SquareScope may process sensitive business and customer information.

• Square access tokens
• .env.local
• customer records
• merchant secrets
• private API responses
• production exports

Deployments using real Square data should always be protected with authentication or another access-control layer.

If a Square credential is exposed:

1. Revoke or rotate it immediately.
2. Update your deployment secret.
3. Remove it from Git history if necessary.
4. Redeploy.