Webull Privacy Policy

This is Webull's privacy policy, explaining how the investment trading app collects and uses your personal and financial data — including your Social Security number, bank account information, trading activity, device location, and identity verification documents. The most important thing to know is that Webull may share your personal and financial data with affiliated companies and third-party marketing partners, and your data may be transferred to and stored in countries outside the US, including potentially China given Webull's corporate structure. You can submit a data access, deletion, or opt-out request by contacting Webull's privacy team at the contact details provided in the policy.

This privacy policy, published by Webull Technologies Limited, governs the collection, use, storage, and disclosure of personal information from users of the Webull trading platform, with legal basis grounded in user consent, contractual necessity, and legitimate interests under applicable data protection frameworks. The policy obligates Webull to collect extensive categories of personal and financial data — including government-issued ID, tax information, bank account details, trading history, device identifiers, IP addresses, and biometric data for identity verification — and permits sharing this data with affiliated entities, service providers, regulators, and business partners. A notably broad provision permits Webull to share personal data with 'third-party partners' for marketing and analytics purposes, and the policy allows data transfers to jurisdictions outside the user's home country without specifying adequacy mechanisms, creating elevated cross-border transfer risk given Webull's China-linked corporate structure. The policy engages CCPA/CPRA (California Civil Code §1798.100 et seq.), GDPR (where EU users are involved), FINRA and SEC data retention obligations, and FinCEN AML/KYC requirements under the Bank Secrecy Act; material compliance considerations include the adequacy of consent mechanisms for marketing data sharing, the sufficiency of cross-border transfer safeguards, and obligations arising from Webull's status as a broker-dealer subject to Regulation S-P (17 CFR Part 248).