Figma's Terms of Service is the legal agreement that controls how you can use Figma's design tools, and it gives Figma a broad license to use your uploaded designs and content — including to train and improve its AI features. The single most important thing to know is that if you're a US user and have a dispute with Figma, you must resolve it through individual binding arbitration and cannot join a class action lawsuit, and Figma's maximum financial liability to you is capped at the fees you paid in the last 12 months or $100, whichever is greater. If you are in the EU, your contract is with Figma Ireland Limited and you have stronger data rights, but you should review your organization's data processing agreement with Figma separately.
Figma's Terms of Service govern use of its design collaboration platform (figma.com and related services) on the basis of a binding contractual agreement formed upon account creation or service access, with Figma, Inc. (a Delaware corporation) as the contracting entity for most users and Figma Ireland Limited for EEA/UK users. The most significant obligations include: users granting Figma a broad, worldwide, royalty-free license to host, reproduce, modify, and distribute user content; users indemnifying Figma against third-party claims arising from their content or conduct; and Figma reserving unilateral rights to modify, suspend, or terminate services with or without notice. Notably, the ToS includes a mandatory arbitration clause with class action waiver for US users, a limitation of liability capped at fees paid in the prior 12 months (or $100 if no fees paid), and a broad content license that expressly permits Figma to use user-submitted content to improve its products and services including AI/ML features. The document engages GDPR (for EEA users processed under Figma Ireland Limited), CCPA (for California residents with explicit data rights references), and COPPA (minimum age 16 for EEA, 13 elsewhere), and implicates FTC Act Section 5 through its unfair/deceptive practices exposure; compliance teams should note that the dual-entity structure creates separate regulatory exposure under EU and US frameworks, and that the AI/ML content use provision may implicate the EU AI Act for EEA-based enterprise customers.
1) REGULATORY EXPOSURE: This document engages GDPR Arts. 6, 13, 28 (data processing, lawful basis, processor agreements) enforced by EU data protection authorities including the Irish DPC (lead super…
1) REGULATORY EXPOSURE: This document engages GDPR Arts. 6, 13, 28 (data processing, lawful basis, processor agreements) enforced by EU data protection authorities including the Irish DPC (lead supervisory authority for Figma Ireland Limited); CCPA §§1798.100-1798.199 enforced by the California Pri…
Compliance intelligence locked
Regulatory exposure, material risk, and due diligence action items.
1 change analyzed since monitoring began.