Webull automatically collects data about your device, your location via IP address, and your detailed in-app behavior including every page you visit and link you click on the platform.
This analysis describes what Webull's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Automated collection of device identifiers and detailed behavioral data creates a persistent profile of how you use the platform, which the policy permits to be used for analytics and potentially shared with third parties.
This new provision separately details automatic tracking and behavioral collection practices, replacing the previous 'Targeted Advertising and Behavioral Tracking' provision with more specific technical details.
View full change record →Every action you take within the Webull app or website, including which stocks you research and when you trade, may be recorded and used to build a behavioral profile. This profile can inform marketing and analytics activities, including by third parties if the data is shared.
How other platforms handle this
We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.
Monitoring
Webull has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We automatically collect certain information when you use our services, including information about your device, your IP address, browser type, operating system, referring URLs, device identifiers, and information about your use of our services, such as the pages you visit, links you click, and other actions you take.— Excerpt from Webull's Webull Privacy Policy
(1) REGULATORY LANDSCAPE: Automated collection of device identifiers and behavioral data engages the FTC Act's framework on data collection transparency and the CCPA and CPRA's requirements for disclosure of categories of personal information collected, including inferences drawn from behavioral data. The CPRA specifically classifies inferences drawn from personal information to create consumer profiles as a category of personal information subject to disclosure and deletion rights. Cookie and device identifier practices may also engage state electronic privacy frameworks depending on jurisdiction. (2) GOVERNANCE EXPOSURE: Medium. Behavioral data collection at the level described is common among financial technology platforms, but the combination with financial trading activity data creates a profile with elevated sensitivity. The use of this data for third-party analytics and marketing warrants review against purpose limitation principles under applicable privacy law. (3) JURISDICTION FLAGS: California residents have CPRA rights regarding inferences drawn from personal information and can request deletion of inferred profiles. EU and UK users have rights under GDPR regarding automated profiling and may have rights to object to processing of behavioral data for marketing purposes. Illinois does not create specific heightened exposure for behavioral data of this type absent biometric identifiers. (4) CONTRACT AND VENDOR IMPLICATIONS: Contracts with third-party analytics vendors receiving behavioral and device-level data should specify purpose limitations and data retention schedules. If behavioral data is shared with advertising technology vendors, contractual protections should address onward transfer restrictions and the CPRA's definition of sharing for cross-context behavioral advertising. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should confirm that the categories of behavioral data collected are accurately disclosed in the policy's data inventory and that cookie consent mechanisms on the web platform meet applicable state or regional requirements. Data retention schedules for behavioral logs should be reviewed to ensure they reflect minimum necessary periods.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Automated collection of device identifiers and detailed behavioral data creates a persistent profile of how you use the platform, which the policy permits to be used for analytics and potentially shared with third parties.
Every action you take within the Webull app or website, including which stocks you research and when you trade, may be recorded and used to build a behavioral profile. This profile can inform marketing and analytics activities, including by third parties if the data is shared.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Webull.