Figma
- Your data trains their AI unless you switch it off in settings.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Figma keeps your designs, uses ads trackers, can train AI if Content Training is on.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, your designs, usage logs, device IDs, cookies, and sometimes voice.
Read the exact line
Privacy policy
“We collect applications and materials that are developed by you on the Services or uploaded to the Services by you or by third parties acting on your behalf.”
Training
They run the product, market to you, run ads, and may train AI if Content Training is on.
Read the exact line
Privacy policy
“if “Content Training” is toggled on within your administrative user settings, Customer Content and where we act as a (e.g. when processing Usage Data).”
Sharing
Collaborators, your company admin, service providers, and advertising partners can see data.
Read the exact line
Privacy policy
“Through our Services, we allow third-party advertising partners to set Technologies and other tracking tools to collect information regarding your activities and your device”
Kept
They keep it while you use the service and until they say they no longer need it.
Read the exact line
Privacy policy
“We store the personal information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected”
Controls
You can manage cookies, unsubscribe from marketing, , and toggle content training.
Read the exact line
Privacy policy
“You can also opt out of the “sale” or “sharing” of your personal information by clicking on the “Manage Cookies” link in the footer of figma.com.”
Fine print
They can close you anytime; subscriptions auto-renew.
No exact line could be verified.
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn Content Training off in admin settings
Administrative user settings; privacy policy also says “Learn more about how you can manage your AI features and content training here.”
Opt out of sale/sharing and ad cookies
“Manage Cookies” link in the footer of figma.com (you may need to log out)
Cancel auto-renew before the term ends
Figma account settings within the Services
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can shut off your account whenever they want, without warning.
Read the exact line
Terms of service
“Figma may terminate Customer’s access to and use of the Services, at Figma’s sole discretion, at any time and without notice or to Customer”
For example, you could lose access to work files overnight with no email first.
If someone sues them over your files or how you used Figma, you may have to pay their legal bills.
Read the exact line
Terms of service
“Customer will , , and, at Figma’s option, defend, Figma from any third party claims, disputes, demands, liabilities, damages, losses, and costs and expenses”
For example, if a client claims a file you uploaded stole their design, Figma can make you cover the lawsuit costs.
Ad companies track you on Figma and elsewhere to show personalized ads.
Read the exact line
Privacy policy
“These advertising partners use this information (and similar information collected from other websites) for purposes of delivering targeted advertisements to you”
For example, visiting a pricing page could later show Figma ads on other sites.
If Content Training is on in admin settings, your designs can be used to train AI.
Read the exact line
Privacy policy
“if “Content Training” is toggled on within your administrative user settings, Customer Content and where we act as a (e.g. when processing Usage Data).”
For example, a team admin leaving the toggle on could let your mockups help train Figma’s models.
Paid plans keep charging on a schedule and you usually cannot get money back.
Read the exact line
Terms of service
“Unless otherwise specified in these Terms, fees paid are non-refundable and quantities purchased cannot be decreased during the relevant subscription term.”
For example, if you cancel mid-year, you still pay through the end of that term with no refund.
You give up court and unless you email an opt-out within 30 days.
Read the exact line
Terms of service
“Customer must opt-out within 30 days of the date you first agree to these Terms or any updated Terms.”
For example, if you miss that window, not a class lawsuit.
Voice you record in Figma is treated as part of your project files.
Read the exact line
Privacy policy
“Customer Content may include personal information such as any names you use in your designs or your voice if you use any Figma voice features.”
For example, a voice comment on a prototype is stored with that file.
You still own your designs; Figma owns the software.
Read the exact line
Terms of service
“As between Customer and Figma, Customer retains all right, title, and interest in Customer Content, and Figma owns all right, title, and interest in the Services.”
For example, a logo you draw in Figma remains yours, not Figma’s.
To delete your personal data you generally have to close the whole account.
Read the exact line
Privacy policy
“You may of your personal information at any time as noted in “Your ”, above, but that will require you to delete your account with us”
For example, you cannot wipe old account details and keep using the same login.
You must be old enough to sign a contract, and Figma AI is for adults 18+.
Read the exact line
Terms of service
“Customer may only use the Services if Customer is of legal age to enter into these Terms according to the applicable laws and regulations in Customer’s (and, in the case of Figma AI, only if 18 years old or older).”
For example, a 16-year-old should not use Figma AI features under these terms.
Words to know
Legal words from the lines above, in plain English.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- data controller
- The company that decides why and how your data is used, and is responsible for it under privacy law. For example, the app maker is the controller; the cloud company storing files for it is only a processor.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- right to erasure
- Your right to have a company delete the personal data it holds about you, with some exceptions. For example, you can ask a social app to wipe your old posts and profile and it must, unless a law says otherwise.
- data subject rights
- The legal rights you have over your data, such as seeing it, fixing it, deleting it or moving it. For example, you can email the company and ask for a copy of everything it holds about you.
- governing law
- Which country's or state's laws are used to settle any dispute, no matter where you live. For example, a user in Ohio may find the terms are judged under California law.
How we got here · grade C · score 42/100 · 15 of 15 policy answers backed by a verified quote · 1 not stated
What does the app collect beyond what it needs to work?
They collect account details, your files, usage logs, IP address, cookies, device IDs, and similar technical data, plus location inferred from IP.
Does it record your voice, face or body, and what happens to that?
If you use voice features, your voice is collected as Customer Content and stored with your work, not described as session-only.
Are your chats and uploads used to train AI models, and is that off by default?
Customer Content is used to improve AI when Content Training is toggled on in administrative user settings. The policy does not clearly say the default is off.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Third-party ad partners place trackers and use your activity for interest-based ads, with cookie and GPC opt-outs.
Do they sell or share your data, and can you opt out?
Under CCPA they treat some ad tracking as a sale or sharing, and you can opt out via Manage Cookies or GPC.
What rights do they take over what you type and what the AI makes?
You keep ownership of Customer Content. Figma may use it to provide the service and, if training is on, to improve AI.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data while you use the service and as needed for legal and business reasons. Deleting personal data generally requires deleting your account by contacting them or rights requests.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
California notice says they draw inferences to create a profile of preferences. No in-product memory controls are described.
Do they commit to basic security, and have they leaked data?
They say they use physical, technical, and administrative security measures and point to a security page. No audit or VDP is described in these documents.
Is there a real age gate, and are teens protected?
You must be of legal age to contract; Figma AI is 18+. Kids may use Education accounts via their school. There is no described ID check.
Will they tell you when the rules change, and is the policy specific?
The terms are dated. They say they will try to give advance notice of material changes, and continued use means you accept. Retention periods stay general.
Can they close your account without warning, and can you get your data out first?
They may end access at any time without notice. After termination they may let you download files for 30 days, then delete them.
If something goes wrong, who pays?
The service is largely as-is, liability is capped at $100 or 12 months of fees, and you must indemnify them for claims about your content or your breaches.
Do subscriptions renew on their own, and can you get a refund?
Subscriptions auto-renew. You can cancel in account settings for the next term. Fees paid are generally non-refundable.
The privacy policy is 7,960 words at a professional or legal expert level (Flesch reading ease 13.1); the terms are 5,381 words at a professional or legal expert level.
