Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document establishes Zoom's data collection and processing practices for its video conferencing, phone, chat, and AI features. Zoom collects personal identifiers (name, email address), device and network data (device identifiers, IP address), meeting content (audio, video, transcripts, chat messages), and usage data. The statement authorizes Zoom to use collected data for AI model training unless an account administrator disables this setting.
This document is Zoom's Privacy Statement, governing the collection, use, disclosure, and retention of personal data by Zoom Video Communications, Inc. across its suite of products and services, including Zoom Meetings, Zoom Phone, Zoom Chat, Zoom Rooms, Zoom Webinars, and AI-powered features such as AI Companion. The statement asserts that Zoom collects account and profile data, device and network identifiers, meeting content (audio, video, transcripts, and chat messages), usage and behavioral data, payment information, and data from third-party integrations and advertising partners; it also states that Zoom processes customer content to provide, support, and improve its services, and that it may use certain data to train AI and machine learning models unless account administrators disable this feature. A notable provision authorizes Zoom to collect and process meeting content including audio and video recordings and AI-generated transcripts, with consent and opt-out mechanisms allocated primarily to account administrators rather than individual meeting participants, which may limit participants' practical ability to control their own data. The statement references GDPR and EU/UK adequacy and transfer mechanisms (Standard Contractual Clauses), CCPA and California privacy rights, and applicable frameworks in Brazil (LGPD), Japan, South Korea, Australia, and other jurisdictions; compliance teams should evaluate whether administrator-level consent mechanisms satisfy individual data subject rights obligations under GDPR Article 7 and CCPA opt-out requirements, particularly where end users are participants on accounts they do not control.
Institutional analysis available with Professional
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Start Professional free trial1 important change detected
2 versions captured · Last updated: May 2026
Monitoring
Zoom has updated this document before.
Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Professional Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Professional free trialCross-platform context
See how other platforms handle Account Owner Control Over Participant Privacy and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.