The most valuable asset a café builds is not its espresso machine — it is the list of people who will come back if you give them a reason. Most owners are sitting on the raw material for that list without realizing it: every card payment through Square is a potential customer profile. The gap is turning those anonymous transactions into a list you can actually contact, with permission, and use to bring people back.
This guide explains exactly what Square’s Customer Directory does automatically, what you have to do deliberately, and how to use the list without breaking Canada’s or the US’s marketing laws. It is written for an independent café or restaurant owner on Square.
What Square’s Customer Directory does on its own
Square includes a free CRM called the Customer Directory. Out of the box, it does more than most owners notice:
- It automatically creates a customer profile when someone pays by card, and links their payment history to that profile.
- It captures contact details when a customer opts into digital receipts (email or text).
- It lets you add profiles manually, attach notes (allergies, regular order, “owner’s neighbor”), and see lifetime spend and visit count per person.
- It supports groups and segments so you can slice the list — for example, “visited in the last 30 days” or “spent over $200 lifetime.”
That last point matters because a flat list is nearly useless; a segmented one is where retention money is made. Knowing who your regulars are and who has gone quiet is the foundation of every win-back and loyalty play.
The honest limitation: an auto-created profile is not automatically a marketing contact. A card token with a purchase history is useful for recognizing a repeat customer, but to send them a message you need their email or phone and their permission to market to them. That is the part you have to build deliberately.
How to actually collect contacts (with consent)
Here is the operator-grade sequence for turning foot traffic into a consented list. Do these in order.
1. Turn on digital receipts and make them the default offer
When staff ask “receipt by email or text?” at checkout, that single habit feeds the Directory continuously. It is the lowest-friction collection method you have because the customer is already at the counter and already wants the receipt.
2. Add an explicit marketing opt-in — separate from the receipt
A receipt is not marketing consent. To stay onside with the law, you need a distinct, clearly worded opt-in: a checkbox, a verbal “want our app/newsletter for a free drink on your fifth visit?”, or a signup link. The consent has to be specific — the customer should understand they are agreeing to receive promotional messages, not just a receipt.
3. Use a reason to sign up, not just a request
Nobody hands over their phone number for nothing. The proven trade is a small, immediate incentive: a first-visit reward, a free pastry on signup, or loyalty points. This is the same mechanic behind a café loyalty program — the reward is what converts an anonymous buyer into a known, contactable one.
4. Capture at every channel, not just the counter
Your online ordering, your Instagram bio, your Google Business Profile, and your QR codes can all funnel into the same list. The more entry points, the faster the list compounds.
Why an owned list beats marketplace customers
This is the part that should change how you think about delivery apps. When someone orders from you on a marketplace, the marketplace owns that customer — you usually do not get their email, their phone, or permission to contact them. You rent access to your own customer, one commissioned order at a time.
A Square Customer Directory list is the opposite: it is yours, and you can export it to CSV. You can back it up, segment it, and message it without paying a percentage every time. This is the core of who owns the customer data in marketplace vs. direct ordering — and it is the single biggest argument for driving orders through channels you control.
| Square Customer Directory | Delivery marketplace | |
|---|---|---|
| Who owns the contact | You | The platform |
| Can you export it? | Yes (CSV) | No |
| Cost to contact a customer again | Marketing subscription only | Commission per order, every time |
| Purchase history visible | Yes, per profile | Limited / platform-side |
| Consent record | You control it | You do not have it |
What it costs to use the list
Building the list is free. Reaching it at scale is the paid part, and the honesty here matters:
- The Customer Directory itself: included with Square, no extra fee.
- Square Marketing (automated email campaigns): a separate paid subscription, typically priced by your number of contacts.
- SMS / text marketing: usually metered, so cost scales with volume — texts cost more per message than email but get read far more.
Whether to pay for Square Marketing or push messages through a different channel depends on your volume and how you weigh email against texts and app notifications. We break that decision down in email vs. SMS vs. push for café marketing.
A worked example: what a year of collection looks like
Numbers make the compounding obvious. Suppose your café serves 120 transactions a day, and you get a 15% marketing opt-in rate once staff consistently offer a small reward for signing up.
- 120 transactions × 15% = 18 new consented contacts per day
- Across a 6-day week ≈ 108 per week
- Over a year ≈ ~5,600 consented contacts
Even if a chunk are duplicates of existing regulars (which is fine — it confirms and enriches their profile), you finish the year with a few thousand people you can legally contact for the cost of a marketing subscription, instead of paying a marketplace a commission every time you want to reach one of them. (The 15% opt-in rate is illustrative — your real rate depends entirely on how consistently staff make the offer and how good the incentive is.)
The consent rules you cannot skip
Building a list you cannot legally use is worse than useless. The short version:
- Canada (CASL): You need express or valid implied consent before sending commercial electronic messages. Every message needs clear sender identification and a working, free unsubscribe.
- US email (CAN-SPAM): Accurate headers, a valid physical address, and a working opt-out.
- US texts (TCPA): Prior express consent before promotional texts, with clear opt-out (e.g. “reply STOP”).
Collect a specific opt-in at the point of sale, keep a record of when and how you got it, and honor unsubscribes immediately. We cover the practical details in emailing and texting café customers under CASL.
Where a branded app fits
If you want collection to be automatic rather than dependent on staff remembering to ask, a branded ordering app does it structurally: every customer who orders ahead creates an account, opts in during signup, and is contactable by push — no clipboard at the counter required. The list builds itself as a byproduct of taking orders.
That is what Tany is built to do: a branded order-ahead app for iOS and Android plus web ordering on your existing Square POS, with self-running loyalty and push that turn every order into a consented, contactable customer — $99 CAD/month per location. The Square Customer Directory remains a great free starting point; an app is how you make the collection continuous and the messaging owned.
The takeaway
Square already hands you a free CRM that builds profiles from every card sale. The work is deliberate: collect email or phone with a clear, separate marketing opt-in, give people a reason to say yes, segment the list, and — critically — keep it on your side of the fence where you can export it, instead of leaving your customers locked inside a marketplace. Start the digital-receipt habit this week; the list compounds from there.