Figma retains your personal data for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements.
Figma does not commit to a specific deletion timeline, meaning your data could be retained indefinitely while your account is active and for an unspecified period after.
Open-ended retention language may conflict with GDPR's data minimization and storage limitation principles (Articles 5(1)(c) and 5(1)(e)). Legal and compliance teams should negotiate specific retention schedules in data processing agreements for enterprise deployments.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Figma collects a broad range of personal data including usage patterns, device information, and payment details, and may use this data for AI/ML model improvement and targeted advertising. Your design content and collaboration activity may be processed and shared with third-party service providers and advertising partners. You can submit a privacy rights request (access, deletion, opt-out of data sale/sharing) through Figma's privacy request form at https://www.figma.com/privacy-request/.