Business Details

Merchants can now see and edit their registered business details from Settings → Business: legal name, entity type, registration country, street address and business email.

Completing the profile is a required step for the new merchant setup checklist now, and it's what a Decal-hosted Terms or Privacy policy needs before you can pick one.

Every policy setting lives in the Policies section now. Your Terms of Service, Privacy Policy and Refund Policy open there by default, and the old settings link takes you straight to them. The default cancellation and reschedule policies your business falls back to sit on the Catalog policies tab, above the library those defaults are chosen from.

Decal's own Terms and Privacy Policy were updated too: we may withhold settlement funds where fraud or loss is suspected, a suspended account stops new payments, bookings and payouts while customers can still redeem balances and finish what they've paid for, and fraud-prevention records are kept for a stated period. The Decal-hosted Privacy Policy template says the same to your customers.

Wallet Payout Safeguards

Payout and Treasury dialogs show the amount that can actually be sent while another transfer is in flight, so Max no longer offers more than the transfer will accept. The Bank Account dialog explains accurately why part of a balance can't go to a bank, and its figure counts small balances too.

A wallet payout is refused as you submit when the destination wallet has no account for the token: "This wallet has no USDC account yet, so it can't receive this payout." Stablecoin payouts always send USDC when your balance holds any, and otherwise use your largest stablecoin holding.

Minor Improvements

Signing in with a pending invitation takes you straight to setup. No second email verification, and no invitation link in your address bar.
A customer's household can share a phone number. Two customer records with the same number are both kept, at checkout and on every Square sync.
Team member names follow the person's account. The per-organization name is an override now, and left blank it reads from the account.
The Orders list identifies customers with an avatar and email, the way the rest of the dashboard does, and shows them on a phone.
Lapsed checkout sessions expire on their own, and checkout.session.expired is delivered when they do.
Removing your organization's avatar actually removes it, and a transparent logo stays transparent.