Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy includes a supplemental section specifically governing processing of personal information subject to the California Consumer Privacy Act, applying only to California residents; the full text of this section was not available in the provided document excerpt.
This analysis describes what Figma's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a California-specific supplemental privacy notice as required by CCPA and CPRA, addressing rights and disclosures applicable to California residents that may differ from or supplement the general policy terms.
Interpretive note: The California supplemental notice section was truncated in the available document, preventing full analysis of the specific CCPA and CPRA disclosures made in that section.
The updated terms establish specific restrictions on how Figma may use personal information collected from minors. Children under 13 in the US, under 16 in California and the EU, and under 18 in Japan may now use the Services only through agreements with educational institutions. Figma states it will not use children's personal information to train, fine-tune, or improve AI services, nor will it permit service providers to do so. The policy also prohibits using children's data for marketing purposes, targeted advertising, or enabling third-party tracking. If a parent learns their child provided personal information without consent outside an educational agreement, they may contact Figma to report the issue.
View change record →California residents are subject to a supplemental privacy notice that addresses CCPA and CPRA rights including opt-out of sale and sharing, access, deletion, correction, and non-discrimination rights; the complete text of this section was truncated in the available document and could not be fully analyzed.
Cross-platform context
See how other platforms handle California Residents Supplemental Notice and similar clauses.
Compare across platforms →Monitoring
Figma has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"SUPPLEMENTAL NOTICE FOR CALIFORNIA RESIDENTS This Supplemental Notice for California Residents supplements our Privacy Policy and only applies to our processing of personal information that is subject to the California Consumer Privacy Act ofExcerpt from Figma's Privacy Policy
1. REGULATORY LANDSCAPE: This provision directly engages the California Consumer Privacy Act and California Privacy Rights Act, enforced by the California Attorney General and the California Privacy Protection Agency. CPRA requires businesses to provide specific disclosures to California consumers regarding categories of personal information collected, purposes of use, retention periods, and rights available. The CPPA has active enforcement authority and has issued regulatory guidance on required disclosures. 2. GOVERNANCE EXPOSURE: Medium. The truncation of this section in the available document means a full compliance assessment cannot be completed from the available text. California supplemental notices must meet specific CPRA content requirements that may exceed those in the general policy. Organizations with California employee or consumer populations should obtain and review the complete supplemental notice. 3. JURISDICTION FLAGS: This provision applies exclusively to California residents. Organizations headquartered outside California but with California consumers or employees must comply with CCPA and CPRA requirements, which may require assessing whether the supplemental notice satisfies all applicable disclosure obligations. 4. CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers with California employee populations should verify that Figma's CCPA/CPRA disclosures, including the supplemental notice, address employee data processing as required following the expiration of the CCPA employee exemption. Service agreements should reference applicable CCPA terms. 5. COMPLIANCE CONSIDERATIONS: Legal teams should obtain and review the complete California supplemental notice to verify it satisfies all CPRA content requirements, including specific retention period disclosures and category-level data mapping. Any gaps between CPRA requirements and the supplemental notice disclosures should be flagged for remediation.
This provision establishes a California-specific supplemental privacy notice as required by CCPA and CPRA, addressing rights and disclosures applicable to California residents that may differ from or supplement the general policy terms.
California residents are subject to a supplemental privacy notice that addresses CCPA and CPRA rights including opt-out of sale and sharing, access, deletion, correction, and non-discrimination rights; the complete text of this section was truncated in the available document and could not be fully analyzed.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Figma.