Privacy Policy

WebinarSignals turns your own Zoom webinar reports into analytics. This policy explains exactly what we read from Zoom, how it is protected, how long we keep it, and how you can delete it.

Last updated: 24 August 2026

1. Who we are

WebinarSignals ("we", "us") operates the analytics application at www.webinarsignals.com. We are the data controller for account data, and a data processor for the Zoom webinar data you choose to import. Contact: privacy@webinarsignals.com.

2. Data we collect

  • Account data — your email address and an encrypted password hash, created when you register and verify with a one-time code.
  • Zoom connection data — when you authorise our Zoom app we store the OAuth access and refresh tokens issued to your Zoom account, plus your Zoom account email, so we can call the Zoom API on your behalf.
  • Zoom webinar data — for the meetings and webinars you explicitly select, we read registration lists, past-instance participant reports (join/leave times and duration), and chat / Q&A transcripts. This includes attendee names and email addresses supplied by your registrants.

We do not read recording media, private one-to-one chats outside the report API, payment details, or any Zoom data from meetings you have not selected.

3. How we use it

  • Produce minute-by-minute drop-off and retention charts for your events.
  • Score attendees 0–100 from attendance, watch-time and chat engagement.
  • Detect buyer-intent language in chat and group leads into a single pipeline.
  • Generate optional AI-written email and WhatsApp follow-up drafts. Only the lead attributes needed for the draft are sent to the AI provider; nothing is used to train third-party models.

We never sell your data, never share it with advertisers, and never use one customer's data to serve another.

4. Security

  • Zoom OAuth tokens are encrypted at rest with AES-256-GCM before being written.
  • Imported Zoom report payloads are encrypted at rest with AES-256-GCM.
  • Row-level security ensures every database row is readable only by the authenticated account that owns it.
  • All traffic is served over TLS. Encryption keys are held as server-side secrets.

5. Retention and deletion

Imported webinar data is retained while your account is active so your pipeline stays consistent across events. Disconnecting Zoom immediately and permanently deletes your stored Zoom tokens and imported report payloads. Deleting your account removes all remaining account data within 30 days. You can also remove the app from your Zoom account at any time via the Zoom App Marketplace, which revokes our access.

6. Your data subject rights

Depending on where you live (including under the GDPR and comparable laws) you have the right to access, correct, export, restrict, object to, or erase your personal data, and to withdraw consent at any time. To exercise any of these rights, email privacy@webinarsignals.com from your account address; we respond within 30 days. You may also complain to your local data protection authority.

You can exercise most rights directly in the product: Disconnect Zoom on the dashboard erases imported data, and account deletion can be requested from the same email address.

7. Sub-processors

  • Cloud database, authentication and hosting infrastructure providers.
  • A transactional email provider for verification and recovery codes.
  • An AI model provider used only to draft follow-up messages you request.

8. Changes

We will update this page when our practices change and revise the "last updated" date. Material changes affecting how your Zoom data is handled will be notified by email.