Personal Data Types
Account information (administrator name, contact info, billing, transaction, account plan) Profile and participant information (name, display name, picture, email, phone, job, locale, user ID) Contact information and contact list data (contacts added or synced, referral invitation contacts) Device information (IP address, OS version, browser, device IDs, MAC, Wi‑Fi, Bluetooth signals, battery level) Content and context from meetings, webinars, messaging, and collaborative features (audio, video, chat, whiteboards, files, transcriptions, polls, Q&A, recordings) Registration information (responses to meeting/webinar registration questions, name, contact info) Payment and financial information (billing and transaction data) Enhanced biometric-style data when enabled (facial geometry, voiceprint for optional features) Inferences and derived data (profiles or inferences derived from collected data) Limited information from Zoom Email and Calendar Services and related context (where applicable)
Tracking Methods
Cookies (site cookies and cookie management tool) Third‑party cookies placed on Zoom’s website (used by advertising, analytics partners) Global Privacy Control (GPC) opt-out support referenced for certain state privacy rights Other trackers (policy references cookies or other trackers used for advertising/analytics)
Third Parties
Resellers (third‑party resellers may access account data and hosted content) Vendors / service providers (hosting, payments, customer support, infrastructure, marketplace payment processors) Marketing, advertising, and analytics partners (advertising and analytics providers receiving site activity via cookies) Corporate affiliates and subsidiaries (e.g., Zoom Voice Communications) for integrated services and fraud prevention Third‑party app and integration developers (Zoom App Marketplace developers and third‑party integrations) Government authorities and law enforcement (sharing for legal compliance and safety) Acquirers or successors in sale, merger, assignment, or transfer scenarios (assignment/merger language in Terms)
User Controls
Access data (right to access categories and specific personal data collected) Rectify data (right to correct inaccurate or incomplete personal data) Erase or limit processing (right to erasure and to request restriction of processing) Object to processing (right to object to processing and marketing communications) Data portability (right to obtain and port personal data in a usable format) Withdraw consent (ability to withdraw cookie consent through cookie management tool) Opt‑out of marketing and targeted advertising (opt‑out mechanisms, including state opt‑outs and GPC) Delete customer data / Customer Content retrieval (30‑day retrieval window after termination; deletion thereafter) Request data copy or export (disclosure and portability mechanisms under state laws) Designate authorized agent and appeal denials (mechanisms for verified consumer requests and appeals)