Protecting Customer Information

At Webull, protecting your personal information is more than just a regulatory obligation, it is a fundamental part of who we are as a company. We understand that trust is the cornerstone of any financial relationship, and we are committed to safeguarding the data you share with us. Beyond meeting industry standards and compliance requirements, we hold ourselves to the highest ethical standards to ensure your privacy and security.

This FAQ page is designed to answer common questions about how we protect your information, demonstrating our dedication to transparency and your peace of mind as a valued client.

Why does Webull collect my personal information?

Webull collects personal information to provide and enhance its services, ensure compliance with legal obligations, and improve user experience. This includes collecting your legal name, date of birth, and identity number so that we can verify your identity in order to comply with South African law. We also collect contact data (like email and phone number), financial data (including bank account details and income), and usage information (such as device identifiers and browsing activity) in order to enhance our services and to prevent fraud.

How does Webull protect my personal information?

Webull employs industry-leading security measures to protect your personal information. Our safeguards include a wide range of practices, highlighted by:

• System features and configuration settings designed to authorise user access while restricting unauthorised users from accessing information not needed for their role;

• Use of intrusion detection systems to prevent and identify potential security attacks from users outside the boundaries of the system;

• Regular vulnerability scans over the system and network, and penetration tests over the production environment;

• Operational procedures for managing security incidents and breaches, including notification procedures;

• Use of advanced encryption technologies to protect customer data both at rest and in transit;

• System performance and availability monitoring mechanisms to help ensure the consistent delivery of the system and its components

• Business continuity and disaster recovery plans that include detailed instructions, recovery point objectives, recovery time objectives, roles, and responsibilities.

• We are committed to safeguarding your information through robust physical, technical, and administrative security measures.

Is my data encrypted at Webull?

Yes, your data is encrypted both in transit and at rest. Webull uses state-of-the-art encryption protocols to encrypt all data exchanged between our servers and your device. We also store sensitive information using strong encryption algorithms to provide an additional layer of protection.

Where is my data stored?

Webull utilises Amazon Web Services (AWS) data centre exclusively for all its production platforms and data storage platforms. Specifically, Webull’s primary data centre is located in AWS’s Africa and Australia Cloud with physical location in South Africa. Refer to our privacy notice for more information.

How does Webull protect my account from unauthorised access?

Webull offers multi-factor authentication (MFA) to enhance the security of your account. In addition, we have implemented device and behavioural monitoring to detect and block any suspicious login attempts or activities, including Abnormal IP Address login monitoring.

Does Webull share my information with third parties?

Webull only shares personal information with trusted third-party service providers as necessary to offer our services or comply with legal obligations. We have stringent agreements in place with these providers to ensure they maintain the same level of security and privacy as we do. Webull does not sell customer data to third parties. Webull does not provide your personal information to third-party marketers.

How can I manage my data and privacy settings?

You can manage your privacy settings through the Webull app . We provide clear controls for you to access, update, and delete your personal information as required. If you have specific concerns about your data, our support team is available to help.

What steps does Webull take to ensure compliance with data privacy laws?

Webull complies with all applicable data privacy laws and regulations, including Protection of Personal Information Act (POPIA), 2013. We also have dedicated teams focused on privacy and data security to ensure our practices remain compliant with evolving regulations.

What should I do if I suspect my information has been compromised?

If you suspect unauthorised access or any compromise of your account or personal information, please contact Webull's support team immediately. We will work with you to secure your account and investigate any potential security issues.