I’m building ReceiptHouse, a read-only integration where a Square seller authorizes access, and their customers separately opt in to save their own purchases to a personal ReceiptHouse account (for receipts, warranties, recall alerts, and so on).
For our pilot, we’ll delete all Square-sourced purchases when a seller revokes access, and keep Square data out of any AI features. Before we plan beyond the pilot, two questions:
-
After revocation: Does Section 3 of the Developer Terms require deleting purchases a customer has already saved to their own account with their separate consent? If there’s a way for those records to stay with the customer, such as specific disclosures or a separate agreement, what would it look like?
-
AI use: Section 7 prohibits using Square data to train or “otherwise enhance” AI. Does that also cover using an AI model only to answer a customer’s question about their own purchases, with their consent and a provider contract that prohibits training? Or is that a separate case?
I know a forum reply isn’t legal advice. A link to relevant guidance, or a pointer to the right team for written clarification, would be a big help.
Thanks!
Perry Somers, ReceiptHouse