Version history

Mercury's privacy policy was updated to expand the types of personal information the company collects and processes, particularly for business customers and their connected individuals. New language clarifies that Mercury may collect data directly from payment recipients, contractors, and other third parties at a business's direction, and adds specific examples of payment and payroll processing purposes. The policy also modifies SMS messaging consent terms to distinguish between transactional and marketing messages, and removes 'affiliates' from a previous restriction on sharing mobile opt-in data.

Mercury's privacy policy was updated on August 22, 2026 to add 'Opens in new tab' annotations to three external links: the Google Analytics opt-out tool, the Network Advertising Initiative, and the Digital Advertising Alliance. The policy also made minor punctuation corrections. These changes are purely procedural and do not alter the substance of Mercury's privacy practices, data collection practices, or user opt-out rights.

Mercury's privacy policy was updated on August 19, 2026 to add a new cookie, __oppref, associated with OpenAI and classified for advertising and data sale purposes. This cookie now appears in Mercury's disclosed cookie tracking table alongside existing third-party tracking cookies from providers like Google, Facebook, and Segment.

Mercury updated its privacy policy to expand how certain cookies are classified and used. Specifically, cookies from Facebook Ads, Bing Ads, Braze, Google Ads, and LinkedIn Ads now include 'SaleOfInfo' alongside their existing purposes (Advertising or Analytics). This indicates that data collected via these cookies may be sold or shared with third parties for commercial purposes, in addition to their stated advertising and analytics functions.

Mercury updated its privacy policy contact email addresses, changing from a legacy email address to help@mercury.com across four key sections: cookie opt-out inquiries, privacy rights requests, parental inquiries about minors' data, and general contact. The operational effect is that users seeking to exercise privacy rights, request data access, or report concerning data collection must now use the updated email address.

Mercury updated its privacy policy on June 19, 2026 to disclose SMS and MMS messaging practices. The new language states that Mercury may send SMS messages to users who have explicitly opted in, including through a Receipt Texting feature. The policy establishes that phone numbers and SMS opt-in consent data will not be sold, rented, or shared with third parties for marketing purposes, and will only be shared with telecommunications carriers under confidentiality agreements. Users can opt out by replying STOP to any message or through account settings.

Mercury's privacy policy cookie table was updated on June 12, 2026 to add one new cookie entry and reorder existing entries. A Google Analytics cookie pattern (^_dc_gtm_UA-.*) was added to the Analytics category, and the tcm cookie entry was moved in the list. This represents a minor technical clarification of tracked cookies rather than a substantive change to Mercury's data practices.