Square Point of Sale: Payment

"Location data: The location of your device and in some circumstances includes precise geolocation data. Precise geolocation data, where you have given us consent, we may access the precise geolocation of your devices. We use your Geolocation data to determine whether we can provide you with Services and to customise our Services to your location."

Square collects precise geolocation data from user devices and uses it for service customization, fraud prevention, and regulatory compliance, which goes beyond basic payment processing needs.

"When you interact with the Services through your mobile phone, you can choose to let us access and upload your phone contacts information. Where additional verification is required and where you choose to share such information, photo identification, such as your passport or driver's license in combination with a photograph facial scan and biometrics extracted from such image."

Square requests access to phone contacts and collects biometric data including facial scans, going beyond what basic payment processing requires.

"Our analytics partners help us with our online services, such as Google Analytics, Facebook, BugSnag and Crashlytics. We may disclose your site-use information (including IP address) to these analytics providers, and other service providers who use the information to help us figure out how you and others use our online services."

Square shares user data with a wide range of third parties including Google Analytics, Facebook, crash reporting services, identity verification providers, financial partners, and advertising networks.

"These third party ad services track your online activities over time and across multiple websites by collecting your information through automated technologies, including third-party cookies, web server logs, and web beacons. The ad services use this information to show you Square ads that may be tailored to your individual interests."

Square enables third-party advertising partners to track users across multiple websites and over time to build interest profiles for targeted advertising.

"We store your information for as long as is necessary for the purposes identified in this Privacy Notice, including to provide our Services, to comply with legal obligations, to enforce and prevent violations of our Terms of Services, to protect against fraudulent activity, and to defend our legal rights, property and users. The retention periods for your information are determined on a case-by-case basis."

Square provides no specific retention timelines, instead using vague "case-by-case" criteria that allow indefinite retention, including after account deactivation for legal, security, or fraud reasons.

"We reserve the right to change this Privacy Notice from time to time, as may be required. We will provide you with reasonable prior notice of any material changes in how we use your information, including by email if you have provided one. If you disagree with these changes, you may cancel your account at any time."

Square can change privacy terms at will with only "reasonable prior notice," and the only recourse for disagreeing users is to cancel their account — continued use implies acceptance.