1. Yes, we sell personal information
PayPerMerchant sells merchant cash advance applications to funders, independent sales organizations and broker shops, and is paid $60 per lead for doing it. Under Cal. Civ. Code 1798.140(ad)(1) that transfer is a sale of personal information, and we use that word rather than the word sharing. There is no small business exemption that changes it.
This page is how you stop it. Opting out is free, it does not require an account, and it does not change the service you get from us in any way.
What we collect and who buys it is set out in the Privacy Policy. Note that this website itself has no forms and runs no advertising or analytics technology at all, so nothing is collected or sold from this page. The information we sell is the merchant applications submitted on our separate advertising properties.
2. The fastest way: Global Privacy Control
Turn on Global Privacy Control in your browser and we treat it as an opt out. It is a setting in some browsers and a free extension in the rest, and it sends the signal to every site you visit rather than only to this one. 11 CCR 7025(b) makes processing that signal mandatory for any business that sells personal information.
A link on a page is not a substitute for the signal. 11 CCR 7025(e) says so directly: a business that posts a Do Not Sell link must still process opt out preference signals. Both are required, which is why this page leads with the signal and not with a form.
How we process it. The signal is read on the server, from the request header, and logged with its timestamp. Where the signal is present at the moment a merchant application is submitted on one of our properties, the record is flagged as opted out of sale before it is routed to any buyer, so it is never sold in the first place rather than being sold and then recalled.
Launch gate L10: server side signal processing, the signal log, and the downstream notification pipeline
Under 11 CCR 7025(c)(1) the signal covers the browser or device that sent it and any profile tied to that browser or device, including a pseudonymous one. Because it is tied to a browser, it may not reach a record collected on a different device unless you are identifiable to us. If you have already submitted an application, use section 3 as well.
3. The other ways to opt out
11 CCR 7026(a)(1) requires an opt out preference signal and at least one interactive method. You do not have to give a reason, and we will not ask you for more information than we need to find your record.
| Method | Where |
|---|---|
| Browser signal | Global Privacy Control. See section 2 |
| Web form | Launch gate L11: opt out request form URL |
| Launch gate L1: privacy email address on the brand domain | |
| Telephone or post | Launch gate L2: toll free number or second request method Launch gate L3: serviceable mailing address |
Authorized agents. You may appoint someone to submit the request for you. We will ask for written permission signed by you, and we may ask you to verify your own identity.
Verification. For an opt out we ask only for enough to match your record, normally the email address and telephone number on the application. We do not use it for anything else and we do not require an account.
4. What happens after you ask
- We stop selling your information. 11 CCR 7026(f)(1) sets a ceiling of 15 business days, and 7026(f)(3)(A) requires us to stop sooner where we can, so the 15 days is a limit and not a schedule.
- We tell the buyers. Under 11 CCR 7026(f)(2) we notify every third party we sold your information to between the moment you asked and the moment we complied, direct them to comply with your request, and direct them to forward it to anyone they passed it to in that window.
- We record it. The opt out is logged and kept, and your record is suppressed so a later submission does not quietly undo it.
- Nothing about your service changes. We will not deny you anything, charge you a different price, or give you a lower quality of service because you opted out.
5. What opting out does not do
This is the part most people are surprised by, so it is stated plainly rather than buried.
- It does not reach copies a funder already holds. Once your application has been transferred, that company holds its own copy and keeps its own records. Opting out with us stops future sales. To have an existing copy deleted, or to stop that company contacting you, contact them directly. The buyers are named on the roster referenced in the Privacy Policy.
- It is not the same as a do not call request. To stop calls and texts, revoke consent: reply stop, quit, end, revoke, opt out, cancel or unsubscribe to any text, or tell any caller to put you on the do not call list. Under 47 CFR 64.1200(a)(10) any wording a reasonable person would read as a request to stop is effective, and it must be honored within 10 business days.
- It does not delete anything by itself. Deletion and correction are separate rights. Both are in the Privacy Policy, and both use the request methods in section 3.
6. Nevada, and other states
Nevada. A Nevada resident may submit a verified request to opt out of the sale of covered information under NRS 603A.345. We respond within 60 days, extendable by 30 days where reasonably necessary.
Everywhere else. We do not gate this page by state. If you send the signal or the request, we honor it, wherever you live. Building to the strictest common standard is cheaper than deciding on each request whose statute applies, and it means nobody has to prove residency to be left alone.
Oregon and Connecticut also give you the right to the specific third parties we disclosed your data to, not just the categories. Ask through any method in section 3.