Information collected
When you submit a form, NPP receives the information you provide. Depending on the form, this may include your name, business name, email address, phone number, merchant ID, current payment provider, business needs, Square products or pricing options of interest, and notes. Referral forms also collect information about the referring merchant and the business being referred. Only submit another person's information when you are authorized to share it.
Signed-in agent forms may collect agent account details, referral attribution, merchant qualification details, and information used to administer agent access.
The site and its service providers also collect technical and activity information. This can include the page or link visited, referring page, date and time, browser and device information, IP address, user agent, advertising click identifiers, campaign and experiment identifiers, and events such as form submissions or outbound Square signup clicks.
For paid signup journeys, NPP may ask for the email address you plan to use with Square. Phone is optional. This information is used to connect the later Square signup report to the advertising visit when you affirmatively choose to continue.
How information is used
- To respond to your request.
- To prepare a Square hardware or service setup recommendation.
- To discuss payment-processing options and onboarding next steps.
- To review agent access requests and route merchant referrals.
- To operate, secure, troubleshoot, measure, and improve the site and its signup journeys.
- To attribute referrals, advertising, and signup activity and to maintain operational records.
- To reconcile consented paid-ad visits with signed-merchant records and report verified outcomes to advertising systems.
- To compare conversion performance between controlled site variants and detect duplicate, invalid, or test conversion records.
Service providers and connected systems
NPP uses Resend to deliver form notifications and related email. Form content and recipient information are provided to Resend as needed to deliver those messages.
NPP uses its NPP Titan AI operations system to receive and maintain certain referral, campaign, click-attribution, and signup-interest records. Those records may contain form details, pseudonymous journey or campaign identifiers, referral context, and technical information associated with a request or click.
For paid-signup matching, the website normalizes the submitted email and optional phone number on NPP's server. Titan receives only one-way SHA-256 and keyed HMAC fingerprints, consent metadata, and the related advertising and NPP click identifiers—not the plaintext email or phone number. Google may receive protected one-way hashes of the email and optional phone number to match the consented signup to an ad and measure conversions.
NPP may compare those protected fingerprints with contact details in the Square signup report available to NPP. A confirmed match can be recorded as a signed application attributed to the applicable advertising campaign. NPP may provide the protected SHA-256 contact fingerprints, advertising identifiers, and conversion details to Google as an offline or enhanced conversion. Advertising click identifiers are deterministic evidence when available; campaign parameters without a real click identifier are retained for analysis but are not treated as deterministic Google Ads credit.
When you follow a Square application or signup link, the destination is operated by Square. Attribution parameters such as campaign, advertising click, or NPP journey identifiers may be included in the link. Information you enter on Square's site is handled by Square under its own terms and privacy practices.
Analytics, advertising, and browser storage
This site uses Plausible Analytics to understand site use. It also uses Google Ads tags and the Reddit Pixel to measure advertising and record conversion events. These services may receive page and event data, technical request information, and campaign or advertising identifiers. Google and Reddit may use cookies, pixels, or similar technologies according to their own privacy practices.
NPPsquare.com also uses browser local storage to retain attribution information such as UTM parameters, ad click identifiers, campaign context, landing variants, pseudonymous campaign-recipient identifiers, and an NPP click identifier. This helps keep attribution attached as you move between pages and outbound signup links. You can clear this information through your browser settings.
After successful identity protection and storage, a paid Square handoff may also set a secure, HttpOnly, host-specific cookie containing only an opaque signed token. The cookie does not contain contact details or identity fingerprints. It lets the first-party handoff join the consented identity fingerprint to the same anonymous NPP click identifier. A genuinely new advertising click receives a new NPP click identifier and requires a new match.
NPP is testing the canonical nppsquare.com site and the start.nppsquare.com variant. Attribution records include the controlled host and variant so signed applications can be evaluated separately. NPP does not place an email address, phone number, protected identity fingerprint, or internal identity-capture identifier in Plausible events, Google browser-event URLs, or the Square handoff URL.
Retention and security
Retention periods vary by record and business need. NPP and its providers may retain information for as long as reasonably needed to respond to requests, administer referrals and accounts, measure performance, maintain business records, prevent abuse, resolve disputes, and meet applicable obligations.
NPP uses administrative and technical safeguards intended to protect information, but no internet transmission or storage system can be guaranteed to be completely secure.
First-party attribution tokens are currently configured to expire within 90 days. NPP may retain conversion evidence and audit records as needed to operate, reconcile, deduplicate, and document campaign reporting. If secure attribution storage is unavailable, the site offers a continue-without-measurement option only after a second retryable storage failure. Validation and other non-retryable rejections do not enable that option.
Your choices
You can limit cookies and similar technologies through your browser and the controls offered by Google, Reddit, and other providers. Clearing site data in your browser removes locally stored NPPsquare attribution information from that browser.
Providing a phone number lets NPP respond to your request by phone. Unless a form separately asks for and records your consent, providing a phone number does not authorize automated marketing texts or WhatsApp messages.
To ask about information you submitted, or to request a correction or deletion, contact NPP at info@nationalpaymentprocessing.com. Some information may need to be retained for legitimate business, security, or legal reasons.
Children
This business-services site is not directed to children under 13, and NPP does not knowingly seek information from children through these forms.
Updates to this notice
NPP may update this notice as the site, connected services, or data practices change. The date above identifies the current version.
Contact
Questions about this notice can be sent to info@nationalpaymentprocessing.com.
For the primary NPP website, visit National Payment Processing.