Key Facts
Does Mercury rely on AI alone to make decisions that could have legal consequences, financial implications, or otherwise materially affect users' rights or access to services?
Mercury states that it does not rely on AI alone to make decisions that could have legal consequences, financial implications, or otherwise materially affect users' rights or access to services, and that such decisions always involve appropriate human oversight.
What involves appropriate human oversight when decisions could have legal consequences, financial implications, or otherwise materially affect users' rights or access to services?
Mercury states that it does not rely on AI alone to make decisions that could have legal consequences, financial implications, or otherwise materially affect users' rights or access to services, and that such decisions always involve appropriate human oversight.
Under certain U.S. privacy laws, what may Mercury's use of advertising cookies and similar technologies be considered even though Mercury does not exchange user information for money?
Mercury states that under certain U.S. privacy laws, its use of advertising cookies and similar technologies may be considered 'sharing' or a 'sale' of Personal Information even though Mercury does not exchange user information for money.
What biometric information does Mercury collect?
Mercury collects biometric information, including voiceprint, facial scan, and biometrics extracted from a photograph or image, for identity purposes.
For what purposes does Mercury collect biometric information?
Mercury collects biometric information, including voiceprint, facial scan, and biometrics extracted from a photograph or image, for identity purposes.
Who is responsible for ensuring a lawful basis to provide Personal Information to Mercury?
Mercury requires that the business customer is responsible for ensuring it has a lawful basis to provide Personal Information to Mercury.
To whom does Mercury disclose Personal Information as part of any reorganization, merger, sale, joint venture, assignment, or transfer?
Mercury discloses Personal Information to parties involved in a corporate transaction, such as a potential or actual acquirer, successor, or assignee, as part of any reorganization, merger, sale, joint venture, assignment, or transfer.
In what corporate transactions does Mercury disclose Personal Information?
Mercury discloses Personal Information to parties involved in a corporate transaction, such as a potential or actual acquirer, successor, or assignee, as part of any reorganization, merger, sale, joint venture, assignment, or transfer.
What does Mercury rely on for transfers of Personal Information from the European Economic Area or United Kingdom?
Mercury relies on approved contractual protections, such as Standard Contractual Clauses, and additional technical and organizational safeguards for transfers of Personal Information from the European Economic Area or United Kingdom.
What safeguards does Mercury rely on for transfers of Personal Information from the European Economic Area or United Kingdom?
Mercury relies on approved contractual protections, such as Standard Contractual Clauses, and additional technical and organizational safeguards for transfers of Personal Information from the European Economic Area or United Kingdom.
Summary
Mercury's Privacy Policy explains what personal data Mercury collects—including biometric data like facial scans and voiceprints—how it is used, and with whom it may be shared, including in corporate transactions such as mergers. Mercury does not sell your Personal Information for money, but its use of advertising cookies may legally count as a 'sale' or 'sharing' under certain U.S. privacy laws, giving you the right to opt out by clicking 'Your Privacy Choices' or enabling GPC. Mercury also states it never uses AI alone for decisions that could materially affect your legal or financial standing.
Analysis
This Privacy Policy establishes Mercury's practices for collecting, using, retaining, and sharing Personal Information, including sensitive categories such as biometric data. It sets a human-oversight requirement for consequential AI-assisted decisions and limits Mercury AI output from serving as a substitute for professional legal, financial, or tax advice. Data retention is governed by a necessity standard subject to extension under applicable financial-sector regulatory obligations. Cross-border transfers from the EEA and UK are covered by Standard Contractual Clauses and additional technical and organizational safeguards, and business customers bear responsibility for ensuring a lawful basis before providing Personal Information to Mercury.
What this means for you
Mercury collects highly sensitive personal data, including biometrics, and may share Personal Information with potential or actual acquirers in corporate transactions. Its use of advertising cookies may qualify as a 'sale' or 'sharing' of your Personal Information under applicable U.S. privacy law. If that right applies to you, you can exercise it by clicking the 'Your Privacy Choices' link on Mercury's platform or by enabling the Global Privacy Control (GPC) in your browser. Mercury also commits that any AI-assisted decision with legal or financial consequences for you will always include appropriate human oversight.
4 important changes detected
5 versions captured · Last updated: July 2026
What changed
Mercury updated its privacy policy to expand how certain cookies are classified and used. Specifically, cookies from Facebook Ads, Bing Ads, Braze, Google Ads, and LinkedIn Ads now include 'SaleOfInfo' alongside their existing purposes (Advertising or Analytics). This indicates that data collected via these cookies may be sold or shared with third parties for commercial purposes, in addition to their stated advertising and analytics functions.
Why this matters
The updated privacy policy now discloses that cookies from Facebook Ads, Bing Ads, Braze, Google Ads, and LinkedIn Ads serve an additional purpose: 'SaleOfInfo'. This means data collected through these cookies may be sold or shared with third-party commercial partners, beyond their existing use for advertising and analytics. Under the revised policy, Mercury treats data from these cookies as subject to potential sale or commercial sharing. You can review Mercury's full privacy policy to understand your data rights and any available opt-out mechanisms.
View full change record →
What changed
Mercury updated its privacy policy contact email addresses, changing from a legacy email address to help@mercury.com across four key sections: cookie opt-out inquiries, privacy rights requests, parental inquiries about minors' data, and general contact. The operational effect is that users seeking to exercise privacy rights, request data access, or report concerning data collection must now use the updated email address.
Why this matters
The updated policy establishes a single, unified contact email (help@mercury.com) for privacy-related inquiries including cookie opt-out requests, data access and deletion requests, and parental concerns about minors' data. Users who previously contacted the legacy email address should update their records to use the new email address for privacy requests to ensure proper routing and response.
View full change record →
June 19, 2026
low
Mercury updated its privacy policy on June 19, 2026 to disclose SMS and MMS messaging practices. The new language states that Mercury may send SMS messages to users who have …
View change record →
June 12, 2026
low
Mercury's privacy policy cookie table was updated on June 12, 2026 to add one new cookie entry and reorder existing entries. A Google Analytics cookie pattern (^_dc_gtm_UA-.*) was added to …
View change record →