If you live in California, you have legal rights to see what data Webull holds about you, ask for it to be deleted, and opt out of any sale of your data, and Webull states it will not penalize you for exercising those rights.
This analysis describes what Webull's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights are legally enforceable under California law and give California-based investors meaningful control over their financial and personal data held by Webull.
California residents can request a copy of all personal information Webull holds about them, ask for deletion, and opt out of data sales, providing concrete legal tools to limit how their investment data is used. The non-discrimination provision means exercising these rights should not affect your access to Webull's services.
How other platforms handle this
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
California law gives residents the right to know what personal information we collect, use, share or sell; to delete personal information under certain circumstances; to opt-out of the sale or sharing of their personal information; to correct inaccurate personal information; to limit the use and dis...
If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell about you. You have the right to request deletion of your personal information, subject to certain exceptions. You have the right to opt out of the sale or sharing of your perso...
Monitoring
Webull has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you have the right to request that we disclose what personal information we collect, use, disclose, and sell about you. You have the right to request that we delete personal information we have collected from you. You have the right to opt out of the sale of your personal information. We will not discriminate against you for exercising any of your rights under the CCPA.— Excerpt from Webull's Webull Privacy Policy
(1) REGULATORY LANDSCAPE: This provision directly engages the California Consumer Privacy Act as amended by the California Privacy Rights Act. The CPRA expanded consumer rights to include correction of inaccurate personal information and the right to limit use of sensitive personal information, which may extend beyond what this provision explicitly describes. The California Privacy Protection Agency has primary enforcement authority under the CPRA, and the California Attorney General retains enforcement authority as well. (2) GOVERNANCE EXPOSURE: Medium. The operational implementation of CCPA and CPRA rights requests, including response timelines of 45 days with a possible extension, verification procedures, and the scope of deletion obligations, requires robust internal processes. The policy's non-discrimination commitment must be operationally enforced. (3) JURISDICTION FLAGS: Applies specifically to California residents. Other states with analogous privacy laws, including Virginia, Colorado, Connecticut, Texas, and others, may confer similar rights not explicitly addressed in this provision; the policy's California-focused framing may create gaps for residents of other states with active privacy legislation. (4) CONTRACT AND VENDOR IMPLICATIONS: Deletion requests from California residents require Webull to instruct service providers and contractors to also delete the relevant personal information, creating downstream contractual obligations that must be reflected in vendor agreements. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the rights request intake process can meet CCPA and CPRA response deadlines, that verification procedures do not create undue barriers to rights exercise, and that the scope of deletion obligations accounts for data held by service providers and affiliates. The policy should be reviewed to confirm it addresses the CPRA's expanded category of sensitive personal information and the right to limit its use.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These rights are legally enforceable under California law and give California-based investors meaningful control over their financial and personal data held by Webull.
California residents can request a copy of all personal information Webull holds about them, ask for deletion, and opt out of data sales, providing concrete legal tools to limit how their investment data is used. The non-discrimination provision means exercising these rights should not affect your access to Webull's services.
ConductAtlas has identified this type of provision across 10 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Webull.