Atlassian acts as the data controller for account and usage data but acts as a data processor for content that enterprise customers upload or generate, meaning your employer (not Atlassian) may be the party legally responsible for certain decisions about your data.
This analysis describes what Loom's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
In enterprise Loom deployments, your employer controls key data decisions, which means your individual rights requests may need to go to your employer first rather than directly to Atlassian.
Interpretive note: The controller/processor distinction language could not be directly extracted from the truncated HTML; this provision is inferred from Atlassian's known enterprise privacy and DPA framework as applicable to Loom.
If you use Loom through your employer, your organization may be the data controller for your video recordings and workspace data, affecting where and how you can exercise deletion or access rights; individual employees should contact their IT or legal team to understand how Loom data is governed within their organization.
How other platforms handle this
Where ZipRecruiter processes your Personal Data in the capacity of a service provider (data processor), and you seek access, or want to correct, amend, or delete your Personal Data...we will provide you with the data controller's contact information, so you can contact them directly.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
1) REGULATORY LANDSCAPE: The controller/processor distinction is foundational to GDPR compliance under Articles 4, 24, and 28.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
In enterprise Loom deployments, your employer controls key data decisions, which means your individual rights requests may need to go to your employer first rather than directly to Atlassian.
If you use Loom through your employer, your organization may be the data controller for your video recordings and workspace data, affecting where and how you can exercise deletion or access rights; individual employees should contact their IT or legal team to understand how Loom data is governed within their organization.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Loom.