# Deauthorization and data compliance request

**URL:** <https://devforum.zoom.us/t/deauthorization-and-data-compliance-request/37842>\
**Category:** API and Webhooks\
**Created:** [December 7, 2020, 5:21pm UTC](https://devforum.zoom.us/t/deauthorization-and-data-compliance-request/37842 "2020-12-07T17:21:25Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![brunikb](https://avatars.discourse-cdn.com/v4/letter/b/2bfe46/32.png) [@brunikb](https://devforum.zoom.us/u/brunikb)\
**Post date:** [December 7, 2020, 5:21pm UTC](https://devforum.zoom.us/t/deauthorization-and-data-compliance-request/37842/1 "2020-12-07T17:21:25Z")

</div>

Dear Zoom,

I have a question regarding deauthorization request from zoom and data compliance request.  
When we get a request from you, where `user_data_retention=false`, do we have to remove  
join\_url and host\_url for created zoom meetings?

More information:  
We made an App, where user authorizes us for his zoom account and we then create meetings for him (through your api). When user deauthorizes, we remove all credentials (oauth token, refresh token). But we would still want to keep data about his created meetings (only host and join urls). Can we keep this info in our DB, when user deauthorizes? Or do we have to delete it?

Thank you for your answer

Best regards

Bruno Pfohl

---

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [December 8, 2020, 7:40pm UTC](https://devforum.zoom.us/t/deauthorization-and-data-compliance-request/37842/2 "2020-12-08T19:40:50Z")

</div>

Hi @brunikb,

Good question, happy to clarify.

If a user uninstalls your app from their account and does not want you to keep the data, then you should remove **all the data related to the user** , in order to be compliant. This would include not only the User ID, but the token, names, meeting history and any other data that you might have which belonged to the user. If the user owned the meeting, the host url should be removed as well.

I hope this helps to clarify,  
Will

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [January 8, 2021, 5:40am UTC](https://devforum.zoom.us/t/deauthorization-and-data-compliance-request/37842/3 "2021-01-08T05:40:53Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.