“We only use or share Sensitive Personal Information as allowed by law.”
This analysis describes what Mercury's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause bounds Mercury's use and sharing of the most sensitive category of personal data to what is legally permitted, establishing a compliance-based ceiling on such activity.
The updated policy expands the categories of personal information Mercury collects and processes for business customers. Mercury now explicitly collects investment profile information, demographic data (citizenship status, sex assigned at birth), and information about dependents and payment beneficiaries. For business customers, Mercury may collect personal information directly from contractors, payment recipients, and other connected individuals at the business's direction to support payroll, benefits, and payment processing. The policy also clarifies that marketing SMS messages require separate consent from transactional messages, and that phone numbers will not be shared with third parties for their own advertising purposes. You can opt out of marketing SMS messages without affecting receipt of transactional messages.
View change record →The updated policy discloses Mercury's SMS and MMS messaging practices and establishes specific protections for users who opt in. The policy states that mobile phone numbers and opt-in consent data will not be sold, rented, or shared with third parties for marketing purposes, and will only be shared with telecommunications carriers under binding confidentiality agreements to deliver the service. You can opt out at any time by replying 'STOP' to any message or updating your notification preferences in your Mercury account settings.
View change record →Mercury will only use or share your Sensitive Personal Information in ways that applicable law allows.
How other platforms handle this
The Company will only use Personal Data provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
When we process personal information about you, we do so with your consent or as necessary to comply with our legal and regulatory obligations; to provide the products and services you use...
Canva will use or disclose your information where we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement...
"We only use or share Sensitive Personal Information as allowed by law.Excerpt from Mercury's Privacy Policy
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause bounds Mercury's use and sharing of the most sensitive category of personal data to what is legally permitted, establishing a compliance-based ceiling on such activity.
Mercury will only use or share your Sensitive Personal Information in ways that applicable law allows.
ConductAtlas has identified this type of provision across 273 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mercury.