Privacy

Mercator stores the information you choose to submit through its account pages or connected agent. It does not ingest entire chats, model reasoning or outside browsing by default. Ordinary requests are handled by the service without a Mercator-operated language model.

Your account and private records

Your sign-in email and connection permissions support account access. Resend receives the address and sign-in message to deliver your code. Mercator stores only a hash of the code bound to your browser; codes expire after ten minutes and hourly cleanup removes expired or consumed attempts. Hashed request counters limit email abuse. Keep your email account secure and enter codes only in Mercator's sign-in window. Email verification establishes mailbox access; it does not verify your business relationship or commercial claims. Resend retains email content, recipient metadata and delivery logs for up to 30 days under its current service policy. Private statements and drafts are available only to the account authorized to manage them.

Publication and audience

Preparation stays private. After you confirm the complete saved review, selected information is readable by other signed-in Mercator users through their agents. When you explicitly approve the public web audience, the selected service information and contact route are also readable without signing in, shareable and potentially indexed by search engines. Existing registered-account publications keep their audience. The review includes retained published facts and restrictive qualifiers. Published business relationships and terms are account-attributed self-declarations. Listing names and matching contact routes do not establish ownership or verification.

Information retrieved by a connected agent is delivered to that agent's host, including ChatGPT. That host applies its own data practices. Mercator cannot recall copies already delivered to a host or another user. Connecting Mercator to an agent does not make your records anonymously readable on the web.

Assisted requests and private review links

The provider and buyer forms save only what you submit, your chosen private reply route and any campaign or offer reference. Mercator uses these to review and follow up on your request. A submission is private, is not a public job post and is not sent to a provider or subscribed to marketing. An authorized operator may use the business name and selected description from a provider introduction to prepare a private contribution in their Mercator account. Its sender is not treated as verified, and your private reply route is not copied into that contribution. The contribution can later be recovered through the operator’s connected assistant; that host applies its own data practices. Sharing still requires separate approval of the exact description and audience. Erasing an introduction also erases its derived draft if it has never been published. A separately approved and published contribution follows the contribution withdrawal and deletion process below. Public links are stored as references; submitting one does not make Mercator fetch it. Requests stay available while being worked and their content is erased 90 days after closure, or earlier through support. Protected backups expire within 30 days; current deletion checkpoints prevent erased content from being restored. Minimal identifiers remain for recovery control. A receipt confirms storage, not a reply, enquiry, quote or completed job. An operator can record material you have already supplied through email, messenger or referral, retaining its private source and the instruction or permission to handle it. These records follow the same retention and erasure rules. We do not import whole conversations automatically. For a service-linked buyer request, you can separately agree to share the submitted brief, supplied links and reply contact with the selected provider to arrange an introduction. Submission itself sends no message. We ask before sharing material outside that selection.

Anyone holding a private review link may read its exact proposal for up to seven days. Opening the link does not approve or publish. The link grants no access to the account, full source files, private notes or approval receipts. Ask support to revoke a link early.

Business photos

You can optionally send up to four photos with your business introduction without creating an account, adding a description and creator credit to each. Authorized business managers can also upload through their account. Mercator stores originals and optimized sizes privately using Cloudflare R2. Uploading does not publish. Only photos selected in the exact approved public-web listing review appear on the business profile; descriptions, captions, creator credits and display terms are part of that review. A private review link also lets its holder see those selected optimized photos for the link’s readable lifetime. It does not expose originals or the rest of the private photo library. Optimization removes embedded camera metadata. Approval covers display on the business profile, not promotional reuse elsewhere or ownership of client work.

Photos submitted with an introduction stay private with that request. Preparing a private listing transfers them to the managing operator’s photo library; this does not approve publication. Erasing an introduction erases its unapproved photos, including those transferred into a private proposal. Images already selected in a separately approved publication follow that contribution’s own withdrawal and deletion controls. Failed or interrupted submissions are recovered by hourly cleanup after a 15-minute safety window; temporary storage failures are retried. Technical failed-attempt records are removed after 30 days. Unselected photos remain private while the contribution is retained. Withdrawing a listing blocks current image delivery and keeps the private library. Deleting the listing or account removes photo metadata from active records and queues private object deletion for hourly cleanup. Older database copies follow the protected backup rules below and cannot authorize withdrawn or deleted photos. Mercator checks current publication permission before serving business photos, including cached optimized bytes. Copies already downloaded cannot be recalled.

Retention and exit

Service opens, contact navigation, prepared enquiries and committed participation events are counted with a campaign code, surface and relevant service or request reference. Counts can include repeat visits and bots. Enquiry wording, reply addresses, review tokens and briefs are excluded from these activity records. Activity and grouped failure counts are retained for up to 30 days. Private outcome notes record who reported an outcome, when, and its source reference; they do not establish a verified sale or completed job. Notes linked to a request follow that request’s erasure rules; standalone outcome notes expire after 90 days.

Active contribution records and necessary revision and approval history remain until you delete them. Withdrawal removes current discovery and retains your private records. Disconnection revokes agent access and keeps your records. Deletion erases owned content from the active store, closes the account and revokes its connections. Other accounts' private histories remain theirs.

Optional private excerpts require your explicit request, stop appearing in your records after seven days and are excluded from publication. Hourly cleanup removes expired excerpts from active storage. Older copies can remain in protected backups until their 30-day expiry; restoring a backup does not extend an excerpt's readable lifetime. Temporary prepared-review copies and support reports are cleaned after 30 days. Minimized operational logs are kept for up to 30 days. Protected backups become ineligible for restoration after 30 days; hourly maintenance removes expired copies. Restoration requires the current protected deletion checkpoint and reauthentication. Minimal record identifiers, deletion dates and revocation state prevent recovery from reviving deleted content; empty technical records can remain to preserve database references.

Help without an account

For a managed service, request corrections, a pause or removal in your existing conversation with Mercator, or contact support with the service link. An account is not required. Optional account access does not automatically claim or transfer a managed service.

Use your account controls to withdraw listings, disconnect agents or delete your data. Sign in to access the same account. Support: [email protected]