At Robinhood, we take privacy and security seriously. This Robinhood Markets Online Privacy Statement (the “Privacy Statement”) outlines how Robinhood Markets and its affiliates (collectively, “we,” “our,” or “us”) process the information we collect through our website, mobile apps, and other services or interactions that include an authorized link or reference to this privacy notice in the United States except in contexts where you are applying for or obtaining certain financial products or services. This Privacy Statement does not apply to information that we collect about individuals who apply for or obtain our financial products and services for personal, family, or household purposes. For more information about how we collect, disclose, and secure information online when you apply for or obtain those financial products and services, review our Robinhood Financial Entities US Online Privacy Statement. This policy also does not apply to Sherwood Media, LLC.

Select the link in the following list to jump to the applicable section, including to review additional state-specific privacy disclosures that may be relevant depending on where you reside and the nature of our relationship with you.

1. INFORMATION WE COLLECT AND HOW WE COLLECT IT
2. HOW WE USE YOUR INFORMATION
3. DISCLOSURES OF INFORMATION
4. THIRD-PARTY TRACKING AND ONLINE ADVERTISING
5. YOUR CONTROLS
6. ADDITIONAL US STATE PRIVACY RIGHTS
7. DATA RETENTION
8. CHILDREN
9. CHANGES TO THIS PRIVACY STATEMENT
10. HOW TO CONTACT US

Information You Provide

We collect information you provide when you use, or apply to use, our Services or otherwise engage or communicate with us, such as:

• Identity Data, such as your name, date of birth, marital status, social security number, photos of your face and government-issued identification documents, and other data on government-issued identification documents;
• Contact Data, such as your email address, mailing address, and telephone number;
• Financial Data, such as your bank account and payment card details, and information about your income, account balances, financial transaction history, credit history, tax information, and credit scores;
• Profile Data, such as your username and password, your knowledge assessment results, your interests, preferences, feedback, and survey responses;
• Stored Content, such as photos from your mobile phone gallery or contacts stored in your mobile device or email accounts. We only collect this information with your permission;
• Information you provide us when using our Pay & Request Service: In order to conduct a money transfer using our Pay & Request Service, we collect information (including the name and an email address or phone number) from you about the intended recipient of the payment you request us to make; and
• Other Information You Provide: We collect additional personal information that you choose to provide to us, such as via focus groups, survey responses, contests, sweepstakes, customer support, data you provide in memos when using our Pay & Request Service, or other means. If you do choose to upload your photograph to our Service, please note that all images must adhere to our App Use Standards which you are required to comply with to use any of the Robinhood Services. You may also provide us with information about additional authorized users, including Identity Data, Contact Data, and Financial Data relating to them.

Information We Collect Automatically or Generate

As is true of many digital platforms, we also collect certain information about you automatically when you use our Services, such as:

• Usage Information: We collect information about your activity on our Services, which includes device identifiers (like IP address or mobile device identifiers), pages or features you use, time and date of access, and other similar usage information.
• Transactional Information: When you receive, submit, or complete a transaction via the Services, we collect information about the transaction, such as transaction amount, type and nature of the transaction, time and date of the transaction, and location of the merchant for credit card transactions.
• Credit Card Rewards Information: We process information relating to the credit card rewards you accumulate and redeem as a credit card customer, including the partners and/or merchants with whom you redeem the rewards.
• Location and Device Data: We may collect the GPS location of your mobile device in accordance with your device permissions. You can stop the collection of this precise location information at any time (review Your Controls for details). Google uses technologies to approximate your location, including IP address (review Google’s Privacy Policy located at https://policies.google.com/privacy to learn more about how they process this information). We also approximate your location by your IP address.
• Information Collected Through Tracking Technologies: We and our service providers also use technologies, including cookies and web beacons and software development kits (“SDKs”), to automatically collect certain types of usage and device information when you use our Services or interact with our emails. For example, the information collected through these technologies includes your IP address, browser type, internet service provider, platform type, device type, operating system, date and time stamp, a unique device or account ID, usage information, and other similar information. For information about how to disable cookies, review Your Controls.
• Inferred Data: We may also infer information about you such as your gender, based on your first name.

Information We Collect from Other Sources

We also obtain information about you from other sources as described below.

• Vendors and Business Partners: We collect information about you from companies that we do business with, such as name, contact data, inferences about your preferences and attributes, as well as inferred fraud risk, from identity verification and fraud prevention partners.
• Financial Account Linking: We may receive financial account information about you from third-parties, such as your financial institutions. For example, Robinhood offers account linking and aggregation services through Plaid, Inc. ("Plaid"). Your use of Plaid is subject to their End User Privacy Policy as well as their End User Services Agreement.
• Connected Services: If you link, connect, or log in to your Robinhood Account with a third-party service (e.g., Google, Apple), the third-party service may send us information such as your profile information from that service. This information varies and is controlled by that service or as authorized by you via your privacy settings at that service.
• Publicly Available Data: This may include contact information, your interactions with our social media platforms, and other information from publicly available sources, such as public websites.
• Advertising Data: We collect information in connection with our ad campaigns that surface on other platforms, such as the ads you click on and other interactions with our ads.
• Data from other users: If you are in another user’s contact list and they choose to disclose that list with us, then we will collect the contact information and your association with that user.
• Credit Information: We may receive credit-related information about you from third parties, such as credit bureaus. For example, if you apply for a credit card with Robinhood, we may collect your credit history and credit scores from credit bureaus and other partners.

We use the information we collect for purposes described below or as otherwise described to you at the point of collection.

• Maintain and provide our services, including to operate our website;
• Communicate with you, such as responses to inquiries, newsletters, or communications about offers you may be interested in such as product announcements, partner offerings, surveys, contests or sweepstakes, personalized advertising, and events or announcements;
• Customize content or ads;
• Facilitate contests, sweepstakes, and promotions and process and deliver entries and rewards;
• Monitor and improve our services, including analyzing usage, research, and development;
• Help protect the safety and security of our business, and users, such as to investigate and help prevent fraud or other unlawful activity;
• Protect or exercise our legal rights or defend against legal claims, including to enforce and carry out contracts and agreements; and
• Comply with applicable laws and legal obligations.
• Any other lawful purpose for which we obtain your consent.

We are committed to maintaining your trust, and we want you to understand when and with whom we disclose information about you. We disclose (or permit others to directly collect) information about you in the instances described below.

• Authorized vendors: We disclose information about you to vendors who perform services for us, such as mailing services, contest fulfillment, web hosting, marketing, advertising, and analytics services.
• Marketing Partners: We disclose information about you to third-party advertising and analytics services, as described in Third-Party Tracking and Online Advertising.
• Substantial corporate transactions: We may disclose information about you in connection with a substantial corporate transaction, a merger, consolidation, reorganization, financing, change in control or acquisition of all or a portion of our business by a third party, or in the unlikely event of a bankruptcy or similar proceeding.
• Legal purposes: We disclose information about you if we believe that disclosure is in accordance with, or required by, any applicable law or legal process or to protect and defend the rights, interests, safety, and security of Robinhood, our users, or the public.
• With your consent: We disclose information about you for any other purposes disclosed to you with your consent.

We may also use and disclose information with others in an aggregated or otherwise de-identified form that does not reasonably identify you.

We and third parties may use cookies, pixels, device identifiers, and similar technologies to collect information from and about your use of our websites, apps, and other online services or interactions, including when we use third-party advertising and analytics services to better understand your online activity and serve you targeted advertisements. The information collected includes your IP address, web browser, mobile network information, pages viewed, time spent, links clicked, conversion information, and other internet and electronic activity information and device information. We and our third-party partners use this information to, among other things, analyze and track data, determine the popularity of content, and deliver advertisements targeted to your interests on our website and other platforms, as well as to provide advertising-related services to us such as reporting, attribution, analytics, and market research.

Information collected and processed by these partners is subject to those partners’ own policies. For example, we may use Google Analytics for the purposes described in this section. Information collected and processed by Google is subject to Google’s policies, including their Privacy Policy. You can review Google’s Privacy Policy linked here: https://policies.google.com/privacy, as well as the “How Google uses information from sites or apps that use our services” article linked here: https://policies.google.com/technologies/partner-sites, for information about how Google processes the information it collects.

The information that is collected may be collected over time and combined with information collected on different websites and online services and across your devices, including to deliver targeted advertising to you, both on and off our websites. For more information about targeted advertising, including to learn about options for opting out of having your web browsing information used for targeted advertising purposes, please visit www.aboutads.info/choices. You should also review your mobile device settings and controls for features that allow you to opt out or opt in to having certain information collected for behavioral advertising purposes.

You may also have additional rights under state laws. For more information, review Additional US State Privacy Rights.

How to control your communications preferences: You can stop receiving promotional emails from us by clicking the “unsubscribe” link in those emails.

Cookie controls: Many web browsers are set to accept cookies and similar tracking technologies by default. If you prefer, you can set your browser to delete or reject these technologies. If you use a different device, change browsers, or delete the opt-out cookies that contain your preferences, you may need to perform the opt-out task again.

This section provides additional details about personal information and the rights afforded to residents of certain US states under applicable state laws (collectively, “State Privacy Laws”). Please note that these State Privacy Laws do not apply to all personal information that we collect and process. For example, they do not apply where personal information is governed instead by federal financial privacy laws, such as the Gramm-Leach-Bliley Act (“GLBA”). To learn more about your rights under GLBA, review the Robinhood Financial Entities US Online Privacy Statement and the GLBA-financial privacy notices linked therein.

Subject to certain limitations and exceptions, these State Privacy Laws provide their residents with certain rights. Depending on the state in which you are a resident and your relationship to us, and subject to the limitations provided in these State Privacy Laws, you may have the right to:

• Confirm whether Robinhood Markets processes your personal information and obtain information about our processing activities;
• Correct inaccurate personal information;
• Receive a copy of or details (in a readily usable format) about the categories and specific elements of personal information we collect;
• Delete your personal information;
• Opt out of any “sales,” “sharing,” “targeted advertising,” or “profiling” for certain consequential decisions (as these terms are defined in these State Privacy Laws); and
• Not be discriminated against for exercising these rights.

The categories of personal information we collect (and have processed over the past 12 months) include: identifiers (such as IP address), internet or other electronic network activity information (such as website usage and engagement with promotional messages and ads), inferences, and as otherwise described in Information We Collect And How We Collect It. We do not knowingly collect information that is considered “sensitive” under State Privacy Laws and we do not use or disclose sensitive personal information for the purpose of inferring characteristics about you.

For more details about the information we collect (including the categories of sources of this information) as well as the purposes for processing, review Information We Collect And How We Collect It.

We disclose this information with the categories of third parties described in Disclosures of Information. The following table describes for each applicable category of personal information collected that is subject to these State Privacy Laws, the categories of third parties to which such information has been “sold” or “shared” (i.e., shared for targeted advertising) over the past 12 months.

We do not knowingly “sell” or “share” personal information about individuals under the age of 16.

EXERCISING YOUR RIGHTS

Where applicable, to exercise your right to opt out of “targeted advertising,” “sharing,” and “sales” of your personal data by visiting our websites with a legally-recognized opt-out preference signal enabled, such as the Global Privacy Control. You will need to renew your opt-out choice if you visit our website from a new device or browser or if you clear your cookies because your opt-out choice will be linked to your browser only. We do not currently take action in response to “do-not-track” signals transmitted by web browsers. Depending on the state in which you reside, you may make a request to exercise your rights to confirm, access, correct and delete your personal information under applicable State Privacy Laws by sending an email to privacy@robinhood.com.

We may verify certain requests by asking you to provide information that matches information we have on file about you. You can also designate an authorized agent to exercise these rights on your behalf, but we will require proof that the person is authorized to act on your behalf and may also still ask you to verify your identity with us directly.

Depending on the state in which you are a resident, if Robinhood is unable to satisfy your request to exercise a right available to you under applicable State Privacy Laws, you may be entitled to appeal our decision by emailing privacy@robinhood.com.

Our retention periods for personal information are based on business needs and legal requirements. We retain personal information for as long as is necessary for the processing purpose(s) for which we originally collected it and for other business purposes explained in this Privacy Statement.

We do not knowingly collect or solicit any information from anyone under the age of 13. If you reasonably believe that we might have information from a child under 13, please contact us at privacy@robinhood.com.

This Privacy Statement will evolve with time, and when we update it, we will revise the "Effective Date" above and post the new Privacy Statement and, in some cases, we provide additional notice (such as adding a statement to our website or sending you a notification).

If you have questions about this Privacy Statement, contact us at privacy@robinhood.com.