Understand Square's privacy and security measures
About Square's privacy and security measures
Square respects your privacy, and works hard to protect your personal information.
Square's comprehensive security system protects both merchants and their customers through encryption, industry-standard security practices, and strict privacy policies. This system includes data protection measures, PCI compliance, and dedicated security monitoring.
Before you begin
You must be at least 18 years old in order to create an account with Square.
Ensure you’ve reviewed the Privacy Notice for Square Sellers and Website Visitors.
Understand privacy at Square
It’s important to understand how Square may collect, store, use, share and protect your personal information. You acknowledged the Privacy Notice when you created a Square account in order to use Square services.
Square users acknowledge the Privacy Notice when creating an account in order to use Square services. Square updated this notice to reflect important changes to how we collect, store, use and share your personal information, so you should check back from time to time to review any changes.
We update this notice to reflect important changes to how we collect, store, use and share your personal information, so you should check back from time to time to review any changes. Square may send you notifications about updates to the Privacy Policy if it’s determined those are required. Check the date at the top of the Privacy Notice to determine when the most recent update took place. In most cases, any changes to the notice will be immediately effective unless a different effective date is indicated.
Throughout the Privacy Notice, the Square website, software, and services are collectively referred to as the "Service." This Privacy Notice does not apply to information that’s collected by other means than your use of the Service (including offline) or from other sources.
Protection of minors
Protecting the privacy of minors is especially important. For that reason, Square does not knowingly collect or solicit personal information from anyone under the age of 13 or knowingly allow such persons to register with the Service. If you are under 13, please do not send any information about yourself to Square, including your name, address, telephone number, or email address. No one under age 13 is allowed to provide any personal information to or on Square.
In the event that we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, contact us.
Changes to the privacy policy
If Square changes the privacy notices, policies and procedures, the changes will be posted on the Square website to keep you aware of what information is collected, how it’s used and under what circumstances it may be disclosed. Changes to this Privacy Notice are effective once published, unless a different effective date is indicated.
Privacy for customers
We understand that your customers expect you to take care of their personal information, and we have designed our Services with those expectations in mind. The Privacy Notice for Square Sellers and Website Visitors describes how Square processes personal information from your customers when we process payments or provide other services on your behalf.
Security at Square
To protect Square account holders and their customers, all information submitted by customers is encrypted to Square servers, regardless of whether you're using a public or private WiFi connection or a data service on your phone (such as 4G, 5G or EDGE). Square complies with all required PCI standards and protects its systems with industry-leading technology and security controls, including:
Square performs data encryption within the card reader at the moment of swipe.
Square's software is developed using industry-standard security best practices.
Square's servers are monitored around the clock by dedicated security staff.
Square's employees act in accordance with security policies designed to keep your data safe.
Since Square adheres to PCI compliance we don't require account holders to validate PCI compliance. Merchants who use Square for all storage, processing, and transmission of payment card data do not need to validate PCI compliance for those transactions.
Square strives to provide a safe environment for both buyers and sellers. Please review the Square Payment Terms for items and services prohibited by Square.
Educational resources
Visit our Support Center and The Bottom Line to view articles that provide further privacy and security education, as well as other helpful information.
If you’ve spotted a system vulnerability, report it on bugcrowd.
Contact the Privacy Team
You can contact our Privacy Team at the below address with questions or concerns regarding our policy.
Block, Inc.
1955 Broadway, Suite 600
Oakland, CA 94612
You can also email the Privacy Team at privacy@squareup.com with any questions.