Figma shares your personal data with a range of outside companies including payment processors, analytics firms, and advertising partners to support its business operations.
This analysis describes what Figma's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The breadth of third-party sharing, including with advertising partners, means your usage data and potentially other personal information may flow to companies outside Figma's direct control, with implications for targeted advertising and data aggregation.
Interpretive note: The policy does not enumerate specific advertising or analytics partners, making it difficult to assess the full scope of sharing in practice; actual data flows may be broader or narrower than the general disclosure suggests.
Your behavioral and usage data on Figma may be shared with advertising and analytics companies, which could result in targeted advertising based on your Figma activity. Users who prefer to limit this sharing can explore opt-out options through Figma's cookie and privacy settings.
How other platforms handle this
We may share your personal information with third party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service and marketing assistance. We may also share information with advertising and analyt...
We receive some of the data mentioned above from third parties. The below table describes the categories of those third parties. If you connect your Spotify account to a third party application, service or device, we may collect and use information from them. This collection is to make the integrati...
We may share your information with third-party advertising partners to provide you with targeted advertising. We also work with third-party analytics providers who help us understand how users interact with our Services. These third parties may use cookies, web beacons, and similar tracking technolo...
Monitoring
Figma has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We may share your personal information with third-party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance. We may also share your information with third-party analytics companies and advertising partners.— Excerpt from Figma's Figma Privacy Policy
REGULATORY LANDSCAPE: Sharing personal data with advertising partners engages GDPR's requirements for lawful transfer mechanisms and data processing agreements under Article 28, as well as CCPA's restrictions on sharing personal information with third parties for cross-context behavioral advertising. The FTC Act prohibits unfair or deceptive practices, and representations about third-party data sharing scope are within FTC enforcement scope. State privacy laws in Virginia, Colorado, and Connecticut may also apply depending on user location. GOVERNANCE EXPOSURE: Medium. The policy discloses sharing with advertising partners but does not enumerate specific partners or categories of data shared with each. This lack of specificity makes it difficult for compliance teams to conduct precise data mapping or to assess whether sharing practices are consistent with stated purposes. GDPR's accountability principle may require more granular documentation internally even if not publicly disclosed. JURISDICTION FLAGS: California residents have explicit CCPA rights to opt out of the sale or sharing of personal information with advertising partners. EU and UK users benefit from GDPR restrictions requiring that such sharing be supported by a valid legal basis and data processing agreements. US states with comprehensive privacy laws enacted after CCPA may impose similar opt-out rights. CONTRACT AND VENDOR IMPLICATIONS: B2B customers should confirm whether Figma's data processing agreements cover the full scope of third-party sub-processors used for advertising and analytics purposes, and whether sub-processor lists are maintained and updated as required under GDPR. Organizations with restrictions on data sharing in their own customer contracts should assess whether Figma's sharing practices create downstream compliance risks. COMPLIANCE CONSIDERATIONS: Compliance teams should request and review Figma's sub-processor list and assess whether standard contractual clauses or other transfer mechanisms are in place for all advertising and analytics partners that may receive EU or UK personal data. Cookie consent mechanisms should be audited to ensure that advertising-related tracking is only activated upon valid consent.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The breadth of third-party sharing, including with advertising partners, means your usage data and potentially other personal information may flow to companies outside Figma's direct control, with implications for targeted advertising and data aggregation.
Your behavioral and usage data on Figma may be shared with advertising and analytics companies, which could result in targeted advertising based on your Figma activity. Users who prefer to limit this sharing can explore opt-out options through Figma's cookie and privacy settings.
ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Figma.