Back to Home
Zoom logo

Zoom Privacy Summary

zoom.usLast updated: 03/04/2026
Communication

Zoom is a communication and collaboration platform offering video meetings, webinars, messaging, recordings, and an app marketplace for integrations and voice services.

This summary was generated using AI and may contain errors or omissions. Learn about our methodology. Always refer to the original privacy policy for legal purposes.

Quick Summary

  • What They Collect: Account, profile, contact, device, payment, meeting content (audio/video/transcripts), optional biometrics.
  • How They Use & Share It: Provide services, security, product features, marketing and analytics; shared with vendors, resellers, affiliates, and ad/analytics partners.
  • Your Rights: Access, correct, delete, restrict processing, opt‑out of targeted advertising, withdraw cookie consent, and request portability.

Why You Should Care About Zoom's Privacy Practices

  • Zoom collects meeting audio/video, transcripts, and optional biometric data, exposing sensitive personal information to processing and storage.
  • Broad licensing and mandatory arbitration can limit legal remedies and permit wide internal use of Customer Content; review Terms before uploading sensitive materials.
  • Data shared with advertising and analytics partners enables profiling and targeted ads; opt‑outs require cookie settings or state privacy mechanisms.
  • International transfers and vague retention mean your data may be stored abroad and held for indefinite periods for business purposes.

Why High Exposure?

  • Policy permits collection of sensitive audio/video, transcriptions, facial geometry, and voiceprints when enhanced features are enabled.
  • Terms and privacy allow broad sharing with advertising, analytics partners, vendors, resellers, corporate affiliates, and potential acquirers.
  • Retention language is vague for many data categories and only some features have explicit deletion timelines (e.g., two years for biometrics).
  • Terms include mandatory arbitration and a broad perpetual license over Customer Content, increasing legal and privacy exposure for users.
Learn more about our methodology →

Privacy Highlights

What They Collect

  • Account information (administrator name, contact info, billing, transaction, account plan)
  • Profile and participant information (name, display name, picture, email, phone, job, locale, user ID)
  • Contact information and contact list data (contacts added or synced, referral invitation contacts)
  • Device information (IP address, OS version, browser, device IDs, MAC, Wi‑Fi, Bluetooth signals, battery level)
  • Content and context from meetings, webinars, messaging, and collaborative features (audio, video, chat, whiteboards, files, transcriptions, polls, Q&A, recordings)

How They Share Data

  • Resellers (third‑party resellers may access account data and hosted content)
  • Vendors / service providers (hosting, payments, customer support, infrastructure, marketplace payment processors)
  • Marketing, advertising, and analytics partners (advertising and analytics providers receiving site activity via cookies)
  • Corporate affiliates and subsidiaries (e.g., Zoom Voice Communications) for integrated services and fraud prevention

Data Retention

Customer Content accessible for 30 days after contract termination then deleted per deletion protocols; many other personal data types retained “as long as required” for stated uses; enhanced biometric feature data deleted when unnecessary or two years after last interaction.

Your Rights

  • Access data (right to access categories and specific personal data collected)
  • Rectify data (right to correct inaccurate or incomplete personal data)
  • Erase or limit processing (right to erasure and to request restriction of processing)
  • Object to processing (right to object to processing and marketing communications)

Detailed Analysis

Concerning Practices

  • Perpetual, worldwide, royalty‑free, sublicensable license to Customer Content for permitted uses (broad content license)
  • Mandatory arbitration and class‑action waiver present in Terms of Service (with opt‑out provisions)
  • Automated scanning and analysis of certain content (automatic scanning for policy violations, safety, and security)
  • Use of third‑party demographic and advertising partner data for targeted ads (may constitute 'sale' or 'sharing')
  • International transfers of personal data to the United States and other countries, with SCCs or DPF protections where applicable
  • Vague/indefinite retention language for many data types (retained as long as required for described uses)
  • Account owners and resellers may access user content and data (employer/account‑owner access to participant content)
  • Collection of contact data and non‑user information (contacts synced or uploaded by other users)
  • Feedback assignment: users assign feedback rights to Zoom (feedback becomes Zoom property)

Personal Data Types

Account information (administrator name, contact info, billing, transaction, account plan) Profile and participant information (name, display name, picture, email, phone, job, locale, user ID) Contact information and contact list data (contacts added or synced, referral invitation contacts) Device information (IP address, OS version, browser, device IDs, MAC, Wi‑Fi, Bluetooth signals, battery level) Content and context from meetings, webinars, messaging, and collaborative features (audio, video, chat, whiteboards, files, transcriptions, polls, Q&A, recordings) Registration information (responses to meeting/webinar registration questions, name, contact info) Payment and financial information (billing and transaction data) Enhanced biometric-style data when enabled (facial geometry, voiceprint for optional features) Inferences and derived data (profiles or inferences derived from collected data) Limited information from Zoom Email and Calendar Services and related context (where applicable)

Tracking Methods

Cookies (site cookies and cookie management tool) Third‑party cookies placed on Zoom’s website (used by advertising, analytics partners) Global Privacy Control (GPC) opt-out support referenced for certain state privacy rights Other trackers (policy references cookies or other trackers used for advertising/analytics)

Third Parties

Resellers (third‑party resellers may access account data and hosted content) Vendors / service providers (hosting, payments, customer support, infrastructure, marketplace payment processors) Marketing, advertising, and analytics partners (advertising and analytics providers receiving site activity via cookies) Corporate affiliates and subsidiaries (e.g., Zoom Voice Communications) for integrated services and fraud prevention Third‑party app and integration developers (Zoom App Marketplace developers and third‑party integrations) Government authorities and law enforcement (sharing for legal compliance and safety) Acquirers or successors in sale, merger, assignment, or transfer scenarios (assignment/merger language in Terms)

User Controls

Access data (right to access categories and specific personal data collected) Rectify data (right to correct inaccurate or incomplete personal data) Erase or limit processing (right to erasure and to request restriction of processing) Object to processing (right to object to processing and marketing communications) Data portability (right to obtain and port personal data in a usable format) Withdraw consent (ability to withdraw cookie consent through cookie management tool) Opt‑out of marketing and targeted advertising (opt‑out mechanisms, including state opt‑outs and GPC) Delete customer data / Customer Content retrieval (30‑day retrieval window after termination; deletion thereafter) Request data copy or export (disclosure and portability mechanisms under state laws) Designate authorized agent and appeal denials (mechanisms for verified consumer requests and appeals)

Frequently Asked Questions About Zoom

Legal Disclaimer

This analysis is provided for informational purposes only and should not be used as legal advice. Privacy Exposure ratings and summaries are AI-generated assessments based on publicly available privacy policies — they are not statements of fact and may contain errors. Learn how ratings are determined. Consult with legal professionals for matters requiring legal guidance.