred characteristics, and shares this with affiliates, service providers, and advertising partners. Your financial and behavioral data may be used for targeted advertising and cross-context behavioral profiling, which can feel intrusive and may affect what products and services you are shown. You can opt out of the sale or sharing of your personal information for targeted advertising by visiting Square's privacy preferences page or submitting a request through their privacy portal.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    California residents can submit a request to limit the use of sensitive personal information by visiting Square's privacy portal and selecting the relevant option.

Cross-platform context

See how other platforms handle Sensitive Personal Information Collection and Use and similar clauses.

Compare across platforms →

Monitoring

Square has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

CPRA establishes a separate right to limit use of sensitive personal information, requiring businesses to provide a 'Limit the Use of My Sensitive Personal Information' link; compliance teams should verify Square's consent mechanisms and data minimization practices align with CPRA and sector-specific requirements under GLBA.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • CFPB
    The CFPB has jurisdiction over collection and use of sensitive financial data by payment processors and financial service companies.
    File a complaint →

Provision details

Document information
Document
Square Privacy Notice
Entity
Square
Document last updated
May 5, 2026
Tracking information
First tracked
March 20, 2026
Last verified
March 20, 2026
Record ID
CA-P-00363005
Document ID
CA-D-00363
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
9d83d848d882a5e950e856f1056ea2d1d77853b0de3d7e35096e101db5f72361
Analysis generated
March 20, 2026 05:41 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Square
Document: Square Privacy Notice
Record ID: CA-P-00363005
Captured: 2026-03-20 05:41:13 UTC
SHA-256: 9d83d848d882a5e9…
URL: https://conductatlas.com/platform/square/square-privacy-notice/sensitive-personal-information-collection-and-use/
Accessed: June 10, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Square's Sensitive Personal Information Collection and Use clause do?

Collection of sensitive data like government IDs and financial account numbers increases privacy risk, and under California law you have the right to limit how this data is used.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.

Is ConductAtlas affiliated with Square?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Square.