The policy states that personal information is retained for the duration of service use or as necessary for listed business and legal purposes, and that requesting deletion of personal information requires the user to delete their Figma account entirely.
This analysis describes what Figma's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision conditions personal data deletion on full account deletion, meaning users cannot request removal of specific personal data categories while retaining their Figma account, which may interact with GDPR and CCPA data minimization and deletion rights depending on the specific data category and processing purpose involved.
Interpretive note: The policy does not specify which data categories are indispensable to account maintenance versus which could be deleted without full account closure, creating ambiguity about the proportionality of the account-deletion precondition under GDPR and CCPA.
The updated terms now restrict how Figma may use personal information from children. Children may only use the Services through a Figma for Education Enterprise agreement with their school, and Figma explicitly prohibits using children's personal information to train or improve AI services, serve targeted advertisements, or enable third-party tracking. Parents may contact Figma if they learn a child provided personal information without consent outside of an education agreement.
View change record →Under this provision, a user who requests deletion of their personal information must also delete their Figma account, as the policy states that personal information is necessary to maintain the account. Certain data may be retained even after a deletion request to comply with legal requirements.
Cross-platform context
See how other platforms handle Data Retention and Deletion upon Account Closure and similar clauses.
Compare across platforms →"We store the personal information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and/or comply with applicable laws... You may request deletion of your personal information at any time as noted in "Your Privacy Rights", above, but that will require you to delete your account with us, as we need your personal information to maintain your account.Excerpt from Figma's Privacy Policy (Superseded URL)
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision conditions personal data deletion on full account deletion, meaning users cannot request removal of specific personal data categories while retaining their Figma account, which may interact with GDPR and CCPA data minimization and deletion rights depending on the specific data category and processing purpose involved.
Under this provision, a user who requests deletion of their personal information must also delete their Figma account, as the policy states that personal information is necessary to maintain the account. Certain data may be retained even after a deletion request to comply with legal requirements.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Figma.