Your account and your data.

Privacy notice · 22 October 2026. Marpe Zoom Centre is operated by LEVITES TECH LTD. Contact founder@levites.app about this notice or your data.

What the authorization service handles

We use your Zoom user ID, account ID, name and email to identify your account, enforce operator access and obtain temporary join tokens. The service stores user/account identifiers and session expiry alongside an encrypted grant containing profile data and Zoom OAuth access/refresh tokens. OAuth grants use AES-256-GCM encryption. Client secrets and encryption keys are Worker secrets. Your Mac stores only an opaque application session and your profile in its Keychain; SDK join tokens are transient.

Your meeting media

Camera feeds, participant names used in the studio and meeting playback are processed on the Mac through Zoom's native SDK. They are not sent to this authorization service. This build has no meeting recording or transcription feature. Zoom processes meeting traffic under its own policies.

Service providers and request data

Cloudflare Workers and D1 host authorization and storage; Zoom provides identity, tokens and meeting services. Their infrastructure may process connection metadata needed to deliver and secure requests. Application logs contain generic failure codes and random request identifiers, not OAuth URLs, codes, tokens, meeting links or identities. No advertising or analytics SDK is included in this service.

Retention and removal

Pending sign-ins expire after five minutes, one-use handoffs after one minute and application sessions after thirty days. An hourly task deletes expired records. Successful sign-out deletes the relevant service session; a valid Zoom deauthorization notification deletes matching user/account sessions. Removing the integration in Zoom revokes its Zoom authorization. Encrypted provider backups may remain for Cloudflare's retention period.

Your choices and rights

Use Sign out in the app or Remove in Zoom Marketplace to withdraw access. Email support to request access, correction, deletion or a copy of personal data. Depending on applicable law, you may also request restriction or portability, object to processing and complain to the relevant data protection authority. We verify identity before acting on a request. We use account data to provide the requested integration and operate its security and access controls; we do not sell it.