Webull Privacy Policy

This document is Webull Technologies Limited's privacy policy, governing the collection, use, storage, and sharing of personal data for users of the Webull trading platform, with its stated legal basis appearing to rest on user consent and legitimate business operations across multiple jurisdictions. The policy states that Webull collects a broad range of personal information including identity data, financial data, device identifiers, location information, trading activity, and behavioral data derived from platform use, and the terms authorize sharing this information with affiliates, service providers, financial institutions, regulators, and third-party business partners. Notably, the policy asserts the right to share personal data with a wide range of third parties for purposes including marketing and analytics, and the document's scope of data collection across device-level identifiers, behavioral tracking, and financial activity is extensive for a retail investment platform, though applicable law in relevant jurisdictions may constrain certain asserted sharing practices. The policy engages CCPA and other U.S. state privacy frameworks given its explicit California resident rights section, and as a financial services platform it operates within a regulatory environment that includes FINRA, SEC, and CFPB oversight; the policy's treatment of data sharing with affiliates and third parties may require evaluation under Regulation S-P and applicable state financial privacy statutes. Compliance teams should note that the document's cross-border data transfer provisions and the broad affiliate-sharing structure create material obligations under any jurisdiction requiring data transfer safeguards or financial data confidentiality protections.