What comprises Zoom user data for the purpose of Data Compliance?

[nathaniel]

Description
What comprises Zoom user data for the purpose of Data Compliance? In particular:

1. Is Zoom aid and uid (from the access_token, and from the deauthorization webhook) considered Zoom user data that must be purged on revoke? The reason we would like to retain this is for documenting our compliance.
2. Is a transcoded version of the downloaded recorded meeting still considered Zoom user data?
3. If a user in our app chooses to copy a video, perhaps for the express purpose of not including that video in the auto-delete of Zoom data at app uninstallation, is that still considered Zoom user data?
4. Can user give us explicit permission to retain certain data (videos) but still not retain everything else? In this case, can their written permission for us to retain specified Zoom user data be in compliance with Zoom terms?

Which App Type (OAuth / Chatbot / JWT / Webhook)?
OAuth

Which Endpoint/s?
Data Compliance (POST /oauth/data/compliance)

Thanks!
~Nathaniel

[tommy (Tommy Gaessler)]

Hey @nathaniel,

The basic answer is if it was received as part of the Zoom integration FROM Zoom it should be considered Zoom User Data.

@nathaniel

Is Zoom aid and uid (from the access_token , and from the deauthorization webhook) considered Zoom user data that must be purged on revoke? The reason we would like to retain this is for documenting our compliance.

Yes, this is Zoom user data. Do you have some other way you can document your compliance, maybe with a different user UUID that you generate?

@nathaniel

Is a transcoded version of the downloaded recorded meeting still considered Zoom user data?

Yes, assuming you mean a digital encoding format to another video format. The video is still user data regardless of format.

@nathaniel

If a user in our app chooses to copy a video, perhaps for the express purpose of not including that video in the auto-delete of Zoom data at app uninstallation, is that still considered Zoom user data?

Yes, but you can obtain express written consent to keep the data/video.

@nathaniel

Can user give us explicit permission to retain certain data (videos) but still not retain everything else? In this case, can their written permission for us to retain specified Zoom user data be in compliance with Zoom terms?

Yes, this is legally permissible. You just need to obtain express written consent for any data the customer allows you to retain.

Thanks,
Tommy