This analysis describes what Figma's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated policy restricts children's use of Figma to educational contexts only, requiring an agreement between the child's school and Figma. The revised terms explicitly state that Figma does not use children's personal information to train, fine-tune, or develop AI services, does not use it for marketing or targeted advertising, and prohibits third-party advertising partners from collecting children's data through the Services. Parents who discover their child provided personal information outside a school agreement may contact Figma at privacy@figma.com.
View change record →How other platforms handle this
The Gramm-Leach-Bliley Act ("GLBA") requires financial institutions to explain their information-sharing practices to their customers and to provide the customer the ability to opt out of certain disclosures of their personal information.
if you choose to publish user content about these topics, please keep in mind that such content may be visible to other users and the public, depending on your privacy settings.
We may disclose your personal information in response to a legal obligation, or if we have determined that disclosing your personal information is reasonably necessary or appropriate to: Comply with any applicable federal, state, or local law or regulation...
"the following is a list of the categories of personal information Figma has "sold" or "shared" for "cross-context behavioral advertising" in the last twelve months: Identifiers disclosed to advertising networks...Excerpt from Figma's Privacy Policy (Superseded URL)
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause states: “the following is a list of the categories of personal information Figma has "sold" or "shared" for "cross-context behavioral advertising" in the last twelve months: Identifiers disclosed to advertising networks...”
ConductAtlas has identified this type of provision across 275 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Figma.