Legal · Consumer rights

Do Not Sell or Share My Personal Information

Version 1.1 Effective April 1, 2026 Applies to paymullet.com and the Merchant Dashboard

Plain-English summary

If you are a California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Maryland, Minnesota, Montana, Tennessee, or Rhode Island resident (or protected by a similar law), you have the right to opt out of the “sale” or “sharing” of your personal information and the use of your data for targeted advertising. Submit the form below — we process every request and will confirm action within 15 business days.

Global Privacy Control (GPC) detected? If your browser sends a GPC signal, we automatically treat you as opted out of sale/sharing and disable marketing cookies for this session. You do not need to re-submit. Check at globalprivacycontrol.org.

What “sale” and “sharing” mean under these laws

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Sale means exchanging personal information with a third party for monetary or other valuable consideration.
  • Sharing means disclosing personal information to a third party for cross-context behavioral advertising, whether or not for money.

Similar concepts apply under the Colorado Privacy Act, Connecticut Data Privacy Act, Virginia CDPA, Utah UCPA, and analogous laws in other US states.

Does PayMullet sell or share personal information?

We do not sell your personal information for money. We do allow limited “sharing” for cross-context behavioral advertising through advertising partners (Google Ads, LinkedIn, Meta) only if you have affirmatively accepted marketing cookies. You can opt out at any time using the form below or by rejecting marketing cookies in your cookie settings.

Categories of information potentially shared

  • Online identifiers (advertising IDs, cookie IDs, device IDs)
  • Internet activity (pages visited on paymullet.com, referring URL)
  • Geolocation inferred from IP address, at city level

We do not share cardholder data, merchant financial statements, or sensitive personal information for advertising purposes. Ever.

Submit an opt-out / deletion / correction request

How we verify your request

Before we act, we must confirm you are the person you claim to be. For most requests we do this by matching the email address in your submission to an address already on file. For deletion and access requests we may ask you to log in to the Dashboard, confirm a one-time code sent to your account email, or provide a government-issued ID. We will never ask for a password or full card number to verify a request.

Authorized agents

You may designate an authorized agent to submit a request on your behalf. The agent must attach a signed, notarized permission statement and we will still verify your identity directly.

Our response time

We confirm receipt within 10 business days. We fulfill or formally deny the request within 15 business days for opt-out-of-sale requests, 45 calendar days for deletion/access/correction requests (extendable by an additional 45 days with written notice when reasonably necessary).

Appeal

If we deny your request, we will explain why and how to appeal to our Data Protection Officer at dpo@paymullet.com. If the appeal is denied, you may complain to your state Attorney General or, in California, the California Privacy Protection Agency.

No discrimination

Exercising your rights will not result in worse pricing, service quality, or account standing. Full stop.

Other ways to opt out

  • Cookie settings: Open cookie settings and reject Marketing cookies.
  • Email: privacy@paymullet.com with subject line “CCPA Request”.
  • Mail: PayMullet, Attn: Data Protection Officer, 568 Broadway, Suite 702, New York, NY 10012.
  • Phone: 1-844-PAY-MULL (1-844-729-6855), Mon–Fri 9am–6pm CT.