This Policy describes how and when we collect, use, disclose, transfer, process, and share your information across our websites, application programming interfaces, text messages, email notifications, applications, buttons, and our other covered Services that link to this Policy, and from our partners and other third parties. When using any of our Services you consent to the collection, processing, transfer, storage, disclosure, and use of your information as described in this Policy. This includes any information you choose to provide that is deemed sensitive under applicable law. This Policy is a legally binding agreement between you ("you" or "user") and us.
When this Policy mentions "we" or "us" it refers to the controller of your information under this Policy. Irrespective of which country you live in, you authorize us to transfer, store, process and use your information in any country from which we operate. In some of these countries, the privacy and data protection laws and rules regarding when government authorities may access data may vary from those in the country where you live.
If you have any questions about this Policy or the Services, please contact us (see HOW TO CONTACT US below).
1. THE INFORMATION WE COLLECT
When you use our Services, your personal information may be collected and used in the following scenarios:
2. HOW WE USE YOUR PERSONAL INFORMATION
When you use our Services, your personal information may be used in the following scenarios:
4. HOW WE SHARE, TRANSFER AND PUBLICLY DISCLOSE YOUR INFORMATION
We do not disclose your private personal information except in the limited circumstances described here.
Service providers. We engage service providers to perform certain functions and provide certain services. For example, we use a variety of third-party services to help us understand and improve the use of our Services, such as Google Analytics. We may share your private personal information with these service providers, subject to our obligations to adhere to this Policy and any other appropriate confidentiality and security measures, and on the condition that the third parties use your private personal data only on our behalf and pursuant to our instructions. We share your payment information, including your credit or debit card number, card expiration date, CVV code, and billing address with payment services providers to process payments, prevent, detect and investigate fraud or other prohibited activities, facilitate dispute resolution such as chargebacks or refunds, and for other purposes associated with the acceptance of credit or debit cards.
Law and harm. Notwithstanding anything to the contrary in this Policy, we may preserve or disclose your information if we believe that it is reasonably necessary to comply with a law, regulation, legal processes, or governmental requests; to protect the safety of any person; to address fraud, security or technical issues; or to protect our or our users’ rights or property. However, nothing in this Policy is intended to limit any legal defenses or objections that you may have to the request of a third-party, including a government, to disclose your information.
Business transfers and affiliates. In the event that we are involved in a bankruptcy, merger, acquisition, reorganization or sale of assets, your information may be sold or transferred as part of that transaction. This Policy will apply to your information as transferred to the new entity. We may also disclose information about you to our corporate affiliates, including our affiliates that provide financial services, in order to help provide, understand, and improve our Services and our affiliates’ services.
Public information. We may share or disclose your public information, such as your public user profile information and public comments.
5. HOW WE PROTECT YOUR INFORMATION
Webull uses reasonable, industry standard security measures to protect information under our control from loss, misuse, unauthorized access, disclosure, alteration, and destruction. We maintain appropriate physical, electronic and procedural safeguards, including restricting access to personal information on a need-to-know basis, and limiting the amount and type of information available for downloading or transmittal. We also regularly conduct audits to ensure the effectiveness of our system. Please understand, however, that no security system is impenetrable. We cannot guarantee that our security measures will prevent hackers from illegally obtaining this information, or that our database and/or systems will not be subject to a cyber-attack.
We have established a data breach management plan. If there is a data breach involving the personal information of our users, we will activate the data breach management plan to contain the data breach to prevent data from being further compromised and take appropriate measures to inform you, including in the form of push notifications, public announcements, or other appropriate means.
You acknowledge that no safeguards are guaranteed to be completely effective. We strongly suggest that you perform all uploads in a secure internet environment and use a strong password for your account. Please contact us (see HOW TO CONTACT US below) immediately if you have reason to believe your account security has in any way been compromised.
Webull retains your personal information for as long as necessary to accomplish the purpose for which it was collected, to meet our legal and regulatory obligations including compliance with our records retention practices, or as required or permitted by applicable laws and as permitted to meet our legitimate interests.
6. ACCESSING AND MODIFYING YOUR PERSONAL INFORMATION
If you are a registered user of our Services, we provide you with tools and account settings to access, correct, delete, or modify the personal information you provided to us in connection with your account. You also can download certain account information, including your portfolio.
You can permanently delete your Webull account. When your account has been deactivated, information relating to your account, including your name, username, and public profile, is no longer viewable on our Services, including the Webull app. For up to 30 days after deactivation it is still possible to restore your account if it was accidentally or wrongfully deactivated. Absent a separate arrangement between you and us to extend your deactivation period, after 30 days, we will begin the process of deleting your account from our systems, which can take up to a week.
Keep in mind that search engines and other third-parties may still retain copies of your public information, such as any posts and comments you made in the Webull Community, even after you have deleted the information from the Services or deactivated your account.
7. HOW WE PROTECT THE INFORMATION OF MINORS
The Services are not directed to children, we do not intentionally collect information from children, and we request that children not provide any personal information to us. If you have any concerns about your child’s privacy, please contact us (see HOW TO CONTACT US below). Should we discover that we have unintentionally collected personal information from your child without your consent, we will take steps to delete the information as soon as possible.
8. HOW YOUR INFORMATION MOVES GLOBALLY
We store your personal information on servers in the country or region that we provide our Services from and you will be deemed to accept their jurisdiction over your information.
Our products and Services are available across a number jurisdictions, each of which has different data protection laws that vary in the amount of protection they provide. In all cases, we will make reasonable efforts to ensure that your personal information is adequately and equally protected. In providing our Services, your personal information may be accessed by our affiliates in jurisdictions other than where you use our Services.
Webull will not transfer any personal data relating to a natural person located in the European Economic Area, the United Kingdom, or any other jurisdiction that restricts outbound data transfer, from the country of origin without appropriate safeguards as required by applicable law and regulations. You may receive a copy of those safeguards by contacting us (see HOW TO CONTACT US below).
9. CALIFORNIA RESIDENTS
Under the CCPA, California residents have certain rights (set forth below) regarding their personal information.
Right to know. California residents (and their households) have the right to request certain information about whether we collect, use, disclose and sell personal information about them, and to request to know the personal information that we have. To make such a request, please contact us. Please be advised that we will verify all such requests prior to providing any personal information including by requiring you to respond to an email sent to the email you used when making your request and/or the email that pertains to your account. Please be advised that we are only required to respond to two requests per consumer each year. These reports will be provided free of charge.
Right to request deletion. If you are a California resident, you may request the deletion of personal information we have collected from you. To make such a request, please contact us. Please be advised that we will verify all such requests prior to providing any personal information including by requiring you to respond to an email sent to the email you used when making your request and/or the email that pertains to your account.
Right to opt out of the "sale" of personal information. California residents have the right to request that we not sell their personal information to third parties, as those terms are defined by California Civil Code Section 1798.140. We do not sell information about you to third parties. In order to help us deliver advertising and marketing on other platforms, we do allow third parties to collect information through our Services. Please see HOW WE SHARE, TRANSFER AND PUBLICLY DISCLOSE YOUR INFORMATION above for more details, including choices available to you.
In the past twelve months, we collected personal information as described in THE INFORMATION WE COLLECT above. We share this information as described in HOW WE USE YOUR INFORMATION above.
Nondiscrimination. We will not discriminate against California residents who exercise their privacy rights.
Authorized agent. California residents may use an authorized agent to make requests on their behalf. We require the authorized agent to provide us with proof of the California resident’s written permission (for example, a power of attorney) that shows the authorized agent has the authority to submit a request for the California resident. In addition to providing this proof, the authorized agent must follow the appropriate process described above to make a request.
California shine the light law. We do not share your personal information with other businesses or third parties for their own direct marketing purposes.
Do not track notice. We do not currently respond or take any action with respect to web browser "do not track" signals or other mechanisms that provide users the ability to exercise choice regarding the collection of personal information about that user’s online activities over time and across third-party web sites or online services. We may allow third parties, such as companies that provide us with analytics tools, to collect personal information about your online activities over time and across different apps or web sites when you use our Services.
10. NEVADA RESIDENTS
We do not sell consumers’ covered information for monetary consideration (as defined in Chapter 603A of the Nevada Revised Statutes). However, if you are a Nevada resident, you have the right to submit a request directing us not to sell your personal information. To submit such a request, please contact us using the contact details in HOW TO CONTACT US below.
11. EUROPEAN ECONOMIC AREA AND UNITED KINGDOM RESIDENTS
If you are a resident of the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. Notwithstanding the foregoing, we reserve the right to keep any information in our archives that we deem necessary to comply with our legal obligations, resolve disputes and enforce our agreements.
We may revise this Policy from time to time. The most current version of the Policy will govern our use of your information. If we make any change to this Policy that, in our sole discretion, is material, we will update the Policy on our website or our app without a separate notification sent to you. Please refer to the most updated version of this Policy on our Webull app or our website. By continuing to access or use the Services after those changes become effective, you agree to be bound by the revised Policy.
13. HOW TO CONTACT US
If you have any questions, comments or suggestions about this Policy please contact us via email at email@example.com.
We will normally reply to you within fifteen (15) business days.
No content on the Webull website shall be considered a recommendation or solicitation for the purchase or sale of securities, options or other investment products. All information and data on the website is for reference only and no historical data shall be considered as the basis for judging future trends.