Back to Home
Zoom Privacy Summary
CommunicationSee methodology
High Exposure
Zoom is a video conferencing and unified communications platform providing virtual meetings, webinars, chat, phone services, and collaboration tools for businesses and education.
This summary was generated using AI and may contain errors or omissions. Learn about our methodology. Always refer to the original privacy policy for legal purposes.
Quick Summary
- What They Collect: Account, billing, Customer Content (audio/video/chat), and service usage logs.
- How They Use & Share It: To provide services, for safety/legal purposes, analytics, with subprocessors/affiliates, and per legal requests.
- Your Rights: Retrieve content for 30 days, opt-out of arbitration within 30 days, and rights under DPAs/US state privacy addenda.
Why You Should Care About Zoom's Privacy Practices
- High-risk data collection: Zoom handles sensitive audio/video recordings and transcripts which can expose private conversations if shared or subpoenaed. (privacy, data collection)
- Real-world impact: Broad permitted uses and potential compelled disclosures can lead to data access by law enforcement or third parties. (government requests, legal disclosure)
- Scale & influence: Widely used in work, education, and healthcare — privacy and security choices affect daily communication and corporate compliance. (enterprise privacy, communication tools)
- Actionable concern: Default arbitration and broad sublicensable licenses reduce legal recourse and may allow wider internal use or sharing of Customer Content. (arbitration opt-out, data licensing)
Privacy Highlights
What They Collect
- Account information (email, billing address, company name)
- User content & files (audio, video, chat, screen sharing, attachments, recordings, transcripts)
- Customer identifiers (taxpayer ID, VAT registration number, contact name and information)
- Payment & billing information (charges, taxes, VAT, payment-related data)
- Feedback data (feedback, suggestions, feature requests)
How They Share Data
- Service providers and subprocessors (consultants, contractors bound by confidentiality/subprocessing agreements)
- Affiliates and assignees (Zoom may assign/transfer rights to affiliates in M&A or assignments)
- Third‑party partners for marketing and integrations (Zoom may identify customers, use logos, and integrate Third‑Party Offerings)
- Government authorities and law enforcement (permitted/compelled disclosures and Government Request Guide references)
Data Retention
Customer Content: accessible to customers for 30 calendar days after termination, then deleted according to law and Zoom’s deletion protocols; other logs/Service Generated Data retention governed by Privacy Statement, DPA, and applicable law
Your Rights
- Retrieve Customer Content for 30 calendar days after termination (access window)
- Opt-out of the arbitration agreement by emailing opt-out@zoom.us within specified 30-day windows (legal opt-out)
- Privacy rights and obligations under applicable US State Law Privacy Addendum and Global Data Processing Addendum for business customers (controller/processor roles)
- Ability to consent to and review Zoom’s Privacy Statement and related guides and notices (notice & consent approach)
Detailed Analysis
Concerning Practices
- Permissive license and broad 'Permitted Uses' — Zoom obtains a perpetual, worldwide, sublicensable license to Customer Content for permitted operational, legal, and safety purposes
- Potential disclosures to government or compelled parties with limited notice exceptions (may not notify if prohibited or emergency situations)
- Data sharing with external service providers, subcontractors, and affiliates for service delivery and marketing (third‑party exposure)
- Limited explicit tracking-technology detail in the provided policy text (cookies/pixels not enumerated in snippets examined) — makes assessing browser-level tracking harder
- Arbitration agreement and class action waiver by default (though there is a time-limited opt-out) which limits litigation routes for users
Personal Data Types
Account information (email, billing address, company name) User content & files (audio, video, chat, screen sharing, attachments, recordings, transcripts) Customer identifiers (taxpayer ID, VAT registration number, contact name and information) Payment & billing information (charges, taxes, VAT, payment-related data) Feedback data (feedback, suggestions, feature requests) Service usage & technical data (logs, metrics, Service Generated Data, anonymized/aggregated usage data) Support data and compliance attestations (support interactions, compliance records references) Publicly-available information and content you provide (Customer Content that may be public)
Tracking Methods
Not explicitly enumerated as 'cookies/pixels' in the provided files; policy references aggregation of technical/service-generated logs and anonymized analytics for analysis and product improvement
Third Parties
Service providers and subprocessors (consultants, contractors bound by confidentiality/subprocessing agreements) Affiliates and assignees (Zoom may assign/transfer rights to affiliates in M&A or assignments) Third‑party partners for marketing and integrations (Zoom may identify customers, use logos, and integrate Third‑Party Offerings) Government authorities and law enforcement (permitted/compelled disclosures and Government Request Guide references)
User Controls
Retrieve Customer Content for 30 calendar days after termination (access window) Opt-out of the arbitration agreement by emailing opt-out@zoom.us within specified 30-day windows (legal opt-out) Privacy rights and obligations under applicable US State Law Privacy Addendum and Global Data Processing Addendum for business customers (controller/processor roles) Ability to consent to and review Zoom’s Privacy Statement and related guides and notices (notice & consent approach)
Frequently Asked Questions About Zoom
Want updates when Zoom's privacy policy changes?
We'll notify you when there are significant changes to their data practices.
Legal Disclaimer
This analysis is provided for informational purposes only and should not be used as legal advice. Privacy Exposure ratings and summaries are AI-generated assessments based on publicly available privacy policies — they are not statements of fact and may contain errors. Learn how ratings are determined. Consult with legal professionals for matters requiring legal guidance.