The policy states that domain capture is enabled by default for K-12 Enterprise education accounts, resulting in automatic disclosure of names, email addresses, and profile pictures to all users sharing the same organizational email domain.
This analysis describes what Figma's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a default-on data sharing configuration for education accounts that discloses student or staff identifying information across an organization without requiring affirmative action to enable the feature, which may engage FERPA and state student privacy obligations for U.S. educational institutions.
The updated terms now restrict how Figma may use personal information from children. Children may only use the Services through a Figma for Education Enterprise agreement with their school, and Figma explicitly prohibits using children's personal information to train or improve AI services, serve targeted advertisements, or enable third-party tracking. Parents may contact Figma if they learn a child provided personal information without consent outside of an education agreement.
View change record →Under this provision, users on Figma for Education Enterprise accounts have their name, email address, and profile picture automatically shared with others in their organization who share the same email domain, as this feature is enabled by default rather than requiring administrator activation.
Cross-platform context
See how other platforms handle K-12 Domain Capture Enabled by Default and similar clauses.
Compare across platforms →"Figma for Education's Enterprise accounts have domain capture functionality enabled by default in order to protect against unauthorized access from users with a different email domain. With domain capture enabled your name, email and profile picture (if you upload one) will be disclosed to other users across your Figma organization. This should be noted if email domains are shared across multiple educational institutions.Excerpt from Figma's Privacy Policy (Superseded URL)
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a default-on data sharing configuration for education accounts that discloses student or staff identifying information across an organization without requiring affirmative action to enable the feature, which may engage FERPA and state student privacy obligations for U.S. educational institutions.
Under this provision, users on Figma for Education Enterprise accounts have their name, email address, and profile picture automatically shared with others in their organization who share the same email domain, as this feature is enabled by default rather than requiring administrator activation.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Figma.