Provision record
Figma · Figma Privacy Policy (Superseded URL) · View original document ↗

Organization Administrator Rights Over User Data

High severity Medium confidence Explicit document language Common · 262 of 352 platforms

Key Facts · in the document’s own words

When does Figma disclose user information to the organization or paying party?
“If you access the Services on behalf of an organization... we will disclose your information to that organization or paying party at its request and give such organization certain rights over your information.”
Version CA-V-004556, captured July 7, 2026 · live source ↗
Our reading, not the document’s words
Figma discloses user information to the organization or paying party at its request and grants that organization certain rights over the user's information when the user accesses the Services on behalf of an organization.
Stay ahead of the changes
Track Figma and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Figma's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Users accessing Figma through an organization have their information subject to disclosure to that organization and to rights the organization holds over that information.

⚠

Interpretive note: The excerpt does not specify what 'certain rights' the organization receives over user information. The canonical claim preserves this unspecified qualifier rather than elaborating.

Recent Activity

This document changed recently

Medium May 28, 2026

The updated policy restricts children's use of Figma to educational contexts only, requiring an agreement between the child's school and Figma. The revised terms explicitly state that Figma does not use children's personal information to train, fine-tune, or develop AI services, does not use it for marketing or targeted advertising, and prohibits third-party advertising partners from collecting children's data through the Services. Parents who discover their child provided personal information outside a school agreement may contact Figma at privacy@figma.com.

View change record →

Consumer impact (what this means for users)

If you use Figma on behalf of an organization, that organization or paying party may request your information from Figma and holds certain rights over it.

How other platforms handle this

Grubhub Medium

You are responsible for maintaining the confidentiality and security of your Account including your password and, if applicable, any password for Facebook, Google, or other third party login.

Lyft Medium

Should you suspect that any unauthorized party may be using your User account or you suspect any other breach of security or violation of this Agreement, you agree to notify us immediately.

DoorDash Medium

You will keep secure and confidential your account password and any other login or identification credentials you use to access the Services.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
If you access the Services on behalf of an organization... we will disclose your information to that organization or paying party at its request and give such organization certain rights over your information.

Excerpt from Figma's Privacy Policy (Superseded URL)

Applicable regulations

CFAA
United States Federal

Provision details

Document information
Document
Figma Privacy Policy (Superseded URL)
Entity
Figma
Date stated by the document
June 2, 2026
As printed in Figma’s text (version CA-V-004556), not a ConductAtlas date.
Tracking information
First captured by ConductAtlas
May 5, 2026
Text quoted from version
CA-V-004556, captured July 7, 2026
Record ID
CA-P-046957
Document ID
CA-D-000544
Evidence Provenance
Source URL
Wayback Machine
Extracted-text SHA-256 (version CA-V-004556)
fc59dbf905593df74c4f60469a94d094a4d7235a45a0708512e59a623e4d0eda
Analysis generated
July 9, 2026 08:53 UTC
Methodology
Evidence
✓ Excerpt found verbatim in version CA-V-004556 (checked Oct. 5, 2026)
Citation Record
Entity: Figma
Document: Figma Privacy Policy (Superseded URL)
Record ID: CA-P-046957
Version: CA-V-004556
Captured: 2026-07-07 00:31:24 UTC
SHA-256: fc59dbf905593df7…
URL: https://conductatlas.com/platform/figma/figma-privacy-policy-superseded-url/provision/CA-P-046957/organization-administrator-rights-over-user-data/
Accessed: Oct. 12, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Figma's Organization Administrator Rights Over User Data clause do?

Users accessing Figma through an organization have their information subject to disclosure to that organization and to rights the organization holds over that information.

How does this clause affect you?

If you use Figma on behalf of an organization, that organization or paying party may request your information from Figma and holds certain rights over it.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 262 platforms. See the full comparison.

Is ConductAtlas affiliated with Figma?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Figma.