What the store reviewer checks
These checks come from the store's published rules. Open each source before you submit. The scan above checks your website, not your app or extension.
Pages on your own domain
Zoom says the listing links must be hosted on fully qualified domain names owned by your company.
A support page
All published apps must give a support URL with clear information on how users get ongoing support.
A company name that matches
The company name in the terms of use page must match the app's company name.
What to account for
Data subject rights
The privacy policy must tell users about their data subject rights and how to exercise them.
Removal instructions
Documentation must explain how to remove the app from a Zoom account and how user data is handled after removal.
Encryption
Zoom's security page asks you to encrypt data in transit, for example with TLS 1.2 or higher, and at rest. Say what you do in the policy.
Common mistakes to check
Legal pages on shared storage
Zoom says hosting these documents on third-party platforms like Google Drive or Dropbox is not permitted.
A thin long description
Zoom says apps may be rejected if the long description lacks enough detail.
Your review checklist
Our suggested review process. The linked requirements above explain the platform or legal basis.
List what the app reads from Zoom
Write down each scope, the data it returns, where you store it and for how long.
Scan your public site and draft
Scan the company site that will host the page. Review the suggested vendors, answer the business questions, then add the Zoom data flows by hand.
Check the company name everywhere
Compare the name in the terms, the policy and the app listing. They must match.
Example
Fictional app: Harbor Notes
Assume an app that saves meeting notes for 60 days. The scan sees analytics on the marketing site; the owner confirms what the app stores.
A useful next action
Add the 60-day retention and the removal steps to the draft, then publish it on your own domain.
Questions before publishing
Can I host the policy on Google Drive?
Zoom says no. Use a page on a domain owned by your company.
Can the scan see my Zoom data?
No. The scan reads your public website only. It cannot see tokens, scopes or what your backend stores. You confirm those facts yourself.
Is the draft reviewed by a lawyer?
No. A lawyer has not reviewed our templates. The draft is a starting point that you check and adapt against Zoom's current rules.
Source review and changes
First edition: platform requirements, implementation checks and fictional worked example. Sources reviewed on the date above; verify changes before relying on them.