Webull may share your personal and financial data with affiliated companies, outside vendors, and marketing partners, including for those third parties' own marketing purposes if you consent.
This analysis describes what Webull's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause establishes the operational framework for information distribution across the company's corporate structure and external service relationships. It defines three categories of authorized recipients—affiliated entities, operational service providers, and external marketers—with different consent requirements for each category.
Interpretive note: The precise scope of consent required for third-party marketing sharing, and whether the policy's consent mechanism satisfies Regulation S-P opt-out standards, depends on operational implementation and regulatory interpretation.
Your trading activity, financial data, and personal identifiers may be shared with a network of affiliates and third-party marketers, meaning your investment behavior could inform commercial targeting beyond Webull's own communications. If you have provided consent for third-party marketing use, withdrawing that consent may require an affirmative opt-out request.
How other platforms handle this
We may share personal information with third-party service providers and partners who support our business operations, including identity verification providers, payment processors, analytics providers, marketing partners, and blockchain analytics companies.
You may elect to use or integrate platforms, add-ons, services, or products not provided by Exafunction ("Third-Party Platforms") (e.g. User IDE's, Web Search, MCP Servers) subject to your agreement with the relevant provider and not this Agreement. We do not control nor shall we have liability for ...
We receive some of the data mentioned above from third parties... If you connect your Spotify account to a third party application, service or device, we may collect and use information from them. This collection is to make the integration possible... We work with technical service partners that giv...
Monitoring
Webull has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We may share your personal information with our affiliates, subsidiaries, and business partners. We may also share your information with third-party service providers that perform services on our behalf, such as data analytics, marketing, and customer support. We may share your information with third parties for their own marketing purposes with your consent.— Excerpt from Webull's Webull Privacy Policy
(1) REGULATORY LANDSCAPE: Sharing of customer financial information with affiliates and non-affiliates by a broker-dealer triggers Regulation S-P opt-out notice requirements. The CCPA and CPRA impose separate obligations regarding disclosure of data sharing with third parties and provide California residents with the right to opt out of sale or sharing of their personal information for cross-context behavioral advertising. The FTC Act applies to the accuracy and completeness of disclosures about third-party sharing practices. (2) GOVERNANCE EXPOSURE: High. The combination of affiliate sharing and third-party marketing sharing, particularly for a platform holding sensitive financial data, creates layered regulatory obligations. Regulation S-P requires delivery of a clear and conspicuous opt-out notice before sharing nonpublic personal information with non-affiliated third parties for marketing. Whether the policy's consent mechanism satisfies Regulation S-P's opt-out standard requires legal evaluation. (3) JURISDICTION FLAGS: California residents have CPRA rights to opt out of sharing for cross-context behavioral advertising and to request disclosure of third parties to whom their data has been sold or shared. EU and UK users may have additional rights under GDPR requiring a lawful basis for each sharing purpose, and consent-based sharing with third-party marketers under GDPR requires freely given, specific, and withdrawable consent. (4) CONTRACT AND VENDOR IMPLICATIONS: Contracts with third-party marketing and analytics partners should include data processing agreements, purpose limitations, and onward transfer restrictions. Affiliate sharing arrangements should be documented and auditable to demonstrate compliance with Regulation S-P's affiliate exception requirements. (5) COMPLIANCE CONSIDERATIONS: Legal teams should audit whether current opt-out mechanisms for Regulation S-P non-affiliate sharing are conspicuous and operationally functional, and whether CCPA opt-out of sharing mechanisms are correctly implemented on the platform. The distinction between consent-based third-party marketing sharing and Regulation S-P opt-out sharing requires careful legal mapping to ensure the policy accurately reflects operational practice.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The clause establishes the operational framework for information distribution across the company's corporate structure and external service relationships. It defines three categories of authorized recipients—affiliated entities, operational service providers, and external marketers—with different consent requirements for each category.
Your trading activity, financial data, and personal identifiers may be shared with a network of affiliates and third-party marketers, meaning your investment behavior could inform commercial targeting beyond Webull's own communications. If you have provided consent for third-party marketing use, withdrawing that consent may require an affirmative opt-out request.
ConductAtlas has identified this type of provision across 4 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Webull.