Figma Privacy Policy

This is Figma's Privacy Policy, explaining what personal information Figma collects when you use its design tools — including your account details, usage behavior, design file content, communications, and device information — and how it uses and shares that data. The most important thing to know is that Figma may use the content of your designs and files to train and improve its AI features, which could affect the confidentiality of sensitive creative work you store on the platform. If you are a California resident, an EU/UK user, or a Canadian user, you can exercise specific rights including data deletion and objection to certain processing by contacting Figma at privacy@figma.com.

This document is Figma's Privacy Policy governing the collection, use, disclosure, and retention of personal data by Figma, Inc. in connection with its design, prototyping, and collaboration platform services, relying on legal bases including consent, contractual necessity, and legitimate interests under applicable law. Figma's most significant obligations include providing data subject rights (access, deletion, portability, correction, objection) and disclosing data to a broad range of third-party service providers, advertising partners, analytics vendors, and business transaction counterparties. A notable provision permits Figma to use content submitted to its services — including designs, files, and user-generated content — to train and improve AI/ML features, which may not be apparent to enterprise customers and raises IP and confidentiality concerns beyond standard SaaS data practices. The policy engages GDPR (with Figma's Irish entity as EU data controller), CCPA/CPRA for California residents, UK GDPR, and Canadian privacy law (PIPEDA), with cross-border data transfer mechanisms including SCCs and DPF certification referenced. Material compliance considerations include the breadth of advertising and analytics data sharing, the AI training use of user content, and the requirement for enterprise customers to assess whether their employee and client data processed through Figma is adequately covered by their own DPAs with Figma.