Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Webull does not sell personal information to third parties but does allow third parties to collect information through its services for advertising and marketing purposes. The policy also discloses that Webull does not respond to browser Do Not Track signals, and that third-party analytics providers may collect personal information about user activities across apps and websites.
This analysis describes what Webull's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy's distinction between not selling personal information and allowing third-party collection for advertising purposes is operationally significant under the CCPA and CPRA, as cross-context behavioral advertising arrangements may qualify as a sale or sharing of personal information under California law depending on the specific data flows involved. The Do Not Track non-response disclosure is a required California disclosure but signals that cross-site tracking through third parties is not blocked by default.
Interpretive note: Whether Webull's third-party advertising data collection arrangements constitute sharing under CPRA definitions depends on the specific data flows and contractual arrangements involved, which are not fully detailed in the document.
Under this clause, California residents have CCPA rights to request information about data collection and to request deletion, but the policy states Webull does not sell personal information. Third parties are permitted to collect behavioral data through Webull's services for advertising purposes, and browser Do Not Track signals are not acted upon. California residents can submit access or deletion requests by contacting Webull directly.
Cross-platform context
See how other platforms handle CCPA Rights and Do Not Track Non-Response and similar clauses.
Compare across platforms →Monitoring
Webull has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Right to opt out of the "sale" of personal information. California residents have the right to request that we not sell their personal information to third parties, as those terms are defined by California Civil Code Section 1798.140. We do not sell information about you to third parties. In order to help us deliver advertising and marketing on other platforms, we do allow third parties to collect information through our Services. Do not track notice. We do not currently respond or take any action with respect to web browser "do not track" signals or other mechanisms that provide users the ability to exercise choice regarding the collection of personal information about that user's online activities over time and across third-party web sites or online services. We may allow third parties, such as companies that provide us with analytics tools, to collect personal information about your online activities over time and across different apps or web sites when you use our Services.Excerpt from Webull's Privacy Policy
1. REGULATORY LANDSCAPE: This provision engages the California Consumer Privacy Act and the California Privacy Rights Act (CPRA), including provisions governing the sale and sharing of personal information for cross-context behavioral advertising. The California Attorney General and the California Privacy Protection Agency have enforcement authority. The Do Not Track disclosure is required under California Business and Professions Code Section 22575. 2. GOVERNANCE EXPOSURE: Medium. The policy's assertion that it does not sell personal information while simultaneously permitting third-party advertising data collection may require evaluation under CPRA definitions of sharing for cross-context behavioral advertising, which extend beyond the traditional CCPA sale definition and may apply to no-monetary-consideration data flows. 3. JURISDICTION FLAGS: California creates the primary exposure. Nevada residents are separately addressed with a no-sale disclosure and an opt-out right. Other state privacy laws with similar sale or sharing definitions, including those in Virginia, Colorado, and Connecticut, may also apply depending on user population. 4. CONTRACT AND VENDOR IMPLICATIONS: Legal teams should assess whether the third-party advertising data collection arrangements constitute sharing under CPRA and, if so, whether opt-out mechanisms and contractual limitations on third-party use of the data satisfy applicable requirements. The policy does not name the specific advertising platforms involved. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should conduct a data flow audit of third-party advertising and analytics integrations to determine whether any arrangements qualify as sharing under CPRA, update the policy if necessary to include a Do Not Sell or Share link, and assess whether the current opt-out process for CCPA purposes is accessible and operationally functional.
The policy's distinction between not selling personal information and allowing third-party collection for advertising purposes is operationally significant under the CCPA and CPRA, as cross-context behavioral advertising arrangements may qualify as a sale or sharing of personal information under California law depending on the specific data flows involved. The Do Not Track non-response disclosure is a required California disclosure but …
Under this clause, California residents have CCPA rights to request information about data collection and to request deletion, but the policy states Webull does not sell personal information. Third parties are permitted to collect behavioral data through Webull's services for advertising purposes, and browser Do Not Track signals are not acted upon. California residents can submit access or deletion requests …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Webull.