Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“Depending on their settings, account owners also can see sender and receiver information, and other messaging data, along with the content of messages sent to and from users on their account...”
“Depending on their settings, account owners and designated account administrators can access email and calendar content sent to and from users on their Zoom Email or Zoom Calendar accounts, even if those Zoom Emails are encrypted.”
“Depending on their settings, account owners can see sender and receiver information, along with the content of messages sent to and from users on their account, in the following circumstances: Messages sent to Everyone in a meeting that is recorded...”
“Account owners and the users they designate can access personal data for participants who join meetings and webinars on their account or send messages to users on their account.”
“Account owners can view and share recordings and transcripts of meetings and webinars hosted on their account...Account owners may be able to view and share content generated by intelligent features that use recordings or transcripts.”
“Zoom may permit advertising and analytics services that are intended to deliver advertising to you and/or analyze your interactions...which may constitute a "sale" or "sharing" of data for targeted advertising purposes under certain state privacy laws.”
This document explains what Zoom does with your data and who else can see it. The most important thing to know is that the owner of the Zoom account you are on—your employer or meeting host, for example—can access your messages, emails, meeting recordings, and transcripts, even if those emails are encrypted. Zoom itself does not use your meeting or chat content for marketing or to train AI, and its employees cannot access that content unless the account owner allows it or a legal or safety reason requires it.
Zoom's Privacy Statement establishes the conditions under which Zoom collects, uses, retains, and shares personal data and Customer Content. It draws a firm line around Customer Content—expressly prohibiting its use for marketing, promotions, or AI model training by Zoom or third parties, and restricting employee access to account-owner-authorized or legally necessary purposes. The document grants account owners and their designated administrators broad access rights over users' data, including Zoom Chat messages, email and calendar content (even when encrypted), meeting recordings, transcripts, and participant personal data, subject to their account settings. It establishes a defined two-year maximum retention limit for biometric data used in enhanced features and specifies that international transfers of personal data for EEA, Swiss, and UK users are governed by the European Commission's standard contractual clauses. Zoom also acknowledges that its use of advertising and analytics services may constitute a 'sale' or 'sharing' of data for targeted advertising under certain state privacy laws.
For an individual user, the most consequential aspect of this document is that the account owner—not Zoom and not you—controls access to your Zoom Chat messages, email and calendar content, meeting recordings, transcripts, and personal data collected during meetings or webinars. Encryption of Zoom Email does not protect that content from the account owner or their designated administrators. Zoom expressly does not use your communications content for marketing or AI model training. If you are in a state where Zoom's advertising and analytics practices constitute a 'sale' or 'sharing' of your data for targeted advertising, you may have rights under applicable state privacy law that you can exercise, such as opting out through any mechanism Zoom makes available for that purpose.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
9 important changes detected
11 versions captured · Latest change detected by ConductAtlas: September 2026
Zoom's Privacy Statement was updated in an in update detected on July 28, 2026, with changes affecting data handling, user controls, and operational procedures. The updated statement clarifies that cookies …
View change record →Zoom's Privacy Statement was detected to contain an added language selection menu on July 22, 2026. The updated document now includes a 'Select a language' dropdown offering 17 language options …
View change record →Zoom's Privacy Statement was updated on July 18, 2026, changing a single reference in the navigational menu from 'Co-Browse API Services' to 'Co-Browse AI Services'. This reflects a product naming …
View change record →Zoom added 'Professionals' as a new category under the 'By industry' navigation section in their Zoom Privacy Statement on June 13, 2026. This is a navigation and organizational change with …
View change record →Zoom updated a single word in their Privacy Statement on June 2, 2026. The document previously listed 'AI Services' in the developer navigation menu; the updated version lists 'API Services' …
View change record →Zoom updated its Privacy Statement on May 23, 2026 with a navigation menu change in the Developer section. The updated menu now lists 'Build', 'Video SDK', 'Co-Browse', 'AI Services', 'Integrate', …
View change record →Zoom updated its privacy policy on May 19, 2026 to reference 'Zoom Canvas' instead of 'Zoom Docs' in the section describing collaborative feature content that account owners and administrators can …
View change record →“Depending on their settings, account owners can see sender and receiver information, along with the content of messages sent to and from users on their account, in the following circumstances: Messages sent to Everyone in a meeting that is recorded...”
“Account owners and the users they designate can access personal data for participants who join meetings and webinars on their account or send messages to users on their account.”
“Account owners can view and share recordings and transcripts of meetings and webinars hosted on their account...Account owners may be able to view and share content generated by intelligent features that use recordings or transcripts.”
“Depending on their settings, account owners also can see sender and receiver information, and other messaging data, along with the content of messages sent to and from users on their account...”
“Depending on their settings, account owners and designated account administrators can access email and calendar content sent to and from users on their Zoom Email or Zoom Calendar accounts, even if those Zoom Emails are encrypted.”
“Zoom may permit advertising and analytics services that are intended to deliver advertising to you and/or analyze your interactions...which may constitute a "sale" or "sharing" of data for targeted advertising purposes under certain state privacy laws.”
“This data will be deleted when no longer necessary, adequate, or relevant to offering the features or when two years have passed since your last interaction with Zoom, whichever occurs first.”
“Where personal data of users in the EEA, Switzerland, or the UK is being transferred to a recipient located in a country outside the EEA...we ensure that the transfer is governed by the European Commission's standard contractual clauses.”
“Zoom does not use Customer Content for any marketing or promotions.”
“Zoom does not use any of your audio, video, chat, screen sharing, attachments or other communications-like Customer Content (such as poll results, whiteboard and reactions) to train Zoom's or its third-party artificial intelligence models.”
“If an account owner licensed or purchased Zoom products and services from a third-party reseller...the reseller may be able to access personal data and content for users, including meetings, webinars, and messages hosted by the account owner.”
“Zoom employees do not access or use Customer Content including meeting, webinar, messaging, or email content...unless authorized by the account owner...or as required for legal, safety, security or support purposes.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Zoom has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Account owner access to in-meeting messages in specific circumstances and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.