Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Sep 11, 2026; our capture on Oct 21, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“we do not rely on it alone to make decisions that could have legal consequences, financial implications, or otherwise materially affect your rights or access to our services. Such decisions always involve appropriate human oversight.”
“Under certain U.S. privacy laws, the use of these technologies may be considered "sharing" or a "sale" of Personal Information, even though we do not exchange your information for money.”
“Biometric information, such as voiceprint, facial scan, and biometrics extracted from a photograph or image.”
“the business customer is responsible for ensuring it has a lawful basis to provide Personal Information to Mercury.”
“Parties involved in a corporate transaction, such as a potential or actual acquirer, successor, or assignee as part of any reorganization, merger, sale, joint venture, assignment, transfer...”
“for transfers from the European Economic Area or United Kingdom, we rely on approved contractual protections (such as Standard Contractual Clauses) and additional technical and organizational safeguards...”
Mercury's Privacy Policy explains what personal data Mercury collects—including biometric data like facial scans and voiceprints—how it is used, and with whom it may be shared, including in corporate transactions such as mergers. Mercury does not sell your Personal Information for money, but its use of advertising cookies may legally count as a 'sale' or 'sharing' under certain U.S. privacy laws, giving you the right to opt out by clicking 'Your Privacy Choices' or enabling GPC. Mercury also states it never uses AI alone for decisions that could materially affect your legal or financial standing.
This Privacy Policy establishes Mercury's practices for collecting, using, retaining, and sharing Personal Information, including sensitive categories such as biometric data. It sets a human-oversight requirement for consequential AI-assisted decisions and limits Mercury AI output from serving as a substitute for professional legal, financial, or tax advice. Data retention is governed by a necessity standard subject to extension under applicable financial-sector regulatory obligations. Cross-border transfers from the EEA and UK are covered by Standard Contractual Clauses and additional technical and organizational safeguards, and business customers bear responsibility for ensuring a lawful basis before providing Personal Information to Mercury.
Mercury collects highly sensitive personal data, including biometrics, and may share Personal Information with potential or actual acquirers in corporate transactions. Its use of advertising cookies may qualify as a 'sale' or 'sharing' of your Personal Information under applicable U.S. privacy law. If that right applies to you, you can exercise it by clicking the 'Your Privacy Choices' link on Mercury's platform or by enabling the Global Privacy Control (GPC) in your browser. Mercury also commits that any AI-assisted decision with legal or financial consequences for you will always include appropriate human oversight.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
3 important changes detected
9 versions captured · Latest change detected by ConductAtlas: August 2026
Mercury added a new section to its privacy policy disclosing SMS and MMS messaging practices. The updated policy states that Mercury may send SMS and MMS messages to users who …
View change record →We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“Under certain U.S. privacy laws, the use of these technologies may be considered "sharing" or a "sale" of Personal Information, even though we do not exchange your information for money.”
“we do not rely on it alone to make decisions that could have legal consequences, financial implications, or otherwise materially affect your rights or access to our services. Such decisions always involve appropriate human oversight.”
“Biometric information, such as voiceprint, facial scan, and biometrics extracted from a photograph or image.”
“the business customer is responsible for ensuring it has a lawful basis to provide Personal Information to Mercury.”
“Parties involved in a corporate transaction, such as a potential or actual acquirer, successor, or assignee as part of any reorganization, merger, sale, joint venture, assignment, transfer...”
“for transfers from the European Economic Area or United Kingdom, we rely on approved contractual protections (such as Standard Contractual Clauses) and additional technical and organizational safeguards...”
“We do not sell Personal Information in exchange for money. However, like many online companies, we use cookies and similar technologies that may be considered a "sale" or "sharing" under certain U.S. privacy laws...”
“We retain Personal Information only as long as necessary...Because Mercury operates in a regulated financial environment, certain information may be retained for extended periods as required by law or industry standards.”
“You may have the right to opt out of the "sale" or "sharing" of Personal Information, as defined under applicable law. You may exercise this right by clicking the "Your Privacy Choices" link...or enabling GPC.”
“We only use or share Sensitive Personal Information as allowed by law.”
“When you use Mercury AI, you should not rely on output from Mercury AI as a single source of truth or fact, and understand that it is not a substitute for professional legal, financial, or tax advice.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Mercury has updated this document before. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Advertising cookies may constitute sale or sharing and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.