Translation Service
What They Say
Zoom's privacy policy emphasises trust as a corporate value and provides detailed explanations of their enterprise privacy controls. They describe their recording practices as user-controlled, their AI training as opt-in, and their data sharing as limited to service providers. Following a 2023 controversy about AI training language in their terms, they revised the policy to clarify that meeting content requires explicit opt-in for AI training.
What They Mean
Zoom became the infrastructure for private human communication during COVID — therapy sessions, medical appointments, job interviews, family calls, romantic relationships — and that content flowed through their servers. The AI training controversy revealed that the original terms were broad enough to cover this content. The revision helped, but the Bureau notes that 'helps you' AI features (Zoom IQ, AI Companion) process and store meeting content for improvement purposes under terms that most users do not read. The attention tracking feature — which monitored whether participants' windows were in focus — was described as 'innovative' by Zoom and 'a surveillance tool for employers' by everyone else. It was later removed under pressure.
Worst Clause — Exhibit A
"Zoom may use certain customer content for AI and machine learning purposes, such as training and tuning of algorithms and models, with the customer's permission. Customers can configure whether to allow Zoom to use their account data for such purposes."
Bureau Translation:
'With the customer's permission' means the account administrator, not the individual participant. In an enterprise Zoom account, the company admin can opt into AI training for all meetings held by all employees, without those employees knowing or consenting. The Bureau has not verified how many corporate admins are aware of this setting or have reviewed it.
Evidence Tags — Data Collected
Bureau Verdict
"Zoom handled the most intimate professional and personal communications of the pandemic era and then had a very public conversation about whether it was using those communications to train AI. The revised policy is clearer. The fundamental architecture — a video platform that processes content on servers you do not control, at scale, for a company whose business model requires finding new revenue — remains unchanged. Grade D."
Overall Grade
Corporate with Aspirations
Frequently Asked Questions
Dark Patterns Documented
See the full Dark Pattern Encyclopedia for documentation of each technique.
Audited: 2026-03-20