Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Square collects sensitive personal information such as financial account details, government IDs, and precise geolocation, and uses it for service delivery and compliance purposes.
This analysis describes what Square's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Collection of sensitive data like government IDs and financial account numbers increases privacy risk, and under California law you have the right to limit how this data is used.
Cross-platform context
See how other platforms handle Sensitive Personal Information Collection and Use and similar clauses.
Compare across platforms →Monitoring
Square has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
CPRA establishes a separate right to limit use of sensitive personal information, requiring businesses to provide a 'Limit the Use of My Sensitive Personal Information' link; compliance teams should verify Square's consent mechanisms and data minimization practices align with CPRA and sector-specific requirements under GLBA.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Collection of sensitive data like government IDs and financial account numbers increases privacy risk, and under California law you have the right to limit how this data is used.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Square.