Yatoon Connect: Privacy Policy and Terms of Service

https://yatoon.com/privacy-policy/Oct 16, 2026 · @YoYo Nails

How to use this draft: publish Part 1 as a page at yatoon.com/privacy-policy/ and Part 2 as yatoon.com/terms-of-service/. Replace the three items in [square brackets] first. Then send me both page URLs and I will add them to the Pro readme. This is a plain-language template, not legal advice.

Part 1: Privacy Policy

Last updated: October 16, 2026

Who we are

This policy covers "Yatoon Connect", the connection service at yatoon.com, operated by [Your legal or business name] ("Yatoon", "we", "us"). Contact: [support email address].

What this policy covers

Yatoon Connect is the one-click "Connect with Square" service used by Yatoon Restaurant Menu Pro and Yatoon Booking Pro. Square only sends people back to web addresses registered in the Square application, and every customer site has a different address. Yatoon Connect is that single registered address: it passes the browser to Square and hands Square's one-time authorization code back to the requesting WordPress site.

The Yatoon plugins themselves store their data (menus, orders, reservations, customer accounts) in the WordPress site that runs them. That data stays on the site owner's server and is not sent to yatoon.com. The site owner is responsible for how that data is used.

What we receive when you click "Connect with Square"

The WordPress site address, site name and the plugin name and version.
A callback address on that site, a one-time security challenge, the Square environment (sandbox or production) and the set of Square permissions requested.
The IP address of the browser making the request (used for abuse prevention and in standard server logs).
Square's one-time authorization code, which passes through our server in the redirect back to your site. We do not use it, keep it or exchange it. Your site completes the exchange with Square directly.

What we never receive or store

Customer, order, booking or payment card data.
Your Square access token, refresh token or secret keys. These are created and stored only on your own site.
Your Square or WordPress passwords.

How long we keep it

Connection state needed to finish the sign-in: 10 minutes.
Abuse-prevention counter (based on a one-way hash of the IP address): 10 minutes.
A short status log showing the time, the site's domain name and the event for the 15 most recent connection attempts. Older entries are overwritten automatically.
Standard web server logs (including IP addresses) are kept by our hosting provider under its normal retention schedule.

Why we use it

Only to complete the Square connection you asked for, to protect the service from abuse, and to troubleshoot connection problems. We do not sell personal information, use it for advertising or build profiles.

Who we share it with

Square, which receives our application ID, the permissions requested and a one-time state value so it can ask you to approve access. Square's own terms and privacy policy apply: https://squareup.com/legal/general and https://squareup.com/legal/privacy
Our hosting provider, which processes server logs on our behalf.

We may disclose information if the law requires it.

Your choices

Using Connect is optional. You can enter Square credentials manually in the plugin settings instead. To stop the connection, choose Disconnect in the plugin settings and revoke the app under Apps in your Square Dashboard.

Your rights

Depending on where you live, you may have the right to access, correct or delete personal information we hold about you. Because we keep very little, and for a very short time, there is usually nothing to delete. Email [support email address] and we will respond.

Security

Connection requests are verified against the requesting site, protected with PKCE and single-use state values, and rate limited. No system is perfectly secure, but we limit what we collect to reduce risk.

Changes

We may update this policy and will change the date above when we do.

Part 2: Terms of Service

Last updated: October 16, 2026

1. The service

Yatoon Connect ("the Service") lets you connect a Yatoon Pro plugin on your WordPress site to your own Square account. It is a convenience: you can instead enter Square credentials manually in the plugin.

2. Who may use it

You must be authorized to manage the WordPress site and the Square account you connect, and you must use a licensed Yatoon Pro plugin. You must follow Square's terms, which govern your Square account and the payments you take.

3. Acceptable use

Do not misuse the Service. That includes attempting to disrupt it, bypass its checks or rate limits, connect a site or Square account you do not control, or use it with software other than the official Yatoon Pro plugins.

4. Your responsibilities

You are responsible for your site, your Square account, the permissions you approve, and the orders and payments you process. Review the permissions Square shows you before approving.

5. Availability

The Service is provided "as is" and "as available". We may change, suspend or stop it at any time. If it is unavailable, you can use manual Square credentials.

6. Third parties

Square and WordPress are independent of Yatoon. We are not responsible for their services, outages or policies.

7. Limit of liability

To the fullest extent permitted by law, Yatoon is not liable for indirect or consequential losses, lost profits or lost sales arising from use of the Service, and our total liability for any claim is limited to the amount you paid for the Yatoon plugin in the 12 months before the claim. Nothing in these terms limits liability that cannot legally be limited.

8. Ending use

You can stop using the Service at any time by disconnecting in the plugin settings. We may suspend access for misuse or security reasons.

9. Changes and governing law

We may update these terms and will change the date above. Continued use means you accept the update. These terms are governed by the laws of [your state or country], and disputes will be handled in its courts.

10. Contact

Yatoonsale@gmail.com