Bio Site
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Squarespace collects lots of usage and ad data, takes a license on your content, auto-renews.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, site activity, device IDs, payments, and sometimes location, ID photos, and government numbers.
Read the exact line
Privacy policy
“This includes IP addresses, preferences, web pages you visited prior to coming to our or our Customers’ sites, information about your browser, network or device”
Training
They use it to run the product, market to you, tailor ads, and improve the service.
Read the exact line
Privacy policy
“Learn about and analyze your interactions with our Services and third parties’ online services so we can tailor our advertising to what we think will interest you.”
Sharing
Vendors, ad partners, payment processors, and others in a sale of the business can get data.
Read the exact line
Privacy policy
“We use and share certain information with online advertising business partners.”
Kept
They keep it while your account is active and longer for legal, dispute, and “come back later” reasons.
Read the exact line
Privacy policy
“We retain your information for as long as your account is active or for as long as needed to provide you with the Services.”
Controls
You can edit or delete some data in your account, email privacy@, and use Your Privacy Choices for ads.
Read the exact line
Privacy policy
“You can access, update, change or delete personal information (or that of your End Users) in your account.”
Fine print
You give a license; they can suspend you; plans auto-renew.
Read the exact line
Terms of service
“you grant Squarespace (including our third party hosting providers acting on our behalf) a non-exclusive, worldwide, , , , , transferable right and license”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off ad sale/sharing
“Your Privacy Choices” link in the page footer, or enable Global Privacy Control
Delete your account
Follow the in-product support guide and/or email privacy@squarespace.com
Disable auto-renew or cancel paid plans
Via the Services or your mobile app store
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can keep using, changing, and sharing your uploads forever to run, improve, and promote the product, even after you leave.
Read the exact line
Terms of service
“you grant Squarespace (including our third party hosting providers acting on our behalf) a non-exclusive, worldwide, , , , , transferable right and license”
For example, a photo on your bio.site page could still be used in their marketing materials after you delete the site.
They can shut off your account or site at any time, in their judgment, and they say they may do it without notice.
Read the exact line
Terms of service
“we may terminate, suspend, restrict or disable your access to or use of parts or all of the Services”
For example, they could take down your live bio page without warning if they think you broke a rule.
If you cancel a paid plan, you usually do not get money back.
Read the exact line
Terms of service
“you won't be issued a refund except in our sole discretion, or if legally required.”
For example, canceling a yearly plan after a week typically means you still paid for the year.
If someone sues them because of your site or content, you may have to pay their legal bills.
Read the exact line
Terms of service
“you agree to and Squarespace and its affiliates and its and their directors, officers, employees and agents”
For example, if a visitor claims your page stole their photo, you could owe Squarespace’s lawyer fees.
A vendor can map your face from photos when they check your identity. Squarespace says it does not keep that scan.
Read the exact line
Privacy policy
“our vendors may create a biometric scan of your facial geometry based on photographs you provide in order to compare them”
For example, unlocking a locked account might mean uploading a selfie that a vendor turns into a face map.
The mobile app can collect exact location if you allow it in settings.
Read the exact line
Privacy policy
“If you’re using one of our mobile applications, Site Usage Information could also include your precise location information if your mobile device settings authorize us to collect this information.”
For example, editing your bio.site from a phone could send GPS-level location.
They share usage and account-history style data so ads can follow you off their sites.
Read the exact line
Privacy policy
“We use and share certain information with online advertising business partners.”
For example, after you look at a paid plan, you might see Squarespace ads on social media.
You must be 16 or older; they rely on you saying so.
Read the exact line
Terms of service
“The Services are not intended for and may not be used by children under the age of 16. By using the Services, you represent that you're at least 16.”
For example, a 15-year-old can still type that they are 16 and create an account.
In some US states you can turn off ad sharing with a footer link or GPC.
Read the exact line
Privacy policy
“If you would like to opt out of Squarespace's Sale or Sharing of your information with third parties for such purposes, you may do so by clicking on the “Your Privacy Choices” link”
For example, a California user can click Your Privacy Choices so hashed email is not used for ads.
Words to know
Legal words from the lines above, in plain English.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- biometric
- Measurements of your body that identify you, like your face, fingerprint or voice. For example, a selfie used to unlock the app or a voice recording matched to you.
- precise geolocation
- Your exact position, usually from GPS, often accurate to within a few metres. For example, an app can tell not just your city but which building you are in right now.
How we got here · grade F · score 31/100 · 15 of 15 policy answers backed by a verified quote · 4 not stated
What does the app collect beyond what it needs to work?
They collect account data plus usage, device IDs, browsing, optional precise location, payments, and sometimes government IDs and photos.
Does it record your voice, face or body, and what happens to that?
For identity checks, vendors may create a face-geometry scan from photos you upload. Squarespace says it does not store that biometric data.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They analyze use of their sites and third-party sites and share data with advertising partners to tailor ads.
Do they sell or share your data, and can you opt out?
They share identifiers and activity for cross-context ads and offer a Your Privacy Choices / GPC opt-out in covered US states.
What rights do they take over what you type and what the AI makes?
You keep ownership, but you grant a perpetual, irrevocable, sublicensable license to use your content to provide, improve, promote, and protect the service.
How long do they keep your data after you delete it, and can you delete it in the app?
You can delete in the account or email them, but they may delay deletion and keep data for law, disputes, and a “reasonable period” after you cancel.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
Not stated in the documents.
Is there a real age gate, and are teens protected?
You must be at least 16 and you represent that by using the service; under 18 may need a parent.
Will they tell you when the rules change, and is the policy specific?
Policies are dated. Terms say they will notify you if a change meaningfully reduces your rights. Privacy lists data types and purposes in detail.
Can they close your account without warning, and can you get your data out first?
They may terminate or disable access at any time in their discretion, and they reserve doing so without notice except where law forbids it.
If something goes wrong, who pays?
Services are as-is, liability is capped (often $20 or a year of fees), and you must indemnify them for claims about your content and sites.
Do subscriptions renew on their own, and can you get a refund?
Paid plans auto-renew until you cancel. Refunds are only in their discretion or if the law requires them. Fee changes get advance notice.
The privacy policy is 9,485 words at a college graduate level (Flesch reading ease 32.9); the terms are 10,467 words at a college graduate level.
