Last Modified: August 17, 2022
1. What Information Do We Collect and for What Purpose?
In Table 1 below, we provide the list of categories of Personal Data that Mercury collects and has collected within the last twelve months and some examples for a better understanding. We have also identified the main sources and purposes for collection in Table 1.
Please note that additional information may be requested and collected throughout the life of the account relationship to meet regulatory and legal requirements or depending on whether you enable optional features or functionalities of the Services. We may collect any communications between you and Mercury, including any photos, text, videos and any other information you upload or provide to us. We may, but have no obligation to, monitor, record, and store any Personal Data you provide to us in order to protect your safety or the safety of other users, to assist with regulatory or law enforcement efforts, or to protect and defend our rights and property. Optional features may require we collect certain additional data as may be further notified to you in connection with such features. For example, if your organization enables Mercury’s integration with Google Workspace, we will collect email addresses of members of your Google Workspace from Google in order to invite such users to set up a Mercury account; if they set up an account with us, we will store those email addresses to enable their Mercury account. By using the Services or enabling optional features, you consent to the recording, storage and disclosure of such communications you send or receive for the purposes outlined herein or as otherwise notified to you.
|Categories of Personal Data||Examples||Sources of Personal Data||Purposes for Personal Data Collection|
|Identifiers||First and last name, address, date of birth, phone number, email address||Administrator directly (e.g., forms you complete or services you obtain from us)||• Keep track of the Personal Data associated with your Account |
• Help you access and restore access to your Account
• Prevent others from accessing your Account
• Communicate directly with you, such as to send you email messages, push notifications and administrative information (e.g., account verification, change or updates to features of the Service, technical and security notices)
|Customer Records||Social security number, photo of passport or driver’s license or other valid government photo identification||Administrator directly (e.g., forms you complete or services you obtain from us) and third parties.||• Permit our financial partners to verify your identity |
• Permit us and our financial partners to comply with applicable consumer protection laws and the USA PATRIOT Act
• Provide our Services to you and our customers
|Internet or other electronic network activity information||Unique identification number, the model, operating system and version, your browser type and version, the presence of any device, operating system, or browser add-ons, the page you visited before navigating to our Services, and your mobile device’s location services, and your stored contacts.||Administrator or website browser indirectly (e.g., from activity on our Site or the App)||• Analytics |
• Advertising and marketing
• To keep our websites and app safe and secure
• Improve our Services
|Professional or employment-related information||Business name, business bank account information, business telephone number, business email address||Administrator directly (e.g., forms you complete or services you obtain from us)||• Operate, maintain, and provide to you the features and functionality of the Service|
2. Sharing of Your Information
|Categories of third parties with whom Personal Data has been shared||Why we share your Personal Data||Is Personal Data shared for a business purpose?|
|Service Providers||We may share your Personal Data with service providers including third party vendors, consultants, marketing companies, tax professionals and accountants, customer and support services, analytics services and web hosting companies who perform services for us or on our behalf and require access to such information to do that work. |
Specifically, we may share your financial statements and other Personal Data with the following:
• Amazon Web Services
• Microsoft (GitHub)
• CPA firms where the CPA firm has requested delivery to occur directly from Mercury for independence reasons.
|Payment Processors||We may share your Personal Data with our payment processors as necessary to enable them to process payments, and for anti-fraud purposes.||Yes|
|Business Partners and Affiliates||We may share your Personal Data with our business partners as necessary to provide you with the Services and to operate the Mercury Referral Program. |
Specifically, we may share your Personal Data with the following:
• APEX Clearing Corporation
• Evolve Bank & Trust
• Choice Financial Group
• The CurrencyCloud Ltd.
|Other Third Parties||We may share your Personal Data with other third parties not mentioned above at your direction or with your explicit consent. We may require you to verify your identity prior to sharing the Personal Data.||Yes|
We, and our third-party partners, automatically collect certain types of usage information when you visit our Services, read our emails, or otherwise engage with us. We typically collect this information through a variety of tracking technologies, including cookies, Flash objects, web beacons, file information and similar technology (collectively, "Tracking Technologies"). "Cookies" are small packets of data that a website stores on your computer’s or mobile device’s hard drive (or other storage medium) so that your computer will "remember" information about your use. We use both first and third party session cookies and persistent cookies. Session cookies make it easier for you to navigate our Services and expire when you close the Services. Persistent cookies remain on your device for an extended period of time or until you delete them. Persistent cookies enable us to track and target the interests of our visitors to personalize the experience on our Services.
Through the Tracking Technologies we collect information about your device and its software, such as your IP address, browser type, Internet service provider, platform type, device type, operating system, date and time stamp, a unique ID that allows us to uniquely identify your browser, mobile device or your Account, and other such information. We also collect information about the way you use our Services, for example, the site from which you came and the site to which you are going when you leave our website, the pages you visit, the links you click, how frequently you access the Services, whether you open emails or click the links contained in emails, whether you access the Services from multiple devices, and other actions you take on the Services. When you access our Services from a mobile device, we may collect unique identification numbers associated with your device or our mobile application (including, for example, a UDID, Unique ID for Advertisers ("IDFA"), Google AdID, or Windows Advertising ID), mobile carrier, device type, model and manufacturer, mobile device operating system brand and model, phone number, and depending on your mobile device settings, your geographical location data, including GPS coordinates (e.g., latitude and/or longitude) or similar information regarding the location of your mobile device, or we may be able to approximate a device’s location by analyzing other information, like an IP address.
- For Google Analytics, please visit: https://www.google.com/analytics
- For Hubspot, please visit: https://legal.hubspot.com/privacy-policy
- For Segment, please visit: https://segment.com/legal/privacy/
- For Amplitude, please visit: https://amplitude.com/privacy
The following link explains how Google uses data when you use its partners’ websites and applications: www.google.com/policies/privacy/partners/. Your use of the Services is evidence of your consent to Mercury storing and accessing cookies and other information on your computer or phone and Mercury’s use of Google Analytics in connection with such activities. Please read the information at the link provided so you understand what you are consenting to.
Although we do our best to honor the privacy preferences of our Users, we are unable to respond to Do Not Track signals set by your browser at this time.
We use or may use the data collected through Tracking Technologies to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) provide custom, personalized content and information, including targeted content and advertising; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our Service; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our Services; (f) diagnose or fix technology problems; and (g) otherwise to plan for and enhance our Services.
If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. Please note that doing so may negatively impact your experience using the Services, as some features and services on our Services may not work properly. Depending on your mobile device and operating system, you may not be able to delete or block all cookies. You may also set your e-mail options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our e-mail and performed certain functions with it. Note that deleting cookies does not delete Local Storage Objects (LSOs) such as Flash objects and HTML5. You can learn more about Flash objects - including how to manage privacy and storage settings for Flash cookies – on Adobe’s website. If you choose to delete Flash objects from our sites, then you may not be able to access and use all or part of the Services or benefit from the information and services offered.
4. Control Over Your Personal Data
Profile and Data Sharing Settings. You may update your profile information, such as your user name and profile photo, and may change some of your data sharing preferences on your Settings Page.
Access to your Mobile Device Information. You may control our access to your mobile device information through your "Settings" app on your device. For instance, you can withdraw permission for the App to access your address book, location, photo stream and camera.
How to Control your Communications Preferences: You can stop receiving promotional email communications from us by clicking on the "unsubscribe link" provided in such communications. We make every effort to promptly process all unsubscribe requests. You may not opt out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Service, technical and security notices).
Modifying or Deleting your Personal Data: If you have any questions about reviewing, modifying, or deleting your Personal Data, or if you want to remove your name or comments from our website or publicly displayed content, you can contact us directly at [email protected]. We may not be able to modify or delete your Personal Data in all circumstances.
5. Site Data
In an ongoing effort to better understand our users and the Services, we might analyze Site Data to operate, maintain, manage, and improve the Services. This Site Data does not identify you personally. We may share this aggregate data with our affiliates, agents, and business partners. We may also disclose Site Data and aggregate user statistics to describe the Services to current and prospective business partners and to other third parties for other lawful purposes.
6. Third Party Tracking and Online Advertising
We may share, or we may permit third party online advertising networks, social media companies and other third-party services, to collect, information about your use of our Services over time so that they may play or display ads that may be relevant to your interests on our Services as well as on other websites or apps, or on other devices you may use. Typically, though not always, the information we share is provided through cookies or similar tracking technologies, which recognize the device you are using and collect information, including hashed data, click stream information, browser type, time and date you visited the Services, and other information. This information is used to display targeted ads on or through our Services or on other websites or apps, including on Facebook. We or the online advertising networks use this information to make the advertisements you see online more relevant to your interests. As noted above, depending on your browser or mobile device, you may be able set your browser to delete or notify you of cookies and other tracking technology by actively managing the settings on your browser or mobile device. You may also be able to limit interest-based advertising through the settings on your mobile device by selecting "limit ad tracking" (iOS) or "opt-out of interest based ads" (Android). To learn more about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Network Advertising Initiative’s online resources, at http://www.networkadvertising.org/choices, and/or the Digital Advertising Alliance’s resources at www.aboutads.info/choices, and you may also adjust your ad preferences through your Facebook settings. You may also be able to opt-out of some – but not all – interest-based ads served by mobile ad networks by visiting http://youradchoices.com/appchoices and downloading the mobile AppChoices app. If you have any questions about opting out of the collection of cookies and other tracking/recording tools, you can contact us directly at [email protected].
Facebook Custom Audience Ads. We may work with Facebook to display interest-based ads to you or to your friends on Facebook through a tool offered by Facebook called the Custom Audience Tool. This tool allows us to personalize our ads based on you or your friends’ experience on our Services in order to provide ads tailored for each specific recipient. We do not share Personal Data about your activities on our Services with Facebook, but we share a hashed email address or phone number which permits Facebook to identify our advertising audience based on the information that Facebook collects from its users. If you do not want to receive interest-based ads on Facebook, you can adjust your ad preferences through your Facebook settings. If you do not want us to use your content to personalize advertising that we direct to your friends on Facebook, you may email us at [email protected].
7. How We Store and Protect Your Information
Keeping your Information Safe: We care about the security of your Personal Data and use commercially reasonable physical, administrative, and technological safeguards to preserve the integrity and security of all Personal Data collected through our Services. However, no security system is impenetrable, and we cannot guarantee the security of our systems or the systems of the third parties with which we may share your Personal Data, nor can we guarantee that the Personal Data you supply will not be intercepted while being transmitted over the Internet. In particular, e-mail sent to us may not be secure, and you should therefore take special care in deciding what Personal Data you send to us via e-mail.
8. Children’s Privacy
Mercury does not knowingly collect, use, sell, or solicit any Personal Data from anyone under the age of 13 through our Services. If you are under 13, please do not give us any Personal Data. In the event that we learn that we have inadvertently collected Personal Data from a child under age 13, we will delete that information as quickly as possible. If you believe that we might have any Personal Data from a child under 13, please contact us at [email protected].
9. Links to Other Web Sites and Services
The Services may contain links to and from third-party websites of our business partners, advertisers, and social media sites and our users may post links to third-party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. We strongly recommend that you read their privacy policies and terms and conditions of use to understand how they collect, use, and share Personal Data. We are not responsible for the privacy practices or the content on the websites of third-party sites.
10. California Privacy Rights
If you are a California resident, you have the following choices regarding our use and disclosure of your Personal Data subject to certain limitations under the California Consumer Privacy Act (“CCPA”):
- Right to know. You may request, up to twice in a 12-month period, the following information about the Personal Data we have collected, used, disclosed or sold about you during the past 12 months:
- the categories and specific pieces of Personal Data we have collected about you;
- the categories of sources from which we collected the Personal Data;
- the business or commercial purpose for which we collected the Personal Data;
- the categories of third parties with whom we shared the Personal Data; and
- the categories of Personal Data about you that we disclosed for a business purpose and sold to third parties, and the categories of third parties to whom the information was disclosed or sold.
- Right to delete. You may request that we delete the Personal Data we have collected from you, subject to certain limitations under the CCPA.
- Right to opt-out from sale of Personal Data. You have the right to opt-out of the sale of your Personal Data. We do not sell your Personal Data.
- Non-discrimination. The CCPA provides that you may not be discriminated against for exercising these rights.
To submit a request to exercise any of the rights described above, you may email us at [email protected] or fill out this online form. We will verify your identity before responding to your request by either verifying that the email address from which you send the request matches your email address that we have on file, or by requiring you to log into your Account.
Consumer Request by an Authorized Agent
If any authorized agent submits a consumer request under the CCPA on your behalf, we require the authorized agent to submit the following information so that we can confirm their authority to act on your behalf:
- Evidence of authorization to act on behalf of the California consumer: (1) California Secretary of State authorization, (2) notarized written permission from the California consumer, or (3) power of attorney.
- Evidence of identity of the California consumer: (1) first and last name, (2) email address, and (3) password.
Pursuant to Section 1798.83 of the California Civil Code, residents of California have the right to obtain certain information about the types of Personal Data that companies with whom they have an established business relationship (and that are not otherwise exempt) have shared with third parties for direct marketing purposes during the preceding calendar year, including the names and addresses of those third parties, and examples of the types of services or products marketed by those third parties. If you wish to submit a request pursuant to Section 1798.83, please contact Mercury via email at [email protected].
11. How to Contact Us