Square Away ("Square Away," "we," "us") is operated by Square Away LLC, a Michigan limited liability company, 3464 Hazelton Ave, Rochester Hills, MI 48307. You can reach us at [email protected]. This policy explains what we collect when you use Square Away, why, and what say you have over it. If something here doesn't match what we actually do, tell us. We'd rather fix the page than the practice.
What we collect
Account and shop information. Your name, email, phone, business name, and anything else you enter while setting up your organization.
Customer and project data. Contacts, projects, estimates, proposals, invoices, notes, photos, drawings, and messages you or your clients enter into Square Away. This belongs to your shop; we store and process it on your behalf.
Payment information. Card and bank details are handled directly by Stripe, our payment processor. We never see or store full card numbers. We keep records of transaction amounts, dates, and status.
Communications. SMS messages sent through Square Away are handled via Twilio. Emails sent through Square Away (proposals, invoices, campaigns) are handled via Amazon Simple Email Service (Amazon SES).
Connected accounts. If you connect Google Calendar, Google Drive, Google Photos, Facebook or Instagram, another social account, QuickBooks, or another third-party service, we access only what's needed for the feature you turned on, using the permissions you grant during that connection. Each of those has its own section below.
AI-assisted features. When you use the in-app assistant, generate a caption, price a job from a cut list, or use the Claude/ChatGPT connector, the relevant request is sent to our AI providers (Anthropic, maker of Claude, and/or OpenAI, and fal.ai for image/video generation) to produce a response. We don't let those providers use your data to train their own models, and we don't use your data to train AI models either. Data we receive from Google (Calendar, Drive, Photos, or any other Google API) and from QuickBooks is never used to train any AI model, and it is not sent to an AI provider unless you explicitly include it yourself in a request to one of our AI features.
Usage data. Standard technical logs (IP address, browser, pages visited, timestamps) for security, debugging, and improving the product.
How we use it
- To run the features you're actually using: quoting, invoicing, scheduling, messaging, and the AI assistant.
- To process payments and calculate the flat per-payment fee described in our pricing.
- To send you account, billing, and product update emails. Marketing emails are opt-in and every one includes an unsubscribe link.
- To fix bugs, secure the platform, and understand what to build next.
We do not sell your data, or your customers' data, to anyone. Ever.
Who we share it with
Only the vendors that make the product work, each bound by their own data protection terms: Stripe (payments), Twilio (SMS), Amazon Simple Email Service (email), Anthropic and OpenAI (AI processing), fal.ai (AI image/video generation), Post for Me (publishing to the social accounts you connect), Amazon Web Services (file storage and hosting), and Neon (our database provider). If you explicitly connect Google, Meta, a social account, or QuickBooks, we share the minimum data those integrations need to function.
We'll also share data if we're legally required to, like for a subpoena or court order, and we'll tell you first unless we're barred from doing so.
Google Calendar
Square Away lets you connect your Google account so your booking page and your in-app calendar work off your real schedule. Connecting is optional, and nothing is read from your Google account until you click Connect Google Calendar in Settings and approve it on Google's screen.
What we access. When you connect, we can see the list of calendars on your Google account (their names and colors), when you're busy or free on those calendars, and the events on them (title, date and time, and a link back to the event in Google). We can also add, update, and remove events on your primary calendar.
Why we access it.
- Your booking page only offers times you're actually free. We check your busy times across your calendars (we skip the public holidays calendar) before a client ever sees a slot. Clients only ever see open times, never what's on your calendar.
- When a client books, we put the appointment on your Google Calendar with the client's name and contact details, and a Google Meet link if it's a video call.
- Job due dates, task due dates, and meetings you create in Square Away show up on your Google Calendar, and we update or remove those events when things change. We only change events Square Away created. We never edit or delete anything you put on your calendar yourself.
- Your Google events show on the Calendar page inside Square Away next to your jobs and tasks. Anyone on your shop's team in Square Away can see that calendar, so they'll see those events too.
How we store and protect it. We store the access keys Google gives us so the connection keeps working. The keys themselves are encrypted, they sit in our database, which is also encrypted at rest, and only our systems use them. We do not save the contents of your Google Calendar. Your events and busy times are read fresh when you need them and are not kept afterward. The only thing we keep is the ID of each event Square Away created for you, so we can update or remove it later.
Who we share it with. Nobody. We don't sell Google data, ever. We don't use it for advertising, we don't hand it to data brokers, and we don't send it to our AI providers or use it to train any AI model. People at Square Away don't look at your Google data unless you ask us to for support, we need to for security, or the law requires it.
Keeping it and deleting it. We keep the connection until you disconnect. Click Disconnect in Settings > Calendar and we tell Google to cancel our access and delete your stored Google keys right away. You can also remove Square Away anytime from your Google Account at myaccount.google.com/connections. Events we already put on your calendar stay there, since they're yours now, and you can delete them in Google Calendar like any other event. If you close your Square Away account, your Google connection is deleted along with the rest of your data.
Google Drive
Square Away lets you bring files from your Google Drive into your shop's Library with Add from Google Drive. Connecting is optional, and nothing is read from your Drive until you click Add from Google Drive, approve it on Google's screen, and pick files.
What we access. We ask Google for one permission only, called drive.file. It means Square Away can open only the files you pick yourself in Google's file picker. We can't see, list, or search anything else in your Drive, and we don't create, change, or delete anything in your Drive.
Why we access it. Each file you pick is downloaded once and copied into your shop's Library in Square Away, so you can use it in Square Away like any other upload. Anyone on your shop's team in Square Away can see files in your shop's Library.
How we store and protect it. The copied files are stored with the rest of your shop's files in Square Away (our database and Amazon Web Services file storage). We don't keep a link back to the file in your Drive. We store the access keys Google gives us so the connection keeps working. Those keys are encrypted, they sit in our database, which is also encrypted at rest, and only our systems use them.
Who we share it with. Nobody, beyond the storage providers listed above that hold your shop's files. We don't sell Google data, use it for advertising, hand it to data brokers, or use it to train any AI model, and we don't send it to our AI providers unless you explicitly include a file in a request to one of our AI features yourself. People at Square Away don't look at your Google data unless you ask us to for support, we need to for security, or the law requires it.
Disconnecting. Click Disconnect under Google Drive in the Library and we delete your stored Drive keys right away. If you don't also have Google Calendar connected, we tell Google to cancel our access too. If you do, Google treats Calendar and Drive as one connection to Square Away, so we leave that in place to keep your calendar working. You can remove all of Square Away's Google access anytime at myaccount.google.com/connections. Files you already copied into the Library stay there until you delete them. If you close your Square Away account, your Google connection is deleted along with the rest of your data.
Google Photos
If you choose Add from Google Photos in the Library, Square Away uses Google's Photos Picker. You pick the photos in Google's own window, and Square Away receives only the photos you select. We can't see or browse the rest of your Google Photos library.
The photos you select are copied into your shop's Library and stored the same way as any other Library file. We don't sell them, use them for advertising, or use them to train any AI model. Photos you already copied stay in the Library until you delete them, and you can remove Square Away's access to your Google account anytime at myaccount.google.com/connections.
Google API Services User Data Policy
Square Away's use and transfer to any other app of information received from Google APIs, including Google Calendar, Google Drive, Google Photos, and any other Google API, will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: we use Google data only to provide the features you turned on, we don't transfer it to anyone except as needed to run those features, for security, or to comply with the law, we never use it for advertising, and we never use it to train AI models.
Social posting (Facebook, Instagram, TikTok, YouTube, LinkedIn, X)
Square Away lets you post to your shop's social accounts from inside the app. Connecting is optional.
What we access and why. When you connect Facebook, Instagram, TikTok, YouTube, LinkedIn, or X in Settings > Social posting, you sign in on that network's own screen, and your posts are published through our posting provider, Post for Me. Square Away uses the connection to publish and schedule the posts you create, and to show you how those posts are doing (views, likes, comments, shares, and saves).
What we store. The connected account's name and ID, the posts you create (captions, photos, and videos), their schedules, and the post numbers above. We never see or store your social account passwords. The sign-in keys for each network are held by Post for Me, not in Square Away's database.
Disconnecting. Click Disconnect next to the account in Settings > Social posting and we tell Post for Me to disconnect it. You can also remove access from each network's own app settings.
Facebook Lead Ads and Meta
Lead Ads. If you connect a Facebook Page in Settings > Integrations, Square Away receives the leads submitted through that Page's own Lead Ads forms and adds each one as a contact, with a starter project, in your shop's account only. We ask Meta for three permissions: to list the Pages you manage (so you can pick one), to subscribe that Page to new-lead notifications, and to read the leads it receives. Square Away never creates, edits, or runs ads on your behalf.
What we store. The connected Page's name and ID, a Page access key from Meta (stored in our database, which is encrypted at rest), and each lead's answers exactly as Meta sent them, along with the form and ad name, linked to the contact it created.
Comments and direct messages. When automated replies to Facebook or Instagram comments and direct messages are available and you turn them on, Square Away uses those comments and messages only to send your shop's own automated reply. We don't use them for anything else.
Disconnecting and deleting your Meta data. Click Disconnect next to Meta Lead Ads in Settings > Integrations and we unsubscribe your Page and delete the stored Page access key. You can also remove Square Away from your Facebook account under Settings & privacy > Settings > Business integrations (or Apps and websites). Leads already added become contacts in your shop's account, which you can delete anytime. To have us delete all data we received from Meta, including the stored lead records, email [email protected] from your account email and we'll delete it and confirm when it's done.
QuickBooks
Square Away can send your client payments to QuickBooks Online so your books match what you've been paid. Connecting is optional, and you do it in Settings > Integrations.
What we access and why. We ask Intuit for the Accounting permission only. Each time a client pays an invoice through Square Away, we write one sales receipt for that payment into your connected QuickBooks company. To do that we look up the matching customer by name, or create one with your client's name, email, and phone, and we use one service item and one income account in your company for the receipt lines. We also read your company name once, to show you which company is connected. We don't read or import your other QuickBooks data.
How we store and protect it. We store your QuickBooks company ID and name, the access keys Intuit gives us, and the ID of each sales receipt we create. The keys are encrypted, and they sit in our database, which is also encrypted at rest.
Disconnecting. Click Disconnect next to QuickBooks in Settings > Integrations and we tell Intuit to revoke our access and delete your stored keys. Sales receipts already in QuickBooks stay there, since they're part of your books.
The Claude / ChatGPT connector
If you connect Square Away to Claude or ChatGPT, you authorize that specific AI assistant, using your own AI subscription, to read data from your Square Away account on your behalf. Right now that's limited to your contacts, pipeline, and project details. It cannot create or change anything. Every request is tied to your logged-in account and only ever returns your own shop's data, never another customer's. You can revoke this access at any time from Settings, or from the connector's own settings in Claude or ChatGPT.
Data retention
We keep your data for as long as your account is active. If you close your account, we delete your shop's data within 90 days, except where we're required to keep financial records longer for tax or legal reasons.
Your rights
You can access, correct, export, or delete your data at any time from within Square Away, or by emailing us. If you're in a jurisdiction with specific data rights (like the GDPR or CCPA), we honor those rights for everyone, not just where legally required.
Security
Data is encrypted in transit and at rest. Access to production data is limited to the people who need it to operate the service. No system is unbreakable. If we ever have a breach that affects your data, we'll tell you promptly.
Children's privacy
Square Away is a business tool. It's not directed at children, and we don't knowingly collect data from anyone under 18.
Changes to this policy
If we make a material change, we'll email account owners before it takes effect. The "last updated" date at the top always reflects the current version.
Contact
Questions about this policy or your data: [email protected], or by mail at Square Away LLC, 3464 Hazelton Ave, Rochester Hills, MI 48307.