Protecting Customer Information

How does Longbridge protect my personal information?

Protecting your personal information isn’t just a regulatory obligation at Longbridge — it’s a fundamental part of how we do business. We understand that trust is essential to any financial relationship, which is why we employ strong security practices and uphold the highest ethical standards to safeguard your data.

The following outlines how we collect, manage, and protect your information, and the measures we take to keep your account secure.

Why does Longbridge collect my personal information?

We collect and maintain certain personal information to:

  • Satisfy federal regulatory requirements (Customer Identification Program - CIP)
  • Establish, maintain, and service your brokerage account
  • Protect our clients and the financial system from fraud and misuse
  • Enhance the safety, functionality, and experience of our trading platform

The information we collect may include:

  • Identity data: legal name, date of birth, Social Security number
  • Contact information: email address, phone number, mailing address
  • Financial details: employment and income information, bank account data for funding and withdrawals
  • Usage data: device identifiers, login activity, and platform interaction details

This data enables us to verify your identity, comply with legal obligations, and deliver a secure, reliable investment experience.

What security measures are in place to protect my data?

Longbridge uses a multi-layered approach to security, including:

  • Strict access controls to prevent unauthorized use
  • Continuous threat monitoring and intrusion detection systems
  • Regular vulnerability assessments and system testing
  • Robust incident response protocols for rapid mitigation
  • Encryption of data both in transit and at rest
  • Ongoing system monitoring to maintain platform reliability and uptime
  • Comprehensive business continuity and disaster recovery planning

These controls are designed to ensure the confidentiality, integrity, and availability of your personal data.

Is my information encrypted?

Yes. All customer data is encrypted both in transit and at rest using strong, industry-standard encryption protocols to help ensure your information remains secure.

Where is my data stored?

Longbridge’s customer data is stored on secure, industry-leading cloud infrastructure with geographic redundancy and multiple layers of physical and network security.

How is my account protected from unauthorized access?

We use several layers of account-level security controls, including:

  • Multi-factor authentication (MFA) to protect login access
  • Device and behavioral monitoring to detect unusual account activity
  • IP and location screening to block suspicious or unauthorized access attempts

These measures provide an added layer of protection beyond your username and password.

Does Longbridge share my information with third parties?

We only share personal information with third-party service providers as needed to operate our services, process transactions, or comply with applicable law. All third parties are contractually required to protect your information and maintain its confidentiality. Longbridge does not sell your personal information or share it with unaffiliated companies for marketing purposes.

Can I control or update my privacy settings?

Yes. You can request to access, correct, or update your personal information at any time by contacting our support team. Certain information may be required to maintain your account or satisfy regulatory obligations.

How does Longbridge comply with privacy regulations?

Longbridge complies with all applicable federal and state data privacy regulations, including:

  • Regulation S-P, which governs the protection of nonpublic personal information
  • Customer Identification Program (CIP) requirements under the USA PATRIOT Act and Bank Secrecy Act
  • Applicable state privacy laws, including the California Consumer Privacy Act (CCPA)

Our internal compliance and security teams continuously review and update our privacy practices to reflect evolving laws, regulations, and best practices.

What should I do if I believe my account was compromised?

If you suspect that your account has been accessed without authorization or believe your personal information has been exposed, contact support@longbridge.com immediately. We will assist you in securing your account, investigating the incident, and taking appropriate steps to protect your information.

Summary

  • Longbridge collects only the information necessary to meet legal requirements, service your account, and keep it secure.
  • Your personal data is encrypted, protected, and monitored with advanced security technologies.
  • We do not sell your data and only share it when required to provide services or comply with the law.
  • CIP and Regulation S-P requirements are central to how we handle and protect your information.