Webull automatically collects data about your device, your location via IP address, and your detailed in-app behavior including every page you visit and link you click on the platform.
This analysis describes what Webull's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Automated collection of device identifiers and detailed behavioral data creates a persistent profile of how you use the platform, which the policy permits to be used for analytics and potentially shared with third parties.
Every action you take within the Webull app or website, including which stocks you research and when you trade, may be recorded and used to build a behavioral profile. This profile can inform marketing and analytics activities, including by third parties if the data is shared.
How other platforms handle this
We receive information about your visits and interactions with services other than our Services, such as websites that have our ads or one of our plugins (such as 'Apply with LinkedIn') or our share buttons or when you sign into others' services using your LinkedIn account. We also receive informati...
When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...
American does not knowingly collect personal information directly from children – persons under the age of 13, or another age if required by applicable law – other than when required to comply with the law or for safety and security reasons. Due to the nature of our Services, we may collect travel i...
Monitoring
Webull has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We automatically collect certain information when you use our services, including information about your device, your IP address, browser type, operating system, referring URLs, device identifiers, and information about your use of our services, such as the pages you visit, links you click, and other actions you take.— Excerpt from Webull's Webull Privacy Policy
(1) REGULATORY LANDSCAPE: Automated collection of device identifiers and behavioral data engages the FTC Act's framework on data collection transparency and the CCPA and CPRA's requirements for disclosure of categories of personal information collected, including inferences drawn from behavioral data. The CPRA specifically classifies inferences drawn from personal information to create consumer profiles as a category of personal information subject to disclosure and deletion rights. Cookie and device identifier practices may also engage state electronic privacy frameworks depending on jurisdiction. (2) GOVERNANCE EXPOSURE: Medium. Behavioral data collection at the level described is common among financial technology platforms, but the combination with financial trading activity data creates a profile with elevated sensitivity. The use of this data for third-party analytics and marketing warrants review against purpose limitation principles under applicable privacy law. (3) JURISDICTION FLAGS: California residents have CPRA rights regarding inferences drawn from personal information and can request deletion of inferred profiles. EU and UK users have rights under GDPR regarding automated profiling and may have rights to object to processing of behavioral data for marketing purposes. Illinois does not create specific heightened exposure for behavioral data of this type absent biometric identifiers. (4) CONTRACT AND VENDOR IMPLICATIONS: Contracts with third-party analytics vendors receiving behavioral and device-level data should specify purpose limitations and data retention schedules. If behavioral data is shared with advertising technology vendors, contractual protections should address onward transfer restrictions and the CPRA's definition of sharing for cross-context behavioral advertising. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should confirm that the categories of behavioral data collected are accurately disclosed in the policy's data inventory and that cookie consent mechanisms on the web platform meet applicable state or regional requirements. Data retention schedules for behavioral logs should be reviewed to ensure they reflect minimum necessary periods.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Automated collection of device identifiers and detailed behavioral data creates a persistent profile of how you use the platform, which the policy permits to be used for analytics and potentially shared with third parties.
Every action you take within the Webull app or website, including which stocks you research and when you trade, may be recorded and used to build a behavioral profile. This profile can inform marketing and analytics activities, including by third parties if the data is shared.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Webull.