Your calendar said Zoom. The host clicked Record to the cloud while you were still finding the mute button. The Privacy Statement at zoom.us/privacy is where Zoom Video Communications describes what the client collects while you share screen, enable AI summaries, and trust that a banner counts as consent.
This piece summarizes public Zoom language Clerica monitors. It is not a penetration test of Zoom's security program or a guide to enterprise admin consoles unless those topics appear in the consumer-facing policy.
What Zoom wants you to skim past
Zoom wants you to treat a meeting like a phone call: ephemeral, forgotten by dinner. The Privacy Statement describes something stickier. Meeting content (audio, video, chat, reactions, polls, and Q&A) can land on Zoom infrastructure when hosts enable cloud recording or AI features. Account metadata ties your email to attendance even when you never spoke.
The policy also separates you from the host. If your employer or a volunteer organizer owns the account, their admin settings can turn on recording, retention, and integrations with calendar, CRM, or learning systems without you re-reading a policy page. Marketplace apps add third controllers the moment you click Allow.
Zoom has layered machine learning and AI Companion disclosures as those products ship. Public language typically describes processing meeting content for summaries, catch-up notes, or drafting help, with controls that vary by license and admin configuration. The convenience toggle and the training-or-inference paragraph are not always on the same screen.
What the policy actually allows
Think in clusters, not a table of contents walk.
Account and profile data covers what you supply at signup: name, email, password, and billing details on paid tiers.
Meeting and webinar content depends on settings. Hosts and account administrators control many recording features. The statement explains how cloud recordings may be stored, who can delete them, and how long they may persist.
Device and connection data includes IP address, operating system, client version, and diagnostic logs used for delivery, fraud prevention, and security.
Usage and support data spans feature clicks, support tickets, and marketing preferences you set in linked hubs.
AI and analytics sit in supplements and in-product notices on top of the base Privacy Statement. Features that feel like post-meeting convenience can reclassify conversation from "we hung up" to "content processed for inference," depending on the wording in effect when you click enable.
See the live policy on Clerica's Zoom tracker.
Scenario: Priya's volunteer standup
Priya joins a weekly standup on a personal Zoom link for a neighborhood mutual-aid group. The organizer enables cloud recording so absent members can catch up. Priya sees a recording indicator and keeps talking about housing referrals.
Under the policy categories Priya never opened, her voice and video may be stored on Zoom systems. Her email sits in attendance metadata. If the host later connects a note-taking integration, meeting content can flow to another vendor's pipeline.
Priya did not agree to a second privacy policy. She joined a link. That is the gap Zoom's structure assumes you will accept.
What to put on your watchlist
On a Clerica diff for zoom.com, we watch for movement in these clusters:
- AI Companion and other ML supplements (new purposes, new retention, new opt-out language)
- Cloud recording retention and deletion flows (host vs participant rights)
- Subprocessor or service-provider lists tied to meeting content
- Marketplace or integration language that expands who receives meeting metadata
- International or healthcare/education supplements when Zoom ships vertical editions
- Advertising or analytics programs in the consumer policy hub (separate from enterprise contracts)
A quiet edit to an AI supplement matters more than a footer year change when your recurring meeting link never moved.
What you can do before you join
You already joined plenty of calls. These steps still reduce surprise:
- Ask the host whether cloud recording or AI features are on before sensitive topics (health, HR, legal strategy).
- Review in-client privacy settings linked from Zoom's policy hub for cookies, marketing, and product analytics where offered.
- Treat employer-hosted meetings as governed by org policy plus Zoom's vendor role; your personal Zoom settings may not override admin choices.
- Add zoom.com to a Clerica watchlist so edits to AI, retention, or sharing language arrive as diffs, not folklore from a 2020 blog post.
Questions readers ask
Does Zoom sell my meetings?
Zoom's U.S. privacy notices describe categories shared for business purposes and provide opt-out paths where state law requires. Read the live statement for statutory definitions; this piece does not describe any specific sale.
Can I delete a cloud recording I did not create?
Deletion rights often flow through the host or account administrator described in the policy. Participants may have limited leverage compared to the account owner.
Are end-to-end encryption and privacy the same thing?
Zoom documents different encryption modes and feature availability. The Privacy Statement still describes metadata and account data processed to deliver the service even when content encryption is enabled for a given mode.
What changed after the early pandemic scrutiny?
Zoom updated security and privacy disclosures multiple times, including features like attention indicators that sparked backlash in education contexts. Monitoring catches the next edit, not a history lesson.
Why monitor Zoom for personal use?
Because AI, retention, and subprocessor lists change while your bookmarked meeting ID stays the same.
The line between convenience and captivity is thin.
If you care about keeping your knowledge private, join us.
Zoom and its marks are trademarks of their respective owners. Clerica is not affiliated with or endorsed by Zoom. Clerica monitors publicly available privacy policies and terms for services you choose to follow. Clerica is not a law firm and does not provide legal advice.