Privacy facts at a glance
- Jurisdictions
- US
- Retention
- Mercury retains Personal Information only as long as necessary to provide Services, comply with legal and regulatory obligations, prevent fraud, resolve disputes, and enforce agreements, with extended periods required by law for regulated financial data.
- Certifications
- SOC 2 Type II · PCI
- GDPR addressed
- No
- CCPA addressed
- Yes
Tracked documents
Recent changes
Public summary; per-account review history visible to subscribers tracking this vendor.
Track Mercury in your workspace.
Get notified when Mercury adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.
Start tracking — 14-day trialNo card required.