Zoom Integration

Documentation for instructors and Zoom Marketplace reviewers.

California Safe Driver uses the Zoom API to create, update and delete the live-class meetings that our instructors host for court-ordered defensive driving students. Each instructor authorizes our application once using Zoom's standard OAuth consent flow. From that point on, our scheduling staff can create the Zoom meeting for a class session in one click instead of asking the instructor to log in and create it manually.

This page explains exactly what the integration does, how to install it, how to use it and how to remove it.

What the integration does

After you authorize the app on your Zoom account, California Safe Driver can:

• Create a new Zoom meeting on your account when a class session is scheduled.
• Read back the join URL and meeting ID so we can send them to enrolled students.
• Update the meeting's title, start time or duration if the class session is rescheduled.
• Delete the meeting from your Zoom account if a class is cancelled.
• Read your Zoom profile (name and email) so we can confirm the correct account is linked.

These actions are performed by our backend server on your behalf. You remain the host of every meeting. Students and staff who do not have a Zoom host seat never see your host credentials.

Prerequisites

• An active Zoom account (Basic, Pro or Business) registered to the email address you teach with.
• Permission on that Zoom account to create meetings and install Marketplace apps. On a managed Zoom org, your Zoom admin may need to approve the app.
• An instructor account on California Safe Driver. You will click "Connect Zoom" from inside that account.

Installing the app

1. Sign in to your instructor dashboard at californiasafedriver.com/dashboard/.
2. Open the Zoom Integration card and click Connect Zoom.
3. You will be redirected to Zoom's consent screen at zoom.us/oauth/authorize. Zoom will show you the exact list of permissions we are requesting:
   • user:read:user - read your Zoom profile (name, email, account type)
   • meeting:write:meeting - create new meetings on your account
   • meeting:read:meeting - read back a meeting's details
   • meeting:update:meeting - update a meeting's time or title
   • meeting:delete:meeting - delete a meeting
4. Review the permissions and click Allow (or Deny to cancel).
5. Zoom redirects you back to zoomapi.californiasafedriver.com/callback/, which confirms the connection and sends you back to your dashboard. You will see a green "Zoom connected" indicator.

Troubleshooting. If the consent screen shows an error like "Application not found" or "App not approved for this account," email info@californiasafedriver.com with a screenshot and we will help. If your Zoom admin blocks Marketplace installs, they will need to approve California Safe Driver from the Zoom Admin → Marketplace page.

Using the app

Once installed, the integration runs silently. You do not need to do anything. Our scheduling staff creates, updates or deletes the Zoom meeting for each class session from inside the California Safe Driver admin, and the corresponding meeting appears in, or disappears from, your Zoom account within seconds.

You remain the host. You can still open the Zoom desktop app and start the meeting at class time, edit its settings manually, or view past participants from your Zoom account.

Removing the app

You can revoke the integration at any time from inside Zoom. We do not need to be involved.

1. Sign in to the Zoom App Marketplace at marketplace.zoom.us.
2. Click Manage in the top-right menu.
3. Open Added Apps from the left sidebar.
4. Locate California Safe Driver in the list of installed apps.
5. Click Remove.
6. Select a reason for removal (optional) and click Remove again to confirm.

What happens when you remove the app. Zoom immediately notifies our servers via the app_deauthorized webhook. We delete your stored OAuth tokens within seconds. California Safe Driver will stop being able to create, update or delete meetings on your behalf from that moment on. Any Zoom meetings we previously created on your account stay on your Zoom account. You can delete them yourself from the Zoom web portal if you no longer want them. No class schedule or student roster data is removed from California Safe Driver.

Data handling

We follow strict data-minimization principles. From your Zoom account we store only:

• Your Zoom user ID (a random Zoom-assigned string).
• Your Zoom login email and display name (so we can confirm the correct account is linked).
• Your Zoom plan type (1 = Basic, 2 = Licensed, 3 = On-Prem) so we can warn about Basic's 40-minute meeting cap.
• Your OAuth access token and refresh token, both encrypted at rest in our PostgreSQL database using Fernet (AES-128-CBC + HMAC-SHA256). The encryption key is separate from the database itself and is rotated independently.
• The Zoom meeting ID and join URL for each class session we create on your account. We need these to text and email them to your enrolled students.

We never store meeting passwords, recordings, chat messages, participant lists or any meeting-in-progress data. California Safe Driver does not subscribe to Zoom recording, meeting-started, meeting-ended or participant-joined events, and those events are disabled on our Zoom Marketplace app.

All traffic between California Safe Driver and Zoom uses TLS 1.2 or higher. Webhook events from Zoom are verified using HMAC-SHA256 against a Secret Token known only to Zoom and to our servers; any webhook that fails signature verification is rejected.

For the full details of how California Safe Driver collects, uses and retains personal data, see our Privacy Policy.

Support

California Safe Driver support is available Monday through Friday, 9:00 AM to 5:00 PM Pacific Time.

• Email: info@californiasafedriver.com (response within one business day)
• Phone: 1-877-525-DRIVE (3748)
• Mailing address: Cobert Safety Professionals LLC, California Safe Driver, Dixon, CA