When a business opens a Mercury account, personal information about the business's owners and other authorized individuals is also collected and processed, even if those individuals are not the primary account applicant.
This analysis describes what Mercury's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Individual employees, owners, and signatories associated with a Mercury business account have their personal data collected and governed by this policy, which may not be obvious to those individuals who did not themselves sign up for Mercury.
Interpretive note: The precise scope of individual data subject rights for beneficial owners and authorized users under Mercury's policy is not fully detailed in the available document text.
The updated policy states that Mercury may now collect personal information directly from employees, contractors, payment beneficiaries, and dependents at a business's direction, without requiring those individuals' direct consent to Mercury. This expands the pool of individuals whose data Mercury processes beyond those who directly use the service. Additionally, the revised SMS terms separate transactional messages (receipts, confirmations) from marketing messages, requiring separate consent for marketing SMS. You can manage marketing SMS consent independently from transactional message receipt.
View change record →The updated privacy policy now discloses that cookies from Facebook Ads, Bing Ads, Braze, Google Ads, and LinkedIn Ads serve an additional purpose: 'SaleOfInfo'. This means data collected through these cookies may be sold or shared with third-party commercial partners, beyond their existing use for advertising and analytics. Under the revised policy, Mercury treats data from these cookies as subject to potential sale or commercial sharing. You can review Mercury's full privacy policy to understand your data rights and any available opt-out mechanisms.
View change record →Business owners and authorized users who are associated with a Mercury account have their personal identity and financial data collected under this policy, potentially without independent notice or consent as individuals.
How other platforms handle this
If you are an end user in a Workspace not owned by you and wish to update, delete, or receive any information we have about you, you may do so by contacting the organization who owns your ClickUp Workspace.
You have the right to submit a request through an authorized agent, but we will require the agent to provide us with your written permission, and we may need to confirm your identity before processing the agent's request.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
"When you open a business account with us, we collect information about the beneficial owners and authorized signatories of your business, including personal identifiers, identity verification information, and financial information. Individuals associated with your account may also be subject to this Privacy Policy.Excerpt from Mercury's Privacy Policy
REGULATORY LANDSCAPE: Collection of personal data from beneficial owners and authorized users at account opening is required under FinCEN's Customer Due Diligence Rule for financial institutions, which mandates collection of beneficial ownership information.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Individual employees, owners, and signatories associated with a Mercury business account have their personal data collected and governed by this policy, which may not be obvious to those individuals who did not themselves sign up for Mercury.
Business owners and authorized users who are associated with a Mercury account have their personal identity and financial data collected under this policy, potentially without independent notice or consent as individuals.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mercury.