This analysis describes what Squarespace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
It allocates legal compliance responsibility away from Squarespace and onto Customers for data they control, which affects liability exposure.
The updated policy establishes two separate opt-in categories for SMS communications: optional transactional SMS (for account notifications and two-factor authentication) and optional marketing SMS (for promotional messages). The policy explicitly states it will not sell, share, or disclose phone numbers to third parties for their marketing purposes. For users with financial accounts, the policy now explicitly covers Balance Services and Capital Services in addition to Payments Services, and identity verification procedures are clarified to include bank statements and specific triggering scenarios such as account recovery, ownership disputes, or suspicious activity detection. You can opt in or out of each SMS category independently, and two-factor authentication can be used without providing a phone number.
View change record →If you are a Squarespace Customer, you—not Squarespace—are responsible for ensuring your data practices on the platform comply with law.
How other platforms handle this
We may process your Data where we or a third party have a legitimate interest in doing so...we have a legitimate interest in using your Data for product development and internal analytics purposes, as well as to ensure the safety, security and performance of our Services.
We are not responsible for any information that you agree to share with third parties in connection with Third Party Content or Third Party Services.
This warranty will not apply if the error or non-conformance was caused by misuse of the Platform Services, modifications to the Platform Services by Customer or any third party, or third-party hardware, software, or services...
"Our Customers are responsible for ensuring that their collection and processing of Customer Controlled Information complies with applicable law.Excerpt from Squarespace's Privacy Policy
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
It allocates legal compliance responsibility away from Squarespace and onto Customers for data they control, which affects liability exposure.
If you are a Squarespace Customer, you—not Squarespace—are responsible for ensuring your data practices on the platform comply with law.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Squarespace.