Robinhood: Trading & Investing

"Marketing partners: We disclose information about you to third-party advertising and analytics services. For example, we may share personal data such as your hashed email address or your device ID with marketing partners to help us market Robinhood products to you across third-party websites and online services."

Robinhood shares personal data including hashed emails and device IDs with marketing partners, advertising services, analytics providers, banking partners, credit card issuers, and companies in which users hold securities.

"The information that is collected may be collected over time and combined with information collected on different websites and online services and across your devices, including to deliver targeted advertising to you, both on and off our websites."

Robinhood and its third-party partners collect data over time across multiple websites, online services, and devices, combining it to build profiles for targeted advertising both on and off Robinhood's properties.

"We may collect the approximate or precise geolocation of your mobile device in accordance with your device permissions. Please note that to trade Events Contracts, you may be required to enable access to precise geolocation data so that we can ensure compliance with applicable laws and regulations. We, and some of our third-party partners and service providers, may also approximate your location by your IP address."

Robinhood collects both precise GPS location and approximate IP-based location, sharing the latter with third-party partners. Precise location is effectively mandatory for certain features like Events Contracts trading.

"Stored Content, such as photos from your mobile phone gallery or contacts stored in your mobile device. We only collect this information with your permission. Biometric Data: We extract facial geometry data from selfies/photographs/videos to verify your identity and detect/prevent fraud."

Robinhood accesses contacts, photo galleries, and extracts biometric facial geometry data from selfies and photos. While contacts and photos require permission, biometric extraction is performed for identity verification and shared with third-party vendors.

"We retain your personal information for as long as necessary to achieve the original purpose(s) for which we collected it and to comply with relevant laws. For example, we may retain certain data for the duration of your relationship with us and for a period of up to 5 years after the relationship ends. We may also keep your personal data for a longer period if required by law, in connection with an ongoing or potential claim, or for another legitimate legal or regulatory reason."

Data is retained for up to 5 years after the account relationship ends, with vague exceptions allowing even longer retention for potential claims or other broadly defined legal reasons.

"This Privacy Statement will evolve with time, and when we update it, we will revise the "Effective Date" above and post the new statement and, in some cases, we provide additional notice (such as adding a statement to our website or sending you a notification). To stay informed of our privacy practices, we recommend you review the statement on a regular basis as you continue to use our Services."

Robinhood can change its privacy practices at any time by simply updating the statement, with no guarantee of direct notification. Users are expected to monitor the policy themselves.

"You may also initiate a full deletion of your social profile, which will remove your profile, posts, comments, follower data, and any other data collected through your use of Social (though underlying trade data is retained by the originating Robinhood financial entity as required by law). In some cases, we may have no obligation to accept any Data Subject Requests ("DSRs"), and in other cases, we may have no obligation to honor a particular DSR, because of the nature of the personal information that is collected or maintained."

Even after Social profile deletion, underlying trade data is retained indefinitely. Robinhood also claims broad exemptions from deletion requests by citing federal financial privacy law preemption, meaning most account data may never be fully deletable.