Governance document

CA-D-000206

Figma Privacy Policy

Figma

Last change detected July 7, 2026 Privacy policy

SHA-256: f7f03821eec4a58f9dc… 11 versions captured 11 changes documented

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

View original document at Figma ↗

This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology

119 Total

27 High severity

61 Medium severity

31 Low severity

Key Facts

How may children use the Services?

Figma permits children to use the Services only through a Figma for Education Enterprise agreement entered into with the student's educational institution.

What may third-party advertising partners do?

Figma allows third-party advertising partners to deploy technologies and tracking tools to collect information about users' activities and devices.

When does Figma disclose a user's information to the organization or paying party?

Figma discloses a user's information to the organization or paying party at its request when the user accesses the Services on behalf of an organization or has their account paid for by another party.

Where does Figma transfer, process, and store all personal information?

Figma transfers, processes, and stores all personal information in the United States, where its headquarters and main servers are located.

What functionality is enabled by default for Figma for Education Enterprise accounts?

Figma for Education Enterprise accounts have domain capture functionality enabled by default.

Does Figma use personal information collected from children to train, fine-tune, or otherwise develop or improve any AI services?

Figma does not use personal information collected from children to train, fine-tune, or otherwise develop or improve any AI services, and does not permit its service providers to do so.

Do Figma's service providers use personal information collected from children to train, fine-tune, or otherwise develop or improve any AI services?

Figma does not use personal information collected from children to train, fine-tune, or otherwise develop or improve any AI services, and does not permit its service providers to do so.

How long does Figma store personal information?

Figma stores personal information for as long as the user uses the Services or as long as necessary to fulfill the purpose(s) for which it was collected or to provide the Services or to resolve disputes.

When does Figma disclose certain information to a user's collaborators?

Figma discloses certain information to a user's collaborators when that user uses the Services to collaborate or interact with others.

Does Figma receive or store payment card information?

Figma does not receive or store payment card information, but may receive and store information associated with payment information, such as the last four digits of a payment card.

Stay ahead of the changes

Track Figma and get the diff the day its terms change.

Monitor Figma + up to 20 platforms — $4.99/mo →

Summary

Figma's Privacy Policy explains what information Figma and its advertising partners collect about you, how it is shared, and how long it is kept. If your account is paid for or managed by an organization, that organization can request your information from Figma. All your personal information is stored and processed in the United States, regardless of where you are located.

Analysis

Figma's Privacy Policy establishes the conditions under which Figma collects, uses, shares, retains, and transfers personal information. It permits third-party advertising partners to deploy tracking technologies on users' devices to collect activity and device data. All personal information is transferred to, processed in, and stored in the United States. Retention is tied to active use and the purposes for which data was collected, including dispute resolution, with no fixed deletion deadline. Children are categorically restricted from using the Services outside a Figma for Education Enterprise agreement, and their personal information is prohibited from being used to train or improve any AI services by Figma or its service providers.

What this means for you

Users whose accounts are organizationally managed or paid for by another party should know that Figma will disclose their information to that organization or payer upon request. Third-party advertising partners — not just Figma — may collect activity and device data through tracking technologies Figma has permitted on its Services. When collaborating with others, certain personal information is automatically disclosed to those collaborators. Figma retains personal information for as long as the Services are used or as long as needed for the purposes it was collected, including resolving disputes. Users can review Figma's privacy rights provisions to understand what choices, if any, are available regarding the data Figma holds.

Institutional Analysis

Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Monitor Figma + up to 20 platforms — $4.99/mo → Get the research letter, free

11 important changes detected

11 versions captured · Last updated: July 2026

July 7, 2026

low

What changed Figma updated its privacy policy footer navigation on July 7, 2026 to add a link to 'Digital Regulation Help Centre' in the list of resource links. The footer previously listed Community Code of Conduct, Privacy and Data Protection, Privacy & Trust Center, and intellectual property resources. The updated footer now includes a dedicated help resource for digital regulation topics alongside those existing links. This does not change any substantive privacy protections or data handling practices, but provides users with a new navigation pathway to regulation-related guidance.

Why this matters This change does not materially affect the substantive terms Figma users operate under. The updated footer adds a navigation link to a 'Digital Regulation Help Centre' but makes no changes to data collection, processing, retention, rights, or consent mechanisms. Users now have an additional resource available in the policy footer, but no obligations, permissions, or restrictions in the underlying privacy policy have changed.

View full change record →

June 13, 2026

low

What changed Figma updated a hyperlink label in their privacy policy from 'Code of Conduct' to 'Figma Code of Conduct' on June 13, 2026. This change clarifies that the linked document is specifically Figma's Code of Conduct rather than a generic reference. The operational difference is minimal: the hyperlink destination and functionality remain unchanged, but the label is now more explicit about which organization's code of conduct is being referenced.

Why this matters This change has no material impact on consumer rights or obligations. The updated label simply clarifies that the hyperlinked Code of Conduct is Figma's own document rather than a generic reference. The linked document, its content, and any rights or obligations it establishes remain unchanged. No consumer action is required.

View full change record →

June 4, 2026 low

Figma's Privacy Policy was updated on June 4, 2026 with a minor revision to the policy's version history section. Several dated version entries from June 2, 2026 and May 27, …

View change record →

June 3, 2026 low

Figma's privacy policy was updated on June 3, 2026, adding one entry to its version history table. The effective date remains June 2, 2026. This appears to be a routine …

View change record →

June 2, 2026 low

Figma updated the effective date of its Privacy Policy from May 27, 2026 to June 2, 2026. This is a routine administrative update to the document's publication date, reflecting when …

View change record →

June 2, 2026 low

Figma's Privacy Policy was updated on June 2, 2026 with two minor sentence modifications in the Children's Information section. The changes appear to be editorial, affecting punctuation or minor wording …

View change record →

May 28, 2026 medium

Figma updated its Privacy Policy effective May 27, 2026 to expand and clarify rules governing how children's personal information is collected and used. The updated policy restricts how children's data …

View change record →

May 22, 2026 low

Figma's Privacy Policy version history was updated on May 22, 2026 to add a duplicate entry for March 30, 2026 in the version list. The policy's effective date remains March …

View change record →

April 19, 2026 low

Figma updated its privacy policy contact information and reorganized its footer navigation on April 19, 2026. The main change: the privacy contact email shifted from support@figma.com to privacy@figma.com, and the …

View change record →

March 31, 2026 low

Figma updated its Privacy Policy on March 31, 2026 with administrative and contact information changes. The company removed a link to a separate Candidate Privacy Notice and reorganized footer navigation …

View change record →

March 19, 2026 low

Figma updated contact information for privacy inquiries on March 19, 2026. The privacy contact email changed from privacy@figma.com to support@figma.com, and the Data Protection Officer email for UK and EEA …

View change record →

Featured, High severity

California Right to Opt Out of Sale and Sharing Compare →

“California residents have the right to opt out of the "sale" of personal information and the "sharing" of personal information for "cross-context behavioral advertising."”

Added July 10, 2026 Standard Seen across 290 platforms
Children May Only Use Services via Education Agreement Compare →

Children have no permitted path to use the Services outside the Education Enterprise agreement channel, which restricts direct consumer access by minors.

Added July 10, 2026 Standard Seen across 282 platforms
Disclosure of Data to Advertising Partners for Targeting Compare →

Third parties, not just Figma, are collecting user activity and device data through technologies Figma has permitted, expanding the scope of data collection beyond Figma itself.

Added July 10, 2026 Standard Seen across 288 platforms
Disclosure of User Information to Organization or Paying Party Compare →

Users whose accounts are organizationally managed or paid for by a third party have their information accessible to that third party upon request, limiting personal privacy from the account sponsor.

Added July 10, 2026 Standard Seen across 288 platforms
International Transfer of Personal Information to US Compare →

All personal information, regardless of where users are located, is subject to U.S. jurisdiction and data law by virtue of being processed and stored there.

Added July 10, 2026 Standard Seen across 288 platforms
K12 Domain Capture Enabled by Default Compare →

Default enablement of domain capture means it is active without any affirmative choice by the account administrator, automatically affecting users with matching email domains.

Added July 10, 2026 Standard Seen across 288 platforms
No AI Training on Children's Personal Information Compare →

Both Figma and its service providers are prohibited from using children's personal information for any AI development or improvement purpose, providing a categorical protection.

Added July 10, 2026 Standard Seen across 217 platforms
Use of Customer Content to Train AI Models Compare →

“if "Content Training" is toggled on within your administrative user settings, Customer Content...We take steps to de-identify and aggregate data to protect your privacy for data we use …”

Added July 10, 2026 Standard Seen across 217 platforms

Featured, Medium severity

Data Retention Duration Based on Purpose and Law Compare →

Retention tied to use and purpose means personal information may be held indefinitely if disputes or other purposes persist, with no fixed deletion deadline.

Added July 10, 2026 Standard Seen across 275 platforms
Disclosure of Information to Collaborating Users Compare →

Using collaborative features triggers automatic disclosure of certain personal information to other users, which the individual may not fully anticipate.

Added July 10, 2026 Standard Seen across 288 platforms
Figma Does Not Store Payment Card Data Compare →

While full payment card data is not held by Figma, associated payment metadata is retained, which has its own privacy implications.

Added July 10, 2026 Standard Seen across 296 platforms
GPC Signal Treated as Opt-Out of Sale or Sharing Compare →

“If we are able to reasonably associate a GPC signal with an identifiable consumer, we will treat it as a request to opt-out of the "sale" or "sharing"/processing …”

Added July 10, 2026 Standard Seen across 290 platforms