You're both misquoting and misunderstanding. Misquoting in that you clipped out the "to the extent and in the manner permitted under applicable Law". And misunderstanding since the text was talking "service generated data", not about "customer data". That's basically data generated by their system (e.g. debug logs). It's not the data you entered into the system (contact information), the calls you made, the chats you sent, etc.
Also, the linked document is effectively a license for the intellectual property rights. The data protection side of things would be covered by the privacy policy[0]. This all seems pretty standard?
> And misunderstanding since the text was talking "service generated data", not about "customer data".
Isn't that what section 10.4 covers and ultimately grants liberal rights to Zoom?
> 10.4 Customer License Grant. You agree to grant and hereby grant Zoom a perpetual, worldwide, non-exclusive, royalty-free, sublicensable, and transferable license and all other rights required or necessary to redistribute, publish, import, access, use, store, transmit, review, disclose, preserve, extract, modify, reproduce, share, use, display, copy, distribute, translate, transcribe, create derivative works, and process Customer Content and to perform all acts with respect to the Customer Content: (i) as may be necessary for Zoom to provide the Services to you, including to support the Services; (ii) for the purpose of product and service development, marketing, analytics, quality assurance, machine learning, artificial intelligence, ...
Yes, but that's not the section that this subthread was about, and the objection about "this can't be legal in the EU and UK" was based on the text quoted for service generated content which is different.
And again, this is about granting an license on the intellectual property. It doesn't create any kind of end-run around the GDPR, and wouldn't e.g. count as consent for GDPR purposes.
I don't think they carved themselves out this permission for the purpose of training an AI on debug logs. For all we know "Zoom compiles Service Generated Data based on Customer Content" may include them compiling an mp4 of your call. That would seem to fall under the part of the definition that says "data that Zoom collects or generates in connection with your or your End Users’ use of the Services or Software"
Furthermore, as far as I know, the "to the extent and in the manner permitted under applicable Law" part is just a reminder. Laws always have priority over contracts, and any part of a contract that goes against the law can simply be ignored.
Not if at least one of the parties is a government institution, because administrative actions have a presumption of legality, similar to presumption of innocence applied to other entities.
