73 Total
22 High severity
42 Medium severity
9 Low severity

Key Facts

What information can Zoom account owners see depending on their settings?
Zoom account owners can, depending on their settings, see sender and receiver information, other messaging data, and the content of messages sent to and from users on their account.
What can Zoom account owners and designated administrators access depending on their settings?
Zoom account owners and designated administrators can, depending on their settings, access email and calendar content sent to and from users on their Zoom Email or Zoom Calendar accounts, even if those Zoom Emails are encrypted.
What can Zoom account owners see in messages sent to Everyone in a meeting that is recorded?
Zoom account owners can, depending on their settings, see sender and receiver information and message content for messages sent to Everyone in a meeting that is recorded.
What can Zoom account owners and their designated users access?
Zoom account owners and their designated users can access personal data for participants who join meetings and webinars on their account or send messages to users on their account.
What can Zoom account owners view and share?
Zoom account owners can view and share recordings and transcripts of meetings and webinars hosted on their account.
What may Zoom permit that may constitute a 'sale' or 'sharing' of data for targeted advertising purposes under certain state privacy laws?
Zoom may permit advertising and analytics services intended to deliver advertising or analyze user interactions, which may constitute a 'sale' or 'sharing' of data for targeted advertising purposes under certain state privacy laws.
When will Zoom delete biometric data used for enhanced features?
Zoom will delete biometric data used for enhanced features when it is no longer necessary, adequate, or relevant to offering those features, or when two years have passed since the user's last interaction with Zoom, whichever occurs first.
Does Zoom ensure that transfers of personal data of users in the EEA, Switzerland, or the UK to recipients in countries outside the EEA are governed by the European Commission's standard contractual clauses?
Zoom ensures that transfers of personal data of users in the EEA, Switzerland, or the UK to recipients in countries outside the EEA are governed by the European Commission's standard contractual clauses.
Does Zoom use Customer Content for marketing or promotions?
Zoom does not use Customer Content for any marketing or promotions.
Does Zoom use Customer Content to train artificial intelligence models?
Zoom does not use audio, video, chat, screen sharing, attachments, or other communications-like Customer Content to train Zoom's or its third-party artificial intelligence models.
Stay ahead of the changes
Track Zoom and get the diff the day its terms change.
Summary

This document explains what Zoom does with your data and who else can see it. The most important thing to know is that the owner of the Zoom account you are on—your employer or meeting host, for example—can access your messages, emails, meeting recordings, and transcripts, even if those emails are encrypted. Zoom itself does not use your meeting or chat content for marketing or to train AI, and its employees cannot access that content unless the account owner allows it or a legal or safety reason requires it.

Analysis

Zoom's Privacy Statement establishes the conditions under which Zoom collects, uses, retains, and shares personal data and Customer Content. It draws a firm line around Customer Content—expressly prohibiting its use for marketing, promotions, or AI model training by Zoom or third parties, and restricting employee access to account-owner-authorized or legally necessary purposes. The document grants account owners and their designated administrators broad access rights over users' data, including Zoom Chat messages, email and calendar content (even when encrypted), meeting recordings, transcripts, and participant personal data, subject to their account settings. It establishes a defined two-year maximum retention limit for biometric data used in enhanced features and specifies that international transfers of personal data for EEA, Swiss, and UK users are governed by the European Commission's standard contractual clauses. Zoom also acknowledges that its use of advertising and analytics services may constitute a 'sale' or 'sharing' of data for targeted advertising under certain state privacy laws.

What this means for you

For an individual user, the most consequential aspect of this document is that the account owner—not Zoom and not you—controls access to your Zoom Chat messages, email and calendar content, meeting recordings, transcripts, and personal data collected during meetings or webinars. Encryption of Zoom Email does not protect that content from the account owner or their designated administrators. Zoom expressly does not use your communications content for marketing or AI model training. If you are in a state where Zoom's advertising and analytics practices constitute a 'sale' or 'sharing' of your data for targeted advertising, you may have rights under applicable state privacy law that you can exercise, such as opting out through any mechanism Zoom makes available for that purpose.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

8 important changes detected

9 versions captured · Last updated: August 2026

What changed In an update detected on August 7, 2026, Zoom updated the 'Last updated' date in its Privacy Statement from July 27, 2026 to the same date, with no substantive changes to the privacy policy language itself. The opening description of what personal data Zoom collects and processes remains unchanged. This appears to be a metadata or formatting update with no operational changes to Zoom's privacy practices or user obligations.
Why this matters This change does not materially affect the terms consumers operate under. The privacy policy language describing what personal data Zoom collects and processes remains unchanged. No new disclosures, restrictions, or obligations are introduced.
View full change record →
What changed Zoom's Privacy Statement was updated in an in update detected on July 28, 2026, with changes affecting data handling, user controls, and operational procedures. The updated statement clarifies that cookies and similar tracking technologies are governed by user consent settings, expands data transfer mechanisms beyond EU Standard Contractual Clauses, updates EU and UK representative contact information, and adds explicit language that mobile opt-in messaging data will not be shared with third parties except to provide the requested service or as required by law. Users now have the option to submit data access requests by phone and can contact Zoom for direction to local data protection authorities.
Why this matters The updated statement establishes that Zoom will not share mobile opt-in data or consent collected through text messaging campaigns with third parties, except as necessary to provide the messaging service or as required by law. This provides additional protection for messaging campaign participants. The statement also clarifies that users can submit data access requests by phone and may contact Zoom for direction to their local data protection authorities. The revised language expands permissible data transfer mechanisms beyond EU Standard Contractual Clauses to include other lawful frameworks, and updates contact information for EU and UK data privacy representatives. You can now submit data access requests by calling +1-888-799-0566 or accessing the opt-out mechanism for cookies and similar technologies through the privacy preferences settings.
View full change record →

July 22, 2026 low

Zoom's Privacy Statement was detected to contain an added language selection menu on July 22, 2026. The updated document now includes a 'Select a language' dropdown offering 17 language options …

View change record →
July 18, 2026 low

Zoom's Privacy Statement was updated on July 18, 2026, changing a single reference in the navigational menu from 'Co-Browse API Services' to 'Co-Browse AI Services'. This reflects a product naming …

View change record →
June 13, 2026 low

Zoom added 'Professionals' as a new category under the 'By industry' navigation section in their Zoom Privacy Statement on June 13, 2026. This is a navigation and organizational change with …

View change record →
June 2, 2026 low

Zoom updated a single word in their Privacy Statement on June 2, 2026. The document previously listed 'AI Services' in the developer navigation menu; the updated version lists 'API Services' …

View change record →
May 23, 2026 low

Zoom updated its Privacy Statement on May 23, 2026 with a navigation menu change in the Developer section. The updated menu now lists 'Build', 'Video SDK', 'Co-Browse', 'AI Services', 'Integrate', …

View change record →
May 19, 2026 low

Zoom updated its privacy policy on May 19, 2026 to reference 'Zoom Canvas' instead of 'Zoom Docs' in the section describing collaborative feature content that account owners and administrators can …

View change record →
Featured, High severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

73 provisions
12 featured
17 clause types
22 high severity
Restricted or Prohibited Content/Industries 1 1 high
Targeting and Audience Restrictions 1 1 high
Disclosure and Transparency Requirements 1
Stay ahead of the changes

Monitoring

Zoom has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Account owner access to in-meeting messages in specific circumstances and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured August 7, 2026 00:32 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000190
Version ID CA-V-005564
SHA-256 ed1e03d9403b4c923c157fbff9b8518260fce5225e8c4fb04b1876b2b6752de7
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans