Do Not Sell or Share My Personal Information

1. Yes, we sell personal information

PayPerMerchant sells merchant cash advance applications to established business brokerages, and is paid $60 per lead for doing it. Under Cal. Civ. Code 1798.140(ad)(1) that transfer is a sale of personal information, and we use that word rather than the word sharing. There is no small business exemption that changes it.

This page is how you stop it. Opting out is free, it does not require an account, and it does not change the service you get from us in any way.

What we collect and who buys it is set out in the Privacy Policy. Note that this website itself has no forms and runs no advertising or analytics technology at all, so nothing is collected or sold from this page. The information we sell is the merchant applications submitted on our separate advertising properties.

2. Global Privacy Control

We do not process Global Privacy Control signals yet. Global Privacy Control is a browser setting that sends an opt out signal to every site you visit. We are building the server side handling for it. Until that is live, a GPC signal sent to this site has no effect, and the way to opt out is the email or postal request below.

This is an obligation we owe, not a feature we are choosing. 11 CCR 7025(b) makes processing that signal mandatory for any business that sells personal information, and 7025(e) is explicit that posting a Do Not Sell link does not substitute for it. We say so here rather than leave you to discover it.

A link on a page is not a substitute for the signal. 11 CCR 7025(e) says so directly: a business that posts a Do Not Sell link must still process opt out preference signals. Both are required, which is why this page leads with the signal and not with a form.

3. The other ways to opt out

11 CCR 7026(a)(1) requires an opt out preference signal and at least one interactive method. You do not have to give a reason, and we will not ask you for more information than we need to find your record.

Authorized agents. You may appoint someone to submit the request for you. We will ask for written permission signed by you, and we may ask you to verify your own identity.

Verification. For an opt out we ask only for enough to match your record, normally the email address and telephone number on the application. We do not use it for anything else and we do not require an account.

4. What happens after you ask

1. We stop selling your information. 11 CCR 7026(f)(1) sets a ceiling of 15 business days, and 7026(f)(3)(A) requires us to stop sooner where we can, so the 15 days is a limit and not a schedule.
2. We tell the buyers. Under 11 CCR 7026(f)(2) we notify every third party we sold your information to between the moment you asked and the moment we complied, direct them to comply with your request, and direct them to forward it to anyone they passed it to in that window.
3. We record it. The opt out is logged and kept, and your record is suppressed so a later submission does not quietly undo it.
4. Nothing about your service changes. We will not deny you anything, charge you a different price, or give you a lower quality of service because you opted out.

5. What opting out does not do

This is the part most people are surprised by, so it is stated plainly rather than buried.

• It does not reach copies a funder already holds. Once your application has been transferred, that company holds its own copy and keeps its own records. Opting out with us stops future sales. To have an existing copy deleted, or to stop that company contacting you, contact them directly. The buyers are named on the roster referenced in the Privacy Policy.
• It is not the same as a do not call request. To stop calls and texts, revoke consent: reply stop, quit, end, revoke, opt out, cancel or unsubscribe to any text, or tell any caller to put you on the do not call list. Under 47 CFR 64.1200(a)(10) any wording a reasonable person would read as a request to stop is effective, and it must be honored within 10 business days.
• It does not delete anything by itself. Deletion and correction are separate rights. Both are in the Privacy Policy, and both use the request methods in section 3.

6. Nevada, and other states

Nevada. A Nevada resident may submit a verified request to opt out of the sale of covered information under NRS 603A.345. We respond within 60 days, extendable by 30 days where reasonably necessary.

Everywhere else. We do not gate this page by state. If you send the signal or the request, we honor it, wherever you live. Building to the strictest common standard is cheaper than deciding on each request whose statute applies, and it means nobody has to prove residency to be left alone.

Oregon and Connecticut also give you the right to the specific third parties we disclosed your data to, not just the categories. Ask through any method in section 3.