The policy states that when a user interacts with or views a file, their IP address, specific in-file actions, and viewing timestamps may be disclosed to the file's administrator and, in some cases, to other file viewers.
This analysis describes what Figma's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that file administrators operating within enterprise or team deployments receive access to identifiable interaction data including IP addresses and specific user actions, which may create secondary data controller obligations for organizational customers subject to GDPR or CCPA.
The updated terms now restrict how Figma may use personal information from children. Children may only use the Services through a Figma for Education Enterprise agreement with their school, and Figma explicitly prohibits using children's personal information to train or improve AI services, serve targeted advertisements, or enable third-party tracking. Parents may contact Figma if they learn a child provided personal information without consent outside of an education agreement.
View change record →Under this provision, users who interact with or view Figma files may have their IP address, action history, and viewing timestamps disclosed to the file administrator and potentially to other viewers, regardless of whether the user is aware of this disclosure mechanism.
Cross-platform context
See how other platforms handle File Administrator Access to Viewer Activity Data and similar clauses.
Compare across platforms →"When you interact with a user's file, information about your interaction, including your IP address and the actions you've taken in connection with the file, may be made available to the file's administrator. When you view a file, the fact that you viewed the file and when you viewed the file may be available to other viewers of the file.Excerpt from Figma's Privacy Policy (Superseded URL)
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that file administrators operating within enterprise or team deployments receive access to identifiable interaction data including IP addresses and specific user actions, which may create secondary data controller obligations for organizational customers subject to GDPR or CCPA.
Under this provision, users who interact with or view Figma files may have their IP address, action history, and viewing timestamps disclosed to the file administrator and potentially to other viewers, regardless of whether the user is aware of this disclosure mechanism.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Figma.