110 Total
33 High severity
58 Medium severity
19 Low severity

Key Facts · in the document’s own words

What must users do in order to have their personal information deleted?
“You may request deletion of your personal information at any time... but that will require you to delete your account with us, as we need your personal information to maintain your account.”
Version CA-V-004556, captured July 7, 2026 · live source ↗
Our reading, not the document’s words
Figma requires users to delete their account in order to have their personal information deleted.
What may a request to delete records lead to?
“Please keep in mind that a request to delete records may lead to a termination of an account and/or the Services.”
Version CA-V-004556, captured July 7, 2026 · live source ↗
Our reading, not the document’s words
Figma states that a request to delete records may lead to a termination of an account and/or the Services.
What does Figma allow third-party advertising partners to do?
“we allow third-party advertising partners to set Technologies and other tracking tools to collect information regarding your activities and your device (e.g., your IP address, cookie identifiers, page(s) visited, location, time of day).”
Version CA-V-004556, captured July 7, 2026 · live source ↗
Our reading, not the document’s words
Figma allows third-party advertising partners to set technologies and other tracking tools to collect information regarding users' activities and devices.
What right do California residents have regarding the sale of personal information?
“California residents have the right to opt out of the "sale" of personal information and the "sharing" of personal information for "cross-context behavioral advertising."”
Version CA-V-004556, captured July 7, 2026 · live source ↗
Our reading, not the document’s words
California residents have the right to opt out of the sale of personal information and the sharing of personal information for cross-context behavioral advertising.
Does Figma use personal information collected from children to train, fine-tune, or otherwise develop or improve any AI services?
“Figma does not use personal information collected from Children to train, fine-tune, or otherwise develop or improve any AI services, (nor will we permit our service providers to do so) including large language models.”
Version CA-V-004556, captured July 7, 2026 · live source ↗
Our reading, not the document’s words
Figma does not use personal information collected from children to train, fine-tune, or otherwise develop or improve any AI services, and will not permit its service providers to do so.
Where does Figma transfer, process, and store personal information?
“all personal information we process is transferred to, processed and stored in the United States, where our headquarters and our main servers are located.”
Version CA-V-004556, captured July 7, 2026 · live source ↗
Our reading, not the document’s words
Figma transfers, processes, and stores all personal information it handles in the United States.
Stay ahead of the changes
Track Figma and get the diff the day its terms change.
Summary

Figma's privacy policy explains what data Figma collects, how long it keeps it, and who it shares it with. If you want your personal information deleted, you must delete your entire Figma account—you cannot remove your data while keeping your account. If you use Figma through an employer or school, that organization can request your information and holds certain rights over it.

Analysis

This privacy policy establishes how Figma collects, retains, shares, and processes personal information. Figma stores all personal information in the United States, retains it for the duration of a user's service relationship or until the collection purpose is fulfilled, and conditions deletion of personal information on full account deletion. Third-party advertising partners are permitted to deploy tracking technologies to collect behavioral and device data directly from users. Organizational accounts carry distinct disclosure obligations: Figma discloses user information to the employing organization at its request and grants that organization certain rights over user data, and domain capture functionality—enabled by default on Figma for Education Enterprise accounts—causes automatic disclosure of name, email, and profile picture to co-domain members. Children's personal information is explicitly excluded from use in AI training or improvement by Figma or its service providers.

What this means for you

Your personal information is retained for as long as you use Figma or until the purpose for which it was collected is fulfilled, and deleting it requires deleting your account entirely. Third-party advertising partners can place tracking technologies on Figma's platform to collect information about your activity and device—Figma does not limit this to its own data collection. If your account is on Figma for Education Enterprise, domain capture is on by default, meaning your name, email, and profile picture are automatically visible to others in your organization who share your email domain. If you are a California resident, you have the right to opt out of the sale of your personal information and its sharing for cross-context behavioral advertising.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

1 important change detected

12 versions captured · Latest change detected by ConductAtlas: May 2026

May 28, 2026

medium
What changed Figma revised its children's privacy protections to restrict child access to educational contexts only and expanded the scope of child age definitions across jurisdictions. The updated policy now requires children to use the Services only through Figma for Education Enterprise agreements with their educational institution, and explicitly prohibits using children's personal information to train AI services, for marketing, or for third-party advertising. The policy also clarified that service providers offering AI services are prohibited from using data inputs or outputs to train or improve their models.
Why this matters The updated policy restricts children's use of Figma to educational contexts only, requiring an agreement between the child's school and Figma. The revised terms explicitly state that Figma does not use children's personal information to train, fine-tune, or develop AI services, does not use it for marketing or targeted advertising, and prohibits third-party advertising partners from collecting children's data through the Services. Parents who discover their child provided personal information outside a school agreement may contact Figma at privacy@figma.com.
View full change record →
Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

110 provisions
12 featured
18 clause types
33 high severity
Account Control 1 1 high
Indemnification 1 1 high
Payment & Fees 1
Stay ahead of the changes

Monitoring

Figma has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Account Deletion Required for Personal Data Deletion and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

FAA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
This version captured July 7, 2026 00:31 UTC
Last successful capture September 28, 2026 00:37 UTC · 13 failed attempts since
Date stated by the document June 2, 2026 (as printed in this version)
Capture Method Automated scheduled archival capture
Document ID CA-D-000544
Version ID CA-V-004556
SHA-256 (extracted text, extractor v5) fc59dbf905593df74c4f60469a94d094a4d7235a45a0708512e59a623e4d0eda
✓ Snapshot stored Archived-bytes anchor not yet recorded

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans