Figma Privacy Policy

This document is Figma's Privacy Policy, governing the collection, use, and disclosure of personal information in connection with Figma's design, collaboration, and AI-assisted services, with legal bases including consent, contract performance, and legitimate interests depending on jurisdiction. The policy states that Figma collects a broad range of data including account information, payment data, device and usage data, location information, and user-generated content, and the terms authorize use of this data for service delivery, analytics, marketing, safety, and to train or improve Figma's AI and machine learning features, subject to certain opt-out rights. A notable provision is the explicit disclosure that content submitted to AI features may be used to improve AI models, with an opt-out available for professional and organizational accounts but requiring affirmative action; the policy also asserts broad discretion to share data with third-party service providers, advertising partners, and corporate affiliates, which is common in the SaaS industry but warrants review given the breadth of design content and business-sensitive materials users may store. The policy engages GDPR and UK GDPR for EU and UK users (with a dedicated legal bases table and Data Protection Officer contact), CCPA and CPRA for California residents (with explicit rights disclosures and a Do Not Sell or Share opt-out), and COPPA for users under 16. Material compliance considerations include ensuring that AI training data use is supported by adequate legal bases under GDPR, that opt-out mechanisms for AI feature training are operationally effective, and that data transfers from the EU and UK to the US are covered by Standard Contractual Clauses or equivalent transfer mechanisms as asserted by the policy.