Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
Figma's privacy policy explains what data Figma collects, how long it keeps it, and who it shares it with. If you want your personal information deleted, you must delete your entire Figma account—you cannot remove your data while keeping your account. If you use Figma through an employer or school, that organization can request your information and holds certain rights over it.
This privacy policy establishes how Figma collects, retains, shares, and processes personal information. Figma stores all personal information in the United States, retains it for the duration of a user's service relationship or until the collection purpose is fulfilled, and conditions deletion of personal information on full account deletion. Third-party advertising partners are permitted to deploy tracking technologies to collect behavioral and device data directly from users. Organizational accounts carry distinct disclosure obligations: Figma discloses user information to the employing organization at its request and grants that organization certain rights over user data, and domain capture functionality—enabled by default on Figma for Education Enterprise accounts—causes automatic disclosure of name, email, and profile picture to co-domain members. Children's personal information is explicitly excluded from use in AI training or improvement by Figma or its service providers.
Your personal information is retained for as long as you use Figma or until the purpose for which it was collected is fulfilled, and deleting it requires deleting your account entirely. Third-party advertising partners can place tracking technologies on Figma's platform to collect information about your activity and device—Figma does not limit this to its own data collection. If your account is on Figma for Education Enterprise, domain capture is on by default, meaning your name, email, and profile picture are automatically visible to others in your organization who share your email domain. If you are a California resident, you have the right to opt out of the sale of your personal information and its sharing for cross-context behavioral advertising.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
8 important changes detected
9 versions captured · Last updated: July 2026
Figma's privacy policy underwent a minor revision on June 4, 2026, in which several historical version dates were removed from the version history section. The effective date of the policy …
View change record →Figma updated its Privacy Policy version history on June 3, 2026. The change added a single entry to the version history list, showing an additional June 2, 2026 version record. …
View change record →Figma updated its Privacy Policy effective date from May 27, 2026 to June 2, 2026. This is a routine effective date change that appears to reflect when the policy document …
View change record →Figma updated its Privacy Policy on June 2, 2026 with two sentence-level modifications. The changes involve formatting adjustments to the version history listing and a minor punctuation update to the …
View change record →Figma updated its privacy policy on May 28, 2026 to expand protections for children under 13 using its services. The policy now restricts children's access to education-focused agreements only, prohibits …
View change record →Figma's privacy policy version history was updated on May 22, 2026 to add a duplicate entry for March 30, 2026. The policy effective date remains March 30, 2026, and the …
View change record →Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Figma has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Account Deletion Required for Personal Data Deletion and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.