Monitored company
Figma
clause.watch tracks 2 legal documents published by Figma, re-reading each one every six hours. Below is what each document covers, in plain English.
Privacy
Figma Privacy Policy — User Overview
Effective date: June 2, 2026. This summary is informational, not legal advice. The policy applies to Figma websites, apps, APIs, design tools, and related services, but not independent third-party services linked through Figma.
1. Data Collection & Usage
Information Figma may collect
Depending on how you use Figma, it may collect:
- Account details: name, email, profile photo, website, and phone number if two-factor authentication is enabled.
- Customer Content: designs, files, applications, uploaded materials, names appearing in designs, and potentially voice data from voice features.
- Usage and technical data: IP address, device and browser details, operating system, MAC address, cookies, identifiers, inferred location, pages viewed, links clicked, interactions with other users, and file-access activity.
- Communications: information submitted to sales, support, surveys, events, newsletters, and contests. Calls or video conferences with support may be recorded for training or quality assurance.
- Employment and education information: job application data, school details, and proof of student status.
- Payment-related information: payment processors such as Stripe or app stores handle payment card details. Figma generally receives only associated information, such as payment status, country, or the last four card digits.
- Information from others: employers, schools, administrators, connected third-party services, and organizations provisioning your account.
Purposes
Figma uses information to:
- Provide, secure, maintain, troubleshoot, and improve the Services;
- Manage accounts, collaboration, payments, support, and debt collection;
- Analyze usage, conduct research, and create aggregated or de-identified information;
- Send service communications and, where permitted, marketing;
- Deliver and measure advertising;
- Comply with law and enforce agreements; and
- Consider job applicants.
Retention: Data may be retained while you use Figma or as needed for legal, dispute, audit, security, business, or backup purposes. Deletion requests may require deleting your account, and backups may remain isolated until deletion is possible.
2. User Rights and Choices
Depending on location, users may have rights to:
- Confirm whether Figma processes their data;
- Access and obtain a copy of it;
- Port data to another provider;
- Correct inaccurate information;
- Request deletion;
- Restrict or object to processing;
- Withdraw consent; and
- Opt out of marketing.
Figma may verify identity before responding. If you use Figma through an employer, school, or other organization, that organization may control the account and may be responsible for handling rights requests.
Users can:
- Unsubscribe from marketing emails;
- Disable push notifications;
- Manage cookies and targeted advertising;
- Use Google Analytics’ opt-out tool; and
- Use California “Manage Cookies” controls to opt out of the sale/sharing of data for targeted advertising.
Figma does not honor Do Not Track signals but recognizes certain Global Privacy Control signals. Cookie opt-outs may need to be repeated for each browser and device.
EU/UK/EEA users may also complain to a data protection supervisory authority. California residents have additional CCPA rights, including non-discrimination and opt-out rights.
3. Third-Party Sharing
Figma may disclose information to:
- Collaborators and other users: names, profile photos, comments, file activity, IP addresses, and viewing history may be visible depending on file and administrator settings.
- The public: public files and Community content may expose included personal information and be indexed by search engines.
- Organizations and administrators: employers, schools, or paying parties may receive information and exercise account controls.
- Service providers: hosting, analytics, customer support, security, advertising, payment, IT, and AI providers.
- Advertising partners: cookies and tracking tools may support interest-based advertising across third-party services.
- Community creators and connected platforms: relevant transaction or shared information may be disclosed.
- Authorities or transaction participants: disclosure may occur for legal demands, safety, fraud prevention, debt collection, mergers, acquisitions, bankruptcy, or asset transfers.
A significant practical risk is that content made public—or shared with an organization or collaborator—may no longer be within Figma’s control.
4. AI/ML Training
Figma may use Customer Content for AI training only when “Content Training” is enabled in administrative settings. When Figma acts as a controller, it may also use Usage Data. Figma states that it de-identifies and aggregates data to protect privacy.
This is an important administrative setting: individual users may not control it if an organization’s administrator controls the account. The policy refers to additional AI information not included in the provided text.
For children’s education accounts, Figma says children’s data is not used to train, fine-tune, develop, or improve AI services, and AI providers are contractually prohibited from doing so.
5. Key Obligations and Restrictions
Users should:
- Check file-sharing and publication settings carefully;
- Avoid placing confidential, sensitive, or third-party personal information in public files;
- Understand that administrators may monitor or access activity;
- Review third-party privacy policies before connecting services;
- Comply with Figma’s Terms and Acceptable Use Policy; and
- Keep account credentials and devices secure.
6. Liability and Disputes
This Privacy Policy does not provide a detailed liability cap or general dispute procedure; those terms are primarily in Figma’s Terms of Service or customer agreements. Figma disclaims responsibility for third-party websites, connected services, collaborators, organizations, and creators.
For EU/UK/Swiss data transferred under the Data Privacy Framework, complaints go first to Figma. Figma states it will attempt resolution within 45 days, then unresolved complaints may proceed to JAMS dispute resolution, with possible binding arbitration in qualifying circumstances.
7. Policy Changes
Figma may revise the policy at its discretion. It says it will provide notice of material changes when required by applicable law. This may mean notice through the Services, email, or another legally sufficient method; users should periodically review the policy and its version history.
Terms of Service
Figma Terms of Service: User-Focused Overview
*Effective March 11, 2026. This summary addresses the provided Terms of Service only; Figma’s Privacy Policy, Data Processing Addendum (DPA), Acceptable Use Policy, and AI Terms may add important requirements.*
1. Data Collection and Usage
- Customer Content: This includes files, designs, materials, and other content that users upload or create in Figma. You retain ownership of this content.
- How Figma may use it: Figma and its service providers may use Customer Content only to provide and operate the Services, including maintenance, security, debugging, quality control, and related activities.
- Usage Data: Figma may collect and analyze technical logs, metadata, telemetry, performance information, and information about how Customer Content is used—for example, access frequency. Figma may use this data indefinitely, including after termination, in de-identified and aggregated form to maintain and improve its products.
- Other personal data: The Terms do not provide a complete list of personal data collected. They incorporate the Privacy Policy and, where applicable, the DPA. Those documents should be reviewed for information about account details, usage information, cookies, subprocessors, international transfers, retention, and legal bases for processing.
2. User Rights
- You retain your intellectual-property rights in Customer Content.
- Following termination, Figma will generally make stored Customer Content available for electronic retrieval for 30 days, after which it may delete it. Export or retrieval should therefore occur promptly.
- The Terms do not expressly provide detailed rights to access, correct, delete, restrict, or object to processing. Those rights, if applicable, are primarily governed by the Privacy Policy, DPA, and local privacy law.
- Figma owns the Services and receives rights to use voluntary feedback to maintain and improve its products.
- Users must be of legal age to use the Services; Figma AI requires users to be at least 18.
3. Third-Party Sharing
- Figma may use third-party service providers, including listed subprocessors, to support the Services. These providers may process Customer Content and related data for service-related purposes.
- The Terms state that Figma remains responsible for compliance with the agreement, but users should review the current subprocessor list and DPA for safeguards and transfer mechanisms.
- Non-Figma resources—such as plugins, integrations, component libraries, and third-party services—are outside the Services. Figma disclaims responsibility for them, and their providers may have separate data practices.
- Figma may disclose confidential information when legally required, generally using reasonable efforts to provide advance notice where permitted.
4. AI/ML Training
- These Terms do not clearly state that Customer Content will or will not be used to train AI models.
- They specifically refer users to the separate Figma AI Terms, which govern AI-related settings and controls applicable to Customer Content.
- The express usage license in these Terms is limited to providing the Services and related operations. However, users should not assume this resolves AI-training questions; review the AI Terms and settings before submitting confidential, regulated, or sensitive content.
5. Key User Obligations and Restrictions
Users must:
- Provide accurate account information and protect usernames and passwords.
- Ensure Authorized Users comply with the Terms; the Customer is responsible for their activities.
- Avoid credential sharing; each account is personal to its assigned user.
- Comply with the Acceptable Use Policy and export-control/sanctions laws.
- Use the Services only for permitted internal business or personal purposes. Paid plans are for business use; free accounts may be used for business or personal purposes.
- Not reverse engineer, copy, modify, resell, sublicense, distribute, rent, or provide unauthorized access to the Services.
- Consider enabling two-factor authentication. Figma disclaims responsibility for losses that 2FA could have prevented.
- Pay recurring subscription, seat, and AI-credit charges. Subscriptions automatically renew, fees are generally non-refundable, and prices may change.
The Customer must indemnify Figma for third-party claims arising from Customer Content or violations of the Terms.
6. Liability and Disputes
- Figma excludes liability for indirect, consequential, special, exemplary, and similar damages, including lost profits, data, or use.
- Figma’s total liability is capped at the greater of $100 or the subscription fees paid in the preceding 12 months, subject to applicable law.
- Services and third-party resources are provided with limited express warranties; broad implied warranties are disclaimed.
- Figma may suspend or terminate access at its discretion, potentially without notice. Paid users may receive a prorated refund if termination is not caused by their breach.
- Disputes generally must go to individual binding arbitration, not court or class action. Users waive jury trial rights unless they opt out.
- Arbitration opt-out must be submitted individually within 30 days of first agreeing to the Terms or updated Terms. Non-arbitrated claims must generally be brought in San Francisco courts under California law.
- Before arbitration, the parties must send a detailed written notice and allow 60 days to resolve the dispute.
7. Changes to Terms and Services
Figma may change the Terms and referenced policies at any time. It will try to give reasonable advance notice of material changes through the platform, website, or account email, but notice is not guaranteed in every case. Continued use after the effective date constitutes acceptance.
Figma may also change or discontinue features without notice. For paid services that are discontinued, Figma may provide a similar service or a prorated refund.
Change history
2026-10-21 · Terms of Service
Summary
The provided diff does not include the actual contractual language that was added, deleted, or replaced. It only states:
> “Added approximately 96 words to the document”
Accordingly, it is not possible to determine the legal or commercial effect of the changes.
AI Training and Customer Data
No substantive language regarding the following has been provided:
- Whether customer data may be used to train, fine-tune, or improve AI models
- Whether customer prompts, inputs, outputs, or usage data are retained
- Whether data is anonymized, aggregated, or de-identified before use
- Whether customer data may be shared with affiliates, vendors, or third-party model providers
- Whether the customer can opt out of AI training or data use
- Whether the provider obtains ownership or license rights in customer data or generated outputs
- Security, confidentiality, deletion, or retention obligations relating to AI systems
Therefore, no conclusion can be drawn about whether the amendment expands or restricts the provider’s rights to use customer data for AI training.
Risk Assessment
The legal risks cannot be assessed without the underlying text. In particular, the added language could potentially:
- Grant broader rights to use customer content or usage information
- Permit training of general-purpose or third-party AI models
- Reduce confidentiality or data-protection protections
- Allow indefinite retention or reuse of data
- Limit the customer’s ability to object, opt out, or require deletion
- Shift responsibility for regulatory compliance or unauthorized disclosure to the customer
Information Needed
Please provide the actual 96-word addition and any surrounding or amended provisions, using the stated notation:
{added text}[deleted text][]{replacement text}
The full language is necessary to identify the precise changes, obligations, and risks.
2026-10-21 · Privacy
2026-10-21 · Terms of Service
Summary of Important Changes
1. Scope and Contract Formation
- The introductory language has been substantially reformatted and expanded with links to Figma’s legal resources, including the:
- Software Services Agreement
- Data Processing Addendum
- Figma AI Terms
- Creator Agreement
- Developer Terms
- Privacy and other policies
- The core scope remains substantially the same: the Terms govern Figma Websites, the Figma Platform, and Figma’s Documentation, collectively defined as the “Services.”
- The agreement now states more clearly that the Terms are entered into between the Customer and Figma, Inc.
- The language addressing users acting for an organization has been clarified. A person using the Services on behalf of an entity represents that they are authorized to accept the Terms, and references to “Customer” apply to that entity.
- Risk: An unauthorized employee or contractor could potentially create arguments about whether the organization is bound, although the representation strengthens Figma’s position that the accepting user had authority.
2. Enterprise and Organization Customers
- The Terms continue to direct customers purchasing an Organization or Enterprise plan to the separate Software Services Agreement.
- No substantive change to the allocation of terms between the consumer/individual Terms and the Software Services Agreement is apparent.
3. Customer Data, Usage Data, and AI Training
- The definition of Customer Content remains materially unchanged. It covers materials developed or uploaded by the Customer or its Authorized Users.
- Figma’s right to collect Usage Data remains. Usage Data includes information relating to access, use, and performance of the Services, such as technical logs, metadata, and telemetry.
- Figma may continue to use Usage Data, during and after the Term, in de-identified and aggregated form to maintain, improve, and enhance its products and services.
- The revised text does not visibly add an express right to use Customer Content to train general-purpose AI models, nor does it visibly expand Figma’s AI-training rights.
- The Terms continue to state that Figma’s artificial-intelligence features, including AI-related settings applicable to Customer Content, are governed by separate Product-Specific Terms. The linked Figma AI Terms should therefore be reviewed separately; this diff does not show their contents.
- Risk: The main Terms incorporate or point users toward external AI-specific terms, potentially allowing important data-use rules to appear outside this document and change separately.
4. Other Observations
- Most remaining changes are punctuation, capitalization, formatting, or grammatical modernization, such as replacing curly apostrophes and quotation marks.
- The dispute-resolution, arbitration, confidentiality, indemnity, liability, renewal, termination, and export-control provisions appear substantively unchanged in the displayed diff.
- A new “See all versions” reference appears at the end, apparently providing access to prior versions rather than changing the operative obligations.
2026-10-18 · Terms of Service
Summary
The supplied diff states only that approximately 96 words were added. It does not include the text of the additions, deletions, or replacements.
Substantive Legal Changes
- Cannot be determined from the information provided.
- No specific changes to rights, obligations, liability, confidentiality, data use, intellectual property, or termination provisions are visible.
Customer Data and AI Model Training
- The diff does not identify whether customer data may be used to train, fine-tune, evaluate, or improve AI models.
- It is therefore not possible to determine whether the new language:
- Authorizes use of customer data or prompts for model training;
- Allows use of data in aggregated, de-identified, or identifiable form;
- Permits sharing with affiliates, vendors, or model providers;
- Creates an opt-in or opt-out mechanism;
- Imposes retention, deletion, confidentiality, or security limits; or
- Grants the provider ownership or broad license rights over customer data or model outputs.
Risk Assessment
Because the actual 96 added words are missing, any assessment of legal risk would be speculative. In particular, the presence or absence of AI-training permissions cannot be confirmed.
Information Needed
Please provide the actual redlined text, including the words shown in {additions}, [deletions], and []{replacements}.
2026-10-18 · Privacy
2026-10-18 · Terms of Service
Summary of Important Changes
1. Scope and Contract Structure
- The Terms now expressly define the covered “Services” as:
- Figma websites;
- The Figma Platform for Starter and Professional plans; and
- Figma’s published Documentation.
- The revised text clarifies that customers purchasing an Organization or Enterprise plan should instead refer to the Figma Software Services Agreement.
- The terms are now presented alongside or linked to additional documents, including:
- Data Processing Addendum;
- Figma AI Terms;
- Creator Agreement;
- Figma Developer Terms;
- Figma Live Events terms; and
- Privacy, acceptable-use, and other policy documents.
Risk: The expanded network of linked and product-specific terms may make it less clear which documents govern a particular use case. Customers should review the Software Services Agreement and Figma AI Terms where applicable, rather than relying solely on these Terms.
2. Authority to Bind an Organization
The revised language adds that a person using the Services for an entity represents that they are:
- Authorized to accept the Terms on behalf of themselves and the entity; and
- Authorized to bind that entity, with references to “Customer” applying to the entity.
Risk: An unauthorized employee or contractor could potentially create arguments about whether the entity is bound. Organizations should control who may accept terms and manage administrative accounts.
3. Customer Data and Usage Data
The diff does not add an express statement that Customer Content will be used to train Figma’s AI models.
The existing Usage Data provision remains materially the same. It permits Figma to collect information about access, use, and performance of the Services—including technical logs, metadata, and telemetry—and use it during and after the contract in de-identified and aggregated form to maintain, improve, and enhance Figma’s products and services.
Important distinction: This is a broad product-improvement right, but the quoted language does not expressly authorize training AI models on identifiable Customer Content. However:
- AI-related use is governed by separate Figma AI Terms and Product-Specific Terms.
- The Terms now specifically reference Figma’s artificial-intelligence features and “AI-related settings that apply to Customer Content.”
- Those separate terms or settings may contain the operative rules on whether Customer Content, prompts, outputs, or related data may be used for model training.
Recommended action: Review the current Figma AI Terms, AI settings, and Data Processing Addendum for explicit training, retention, human-review, subprocessors, and opt-out provisions.
4. Other Notable Changes
- The Terms continue to include automatic renewal and AI-credit subscription provisions; no material commercial change is apparent from this diff.
- Arbitration, class-action waiver, indemnity, liability limits, termination rights, and export-control provisions appear substantively unchanged.
- The addition of “See all versions” may improve access to prior versions but does not itself create a contractual protection.
2026-10-18 · Privacy
2026-10-17 · Terms of Service
Summary of Important Changes
1. Contract structure and scope
- The introductory material has been substantially reformatted and reorganized, apparently incorporating website navigation links and references to related documents, including:
- Data Processing Addendum
- Figma AI Terms
- Software Services Agreement
- Product-specific terms
- Privacy and other policies
- The definition of the “Services” is clarified to include:
- Figma’s websites;
- Figma Platform offerings under Starter and Professional plans; and
- Figma’s published documentation.
- The revised language expressly states that customers purchasing an Organization or Enterprise plan should refer to the separate Figma Software Services Agreement. This may make the agreement’s applicability to different subscription tiers clearer, but customers should confirm which document governs their account.
2. Authority to bind an organization
- The entity-authorization provision is restated and completed. A person using the Services for an entity represents that they are authorized to accept the Terms on that entity’s behalf.
- “Customer” is expressly defined to refer to that entity where applicable. This reinforces potential organizational responsibility for user activity, fees, compliance, and indemnity obligations.
3. Customer data and AI-model training
- The diff does not show a clear new grant allowing Figma to use Customer Content—such as files, designs, prompts, or uploaded materials—to train AI models.
- The existing Usage Data provision remains materially important. Figma may collect information concerning access, use, and performance of the Services, including technical logs, metadata, and telemetry, and may use de-identified and aggregated Usage Data, during and after the term, to maintain, improve, and enhance its products and services.
- This could permit use of de-identified or aggregated service-usage information in developing or improving AI-enabled products, but the excerpt does not expressly state that Customer Content itself may be used for model training.
- The revised text continues to refer to Figma’s artificial-intelligence features and related settings applicable to Customer Content as Product-Specific Terms. Those separate Figma AI Terms and settings may contain the operative rules on AI processing, retention, third-party model providers, or training. They should be reviewed separately.
- The Data Processing Addendum and Privacy Policy remain relevant for personal data or processing not covered by the DPA.
4. Other notable points
- The revised text confirms automatic renewal of platform subscriptions and AI-credit subscriptions, including monthly or annual renewals and pay-as-you-go AI-credit billing.
- Figma retains broad termination rights, including discretion to terminate access, while certain provisions—including Usage Data and Customer Content provisions—survive termination.
- The arbitration, class-action waiver, indemnity, limitation-of-liability, and governing-law provisions appear substantively unchanged in the supplied diff, although wording and punctuation were modernized.
2026-10-17 · Privacy
2026-10-16 · Terms of Service
Summary
The provided diff does not include the actual contractual language. It only states:
> “Added approximately 96 words to the document”
Accordingly, it is not possible to determine:
- What provisions were added or changed;
- Whether customer data may be used to train, fine-tune, evaluate, or improve AI models;
- Whether such use is optional, automatic, or subject to consent;
- Whether the customer’s data may be shared with affiliates, vendors, or third-party AI providers;
- Whether customer data will be anonymized, aggregated, retained, or deleted;
- Whether the customer receives any opt-out, deletion, confidentiality, or ownership protections; or
- Whether the provider may use inputs, outputs, usage data, metadata, or derived information for model development.
AI Training Risk Assessment
No conclusion can be reached about AI-training risks without the added wording. In particular, the relevant language should be reviewed for terms such as:
- “train,” “fine-tune,” “improve,” “develop,” or “enhance” models;
- “inputs,” “outputs,” “content,” “customer data,” or “usage data”;
- “de-identified,” “aggregated,” or “anonymized” data;
- “service providers,” “affiliates,” or “third-party models”;
- “perpetual,” “irrevocable,” “worldwide,” or “royalty-free” rights; and
- opt-out, deletion, retention, confidentiality, and security commitments.
Required Information
Please provide the full diff, including the approximately 96 added words and any surrounding or replaced language. The exact wording is necessary to identify legal effects and assess whether the customer’s data may be used to train AI models.
2026-10-15 · Terms of Service
Summary
The provided diff does not include the actual amended legal language. It only states:
> “Added approximately 96 words to the document”
Because the new wording is not shown, it is not possible to reliably identify:
- Changes to customer data rights or obligations
- New permissions to collect, use, share, or retain data
- Whether customer data may be used to train, fine-tune, evaluate, or improve AI models
- Whether data may be de-identified, aggregated, or combined with other information
- New disclosures to third parties or service providers
- Changes to confidentiality, security, deletion, or data-retention commitments
- Any limitation of liability or indemnity relating to AI or data use
AI-Training Risk Assessment
No conclusion can be reached from the information provided. The statement that approximately 96 words were added does not reveal whether those words:
- Authorize the provider to use customer content for AI model training;
- Permit use of prompts, outputs, personal data, or confidential information;
- Apply training permission by default or only with consent;
- Allow use of data for model improvement, benchmarking, or product development;
- Permit human review or sharing with subprocessors; or
- Provide an opt-out, deletion right, or restrictions on retention.
Information Needed
Please provide the actual additions and any replacement or deletion language, using the stated notation. The relevant provisions may concern:
- “Customer Data,” “Content,” “Inputs,” or “Outputs”
- Product improvement or service improvement
- Artificial intelligence, machine learning, or model training
- De-identification or aggregated data
- Confidentiality and security
- Subprocessors and third-party providers
- Data retention and deletion
- Opt-out or consent mechanisms
Once the substantive diff is provided, the legal and AI-training implications can be assessed accurately.
2026-10-15 · Terms of Service
Summary of Important Changes
1. Scope and Contract Structure
- The Terms are now presented as part of a broader set of linked legal documents, including:
- Software Services Agreement
- Data Processing Addendum
- Figma AI Terms
- Community and Developer Terms
- Creator Agreement
- Figma Developer Terms
- Figma Live Events terms
- Various policies and guidelines
- The Terms expressly cover Figma’s Websites, Starter and Professional offerings, and related Documentation, collectively defined as the “Services.”
- Customers purchasing an Organization or Enterprise plan are directed to the separate Figma Software Services Agreement. This creates a risk that different customer tiers will be governed by materially different terms.
2. Acceptance and Authority
- Acceptance is expressly formed by accepting the Terms or using the Services.
- The language concerning representatives of entities has been clarified. A person using the Services for an organization represents that they are authorized to accept the Terms on the organization’s behalf.
- “Customer” is clarified to refer to the represented entity where applicable. This may increase the organization’s exposure to obligations, fees, user activity, indemnities, and dispute-resolution provisions.
3. AI and Use of Customer Data
- The diff does not show an express new right for Figma to use Customer Content to train AI models.
- The Terms continue to distinguish:
- Customer Content: materials developed or uploaded by the Customer or its Authorized Users.
- Usage Data: technical logs, metadata, telemetry, and other information relating to access, use, and performance.
- Figma may use Usage Data, in de-identified and aggregated form, during and after the contract term to maintain, improve, and enhance its products and services. This is a broad product-improvement right, but the visible wording does not expressly authorize training models on identifiable Customer Content.
- AI features, including AI-related settings applicable to Customer Content, are governed by separate Figma AI Terms/Product-Specific Terms. Those linked terms should be reviewed separately because they may contain the operative rules on:
- Whether Customer Content is used to train AI models;
- Opt-out or account-level controls;
- Use of prompts, outputs, and uploaded materials;
- Third-party AI providers and retention;
- Whether enterprise and non-enterprise customers receive different protections.
- The reference to AI-related settings indicates that data-use controls may be located outside these Terms and may change independently.
4. Other Material Risks
- Auto-renewal provisions for subscriptions and AI Credits remain important, including monthly or annual renewals and separate AI-credit purchasing options.
- Figma retains broad termination rights, including discretionary termination of access in some circumstances.
- Customer indemnity obligations cover claims arising from Customer Content and violations of the Terms.
- Binding arbitration and class-action waiver provisions remain in place, subject to an opt-out procedure.
- The final language appears to state that all versions of customer ordering documents are void, which may limit reliance on purchase orders or vendor-management terms unless expressly accepted by Figma.
Key Action
Review the separate Figma AI Terms and applicable Product-Specific Terms before using AI features; the principal AI-training rights may be located there rather than in this document.
2026-10-15 · Privacy
2026-10-14 · Privacy
2026-10-12 · Privacy
2026-10-12 · Privacy
2026-10-09 · Terms of Service
Executive Summary
The diff appears largely to replace or rearrange website navigation, headings, punctuation, and typography. However, several substantive legal changes or clarifications affect contract scope, authority, usage data, and AI-related terms.
Important Substantive Changes
1. Broader and clearer definition of the “Services”
The revised language expressly defines the Services as including:
- Figma-owned or operated Websites;
- The Figma Platform for Starter and Professional plans; and
- Figma’s published Documentation.
This replaces the prior, more abbreviated description and makes clear that use of Websites and Documentation is governed by the Terms.
2. Organization and Enterprise customers are redirected to another agreement
The revised Terms now state that customers purchasing an Organization or Enterprise plan should refer to the Figma Software Services Agreement.
Risk/impact: Customers may be governed by different contractual terms depending on their plan. The applicable agreement should be identified and reviewed before accepting the Terms, particularly for data use, security, liability, indemnification, and termination provisions.
3. Expanded authority representation
The revised language expressly provides that a person using the Services on behalf of an entity represents that they are authorized to accept the Terms for both themselves and that entity. It also clarifies that references to “Customer” refer to the entity.
Risk/impact: An unauthorized employee or contractor could potentially create arguments about apparent authority or personal responsibility. Organizations should limit acceptance to properly authorized personnel.
4. Usage Data rights remain broad
The provision concerning Usage Data continues to allow Figma to collect information about access, use, and performance of the Services, including technical logs, metadata, and telemetry. Figma may use Usage Data, during and after the Term, in de-identified and aggregated form to maintain, improve, and enhance its products and services.
Risk/impact: The clause does not appear to newly authorize use of identifiable Customer Content for product improvement, but the definition and examples of Usage Data should be reviewed carefully. “De-identified” data may still create re-identification or confidentiality concerns depending on implementation.
AI-Related Changes
The revised Terms expressly identify Figma’s artificial intelligence features as subject to Product-Specific Terms, including “available AI-related settings that apply to Customer Content.”
Key point: The diff does not itself add an express right for Figma to use Customer Content to train AI models. It instead confirms that AI-related use of Customer Content may be governed by separate Figma AI Terms and settings.
Risk/impact: Customers must review the separate Figma AI Terms and applicable account settings. Those materials may determine whether Customer Content, prompts, outputs, or related metadata can be used for model training, evaluation, improvement, or third-party model services.
Other Changes
- Terminology is standardized from curly quotes and possessives to plain-text equivalents.
- The dispute-resolution language appears substantively unchanged.
- A final addition appears to add a “See all versions” reference, likely a document-history link rather than a contractual right or obligation.
2026-10-09 · Terms of Service
Summary
The supplied diff does not include the text of the approximately 96 added words. It only states that words were added, so it is not possible to identify:
- Changes to customer data rights or permitted uses
- Whether customer data may be used to train, fine-tune, or evaluate AI models
- New data-sharing, retention, or disclosure rights
- Changes to confidentiality, security, or breach obligations
- New customer consent requirements or opt-out rights
- Allocation of intellectual-property rights in inputs, outputs, or trained models
- Any increased liability or reduced provider obligations
AI Training/Data-Use Analysis
No conclusion can be reached about AI-model training because the operative language is missing. The added text should be reviewed specifically for terms such as:
- “train,” “fine-tune,” “improve,” “develop,” or “evaluate” models or services
- “inputs,” “customer data,” “content,” “telemetry,” or “usage data”
- Rights to use data in “de-identified,” “aggregated,” or “anonymized” form
- Provider rights to retain data after termination
- Sharing data with affiliates, subprocessors, or third-party model providers
- Customer opt-out, deletion, or data-segregation rights
- Ownership or licensing rights in models, outputs, or derivatives
Required Information
Please provide the actual redlined language, including the additions and any surrounding provisions. Without that text, a substantive legal-risk analysis would be speculative.
2026-10-08 · Terms of Service
Summary
The provided diff does not include the actual amended contract language. It only states:
> “Added approximately 96 words to the document”
Accordingly, it is not possible to determine:
- What provisions were added, deleted, or replaced;
- Whether customer data may be used to train, fine-tune, evaluate, or improve AI models;
- Whether the customer’s confidential information, personal data, prompts, inputs, outputs, or usage data may be used for those purposes;
- Whether the provider may share data with affiliates, subprocessors, or third-party model providers;
- Whether consent, opt-out rights, anonymization, aggregation, or data-retention limits were changed;
- Whether the provider receives broader intellectual-property rights or licenses to customer data; or
- Whether new security, confidentiality, deletion, audit, or regulatory obligations were introduced.
AI Training and Data-Use Risks
No AI-training-related change can be identified from the material provided. The statement that approximately 96 words were added does not reveal whether those words:
- Authorize training on customer content;
- Permit use of data to improve models generally or only to provide the services;
- Distinguish between customer content and de-identified or aggregated data;
- Allow human review or disclosure to third parties;
- Apply to prompts, outputs, metadata, or telemetry; or
- Provide an opt-out or require affirmative consent.
Conclusion
A substantive legal analysis requires the actual redlined text, including the 96 added words and any surrounding language affected by the amendment. Without that text, the principal risk is unknown rather than identifiable.
2026-10-08 · Privacy
2026-10-07 · Terms of Service
Key Changes and Risks
1. Scope and contract structure
- The opening provisions have been substantially reorganized and now expressly identify:
- Websites;
- Starter and Professional Figma offerings; and
- Figma documentation
as the “Services.”
- Customers purchasing an Organization or Enterprise plan are now directed to the separate Figma Software Services Agreement, rather than these Terms.
- The acceptance mechanism remains broad: acceptance of the Terms or use of the Services creates agreement.
- A person acting for an entity now expressly represents that they are authorized to accept the Terms and bind that entity. This increases the risk that unauthorized use or acceptance could create contractual obligations for the organization.
- The revised language clarifies that references to “Customer” mean the entity when the user acts on its behalf.
2. AI-related terms and data use
- The diff does not appear to add an express new right to use Customer Content to train AI models.
- However, the Terms continue to grant Figma a broad right to collect Usage Data, including technical logs, metadata, telemetry, and information about access, use, and performance. Figma may use Usage Data, in de-identified and aggregated form, during and after the contract term to maintain, improve, and enhance its products and services.
- The Terms now expressly identify Figma’s artificial-intelligence features and “available AI-related settings that apply to Customer Content” as subject to Product-Specific Terms. Those separate Figma AI Terms may therefore govern:
- whether Customer Content is used for model training or improvement;
- whether inputs or outputs are retained;
- available opt-outs or administrative controls; and
- treatment of confidential or personal information.
- Because the operative AI rules are incorporated by reference through a separate webpage, customers should review the current Figma AI Terms and settings before enabling AI features. The main Terms alone do not clearly establish a comprehensive “no training” commitment.
3. Data protection and confidentiality
- The Terms continue to distinguish processing covered by the Data Processing Addendum from other processing governed by Figma’s Privacy Policy.
- This division may create uncertainty about which protections apply to Customer Content, Usage Data, account data, and AI-related processing. Customers should confirm that all intended data—including prompts, uploaded designs, and generated content—is covered by the appropriate data-processing terms.
- Customer remains responsible for its Authorized Users and their compliance, increasing the importance of internal controls over AI feature use and data uploads.
4. Commercial and legal risks
- Paid subscriptions, including AI Credits subscriptions, automatically renew unless cancelled under the stated procedures. AI usage may also generate pay-as-you-go charges.
- Figma retains broad termination rights, including termination at its discretion in some circumstances.
- Customer indemnity expressly covers claims arising from Customer Content or violations of the Terms.
- Binding arbitration and class-action waiver provisions remain, subject to the stated opt-out procedure.
2026-10-06 · Privacy
2026-10-06 · Terms of Service
Summary
The diff does not include the actual amended language. It only states that approximately 96 words were added.
Impact Assessment
- AI training/data use: Cannot determine whether the new language allows, restricts, or changes the use of customer data to train AI models.
- Data rights and ownership: Cannot assess whether the customer grants new licenses or rights in its data, content, prompts, outputs, or usage information.
- Confidentiality: Cannot determine whether customer data may be disclosed to affiliates, service providers, or third-party AI vendors.
- Opt-out or consent: Cannot assess whether customers receive an opt-out, consent requirement, or limitation on model training.
- Retention and deletion: Cannot evaluate changes to data retention, deletion, anonymization, or de-identification obligations.
- Risk allocation: Cannot identify any changes to warranties, indemnities, liability limits, or responsibility for AI-generated outputs.
Required Information
Please provide the actual 96-word addition and, if applicable, the surrounding or replaced language. The legal effect depends on the precise wording and where it appears in the agreement.
2026-10-05 · Terms of Service
Key Changes and Risks
1. Expanded and reorganized contract framework
- The Terms now expressly identify a broader set of related documents, including:
- Data Processing Addendum;
- Figma AI Terms;
- Software Services Agreement;
- Creator Agreement;
- Developer Terms;
- Live Events terms;
- Policies, notices, and guidelines.
- The definition of “Services” is restated to include Figma’s Websites, the Figma Platform, and published Documentation.
- The Terms now state that customers purchasing an Organization or Enterprise plan should refer to the separate Software Services Agreement.
Risk: Customers may need to determine which agreement controls, particularly where the general Terms, Software Services Agreement, Data Processing Addendum, and Figma AI Terms overlap. The diff does not clearly state a priority or conflict rule among these documents.
2. Authority to bind an organization
The revised language more clearly provides that a person using the Services for an entity represents that they are authorized to accept the Terms on the entity’s behalf. It also states that references to “Customer” refer to that entity.
Risk: An unauthorized employee or contractor could potentially create arguments that the organization is bound by the Terms, although enforceability may depend on applicable law and actual authority.
3. Customer data and Usage Data
The substantive Usage Data provision appears unchanged:
- Figma may collect information concerning access, use, and performance of the Services.
- This includes technical logs, metadata, and telemetry.
- Figma may use Usage Data, during and after the Term, in de-identified and aggregated form to maintain, improve, and enhance its products and services.
Important limitation: The diff does not add an express right to use Customer Content to train general-purpose AI models. It also does not expressly prohibit such use.
4. AI-related data use
The revised Terms expressly refer to:
- Figma’s artificial-intelligence features; and
- “available AI-related settings that apply to Customer Content.”
These are treated as Product-Specific Terms, which apply if the customer or an Authorized User uses the relevant offering.
Risk: The actual rules governing whether Customer Content may be used to train, fine-tune, evaluate, or improve AI models may be located in the separate Figma AI Terms or in changeable AI settings—not in the main Terms. Customers should review those documents and settings carefully, including whether:
- Customer Content is used for model training or service improvement;
- content is shared with AI subprocessors or model providers;
- opt-out controls are available;
- settings apply account-wide or only to individual users; and
- deleted content is retained in training or evaluation datasets.
5. Other notable changes
- Feedback may be used by Figma to maintain, improve, and enhance products and services.
- Customer remains responsible for Customer Content and related indemnity exposure.
- Automatic subscription renewals and AI credit subscriptions remain prominent.
- Arbitration, class-action waiver, termination, and unilateral amendment provisions remain materially important.
Overall Assessment
The diff mainly reorganizes and expands references to Figma’s contractual ecosystem. The principal AI risk is not an explicit new training license, but the increased reliance on separate Figma AI Terms and configurable AI-related settings, leaving the scope of AI use of Customer Content potentially unclear without reviewing those materials.
2026-10-05 · Terms of Service
Summary of Important Changes
1. Contract scope and linked terms
- The Terms are reformatted and now expressly define the “Services” as the Websites, Figma Platform, and Documentation.
- The opening language now states that the Terms govern access to and use of Figma’s websites and Starter/Professional offerings.
- Customers purchasing an Organization or Enterprise plan are directed to the separate Figma Software Services Agreement. This creates a clearer split between self-service plans and business/enterprise contracts, but customers should confirm which agreement governs their account.
- The Terms now link to or reference additional policies and agreements, including:
- Data Processing Addendum
- Figma AI Terms
- Community and Developer Terms
- Acceptable Use Policy
- Privacy and other product-specific policies
- Because several obligations are incorporated by reference through external webpages, changes to those linked documents may materially affect the customer’s rights and obligations.
2. Authority to bind an organization
- The customer representation has been clarified. A person using the Services for an entity represents that they are authorized to accept the Terms on behalf of both themselves and that entity.
- “Customer” will refer to the entity where the user acts on its behalf.
- Risk: An employee or contractor without actual authority could potentially create arguments about whether the organization is bound, while the individual is making an express authorization representation.
3. Customer data and Usage Data
- The existing concept of Customer Content remains: materials created or uploaded by the customer or its Authorized Users.
- Figma may collect information concerning access, use, and performance of the Services as Usage Data, including technical logs, metadata, and telemetry.
- Figma may use Usage Data, during and after the contract term, in de-identified and aggregated form to maintain, improve, and enhance its products and services.
- Important limitation: The shown diff does not add an express right for Figma to use identifiable Customer Content to train AI models.
- However, the revised Terms expressly identify Figma’s artificial-intelligence features as subject to Product-Specific Terms, including “AI-related settings that apply to Customer Content.” The incorporated Figma AI Terms therefore become particularly important.
- Risk: The AI Terms or related settings may separately address whether prompts, outputs, files, or other Customer Content are retained, reviewed, used for model improvement, or shared with AI providers. Those provisions are not included in this diff and should be reviewed before enabling AI features.
4. AI-related commercial changes
- The Terms continue to provide for AI Credits, Seat Credits, monthly AI subscriptions, and pay-as-you-go billing.
- AI subscriptions automatically renew monthly, and additional usage may be charged to the existing payment method.
- Risk: Customers should review renewal, usage limits, and AI-specific terms separately, particularly for organizational controls and unexpected PAYG charges.
5. Other continuing risks
- Figma retains broad termination rights, including discretionary termination in some circumstances.
- Customer indemnity obligations continue to cover Customer Content and violations of the Terms.
- Arbitration and class-action waiver provisions remain in place, subject to the stated opt-out procedure.
2026-10-04 · Terms of Service
Summary
The provided diff does not include the actual amended contract language. It only states:
> “Added approximately 96 words to the document”
Accordingly, it is not possible to identify:
- What contractual provisions were added, deleted, or replaced;
- Whether the changes alter the parties’ rights or obligations;
- Any new liability, indemnity, confidentiality, intellectual-property, or compliance risks; or
- Whether the customer’s data may be used to train, fine-tune, evaluate, or improve AI models.
AI-Training Data Analysis
No language is provided addressing:
- Use of customer data for AI model training or improvement;
- Whether such use requires customer consent;
- Whether data is anonymized, aggregated, or de-identified;
- Whether customer prompts, inputs, outputs, files, or metadata are included;
- Opt-out or deletion rights;
- Ownership of data, model inputs, or model outputs;
- Retention periods or post-termination use;
- Disclosure to affiliates, subprocessors, or third-party model providers; or
- Security, confidentiality, or restrictions on using sensitive or personal information.
Therefore, no conclusion can be reached about whether the amendment creates or expands permission to use customer data for AI-related purposes.
Required Information
Please provide the text showing the additions, deletions, and replacements—not merely the word-count description. The relevant clauses should be included in full, together with enough surrounding text to determine how the changes interact with existing provisions.
2026-10-04 · Privacy
2026-10-03 · Terms of Service
Summary
The provided diff does not include the actual amended legal language. It only states:
> “Added approximately 96 words to the document”
Because the added text is not shown, it is not possible to determine:
- What contractual rights or obligations changed;
- Whether liability, indemnity, confidentiality, privacy, security, termination, or intellectual-property provisions were modified;
- Whether the customer’s data may be accessed, retained, disclosed, or used for AI training, model development, analytics, or product improvement;
- Whether customer data may be used to train general-purpose models or only customer-specific systems;
- Whether the customer can opt out of AI training or require deletion of data used for that purpose; or
- Whether the provider claims ownership or license rights in customer data, prompts, outputs, or derived data.
AI-Training Risk Assessment
No conclusion can be reached regarding AI-training practices from the information supplied. The actual 96 added words should be reviewed for terms such as:
- “train,” “fine-tune,” “improve,” “develop,” or “enhance” models;
- “de-identified,” “aggregated,” or “anonymized” data;
- “service data,” “customer content,” “inputs,” or “outputs”;
- Rights to retain or use data after termination;
- Sharing data with affiliates, subprocessors, or third-party AI providers; and
- Opt-out, deletion, confidentiality, or data-segregation commitments.
Information Needed
Please provide the complete redline, including the text enclosed in {}, [], and []{}. The actual wording is necessary to identify the legal effect and any new risks.
2026-10-03 · Privacy
2026-10-02 · Terms of Service
Key Changes and Risks
1. Major restructuring and scope clarification
- The opening provisions have been substantially reformatted and reorganized, apparently to reflect Figma’s updated legal-terms website and navigation.
- The agreement now expressly defines the “Services” as:
- Figma websites;
- The Figma Platform for Starter and Professional plans; and
- Figma’s published Documentation.
- Customers purchasing an Organization or Enterprise plan are now directed to the separate Figma Software Services Agreement. This may mean that different contractual protections apply depending on the customer’s plan.
- The acceptance language is clearer: users agree to the Terms by accepting them or by using the Services.
2. Authority to bind an organization
The revised language states that a person using the Services for an entity represents that:
- They are authorized to accept the Terms on the entity’s behalf; and
- References to “Customer” refer to that entity.
Risk
An employee or contractor could potentially bind the organization through use of the Services if they lack actual authority. Organizations should control account administration and ensure that accepting users are properly authorized.
3. AI and use of customer data
The diff does not appear to add an express right for Figma to train AI models on Customer Content. The relevant provisions instead state that:
- Figma may collect Usage Data, such as technical logs, metadata, telemetry, and information about access, use, and performance.
- Figma may use Usage Data, in de-identified and aggregated form, during and after the Term to maintain, improve, and enhance its products and services.
- Figma’s artificial-intelligence features, including AI-related settings that apply to Customer Content, are governed by separate Product-Specific Terms, including the Figma AI Terms.
- Use of Figma AI is subject to additional eligibility requirements, including an apparent age requirement of 18 years where applicable.
AI-related risk
Although the main Terms retain a de-identified/aggregated limitation for Usage Data, the diff incorporates or cross-references separate Figma AI Terms and AI-related settings. Those documents may contain the operative rules regarding:
- Whether Customer Content or prompts may be used for model improvement or training;
- Whether customers can opt out;
- Retention and deletion of AI inputs and outputs; and
- Use of third-party AI providers.
Customers should review the Figma AI Terms and applicable settings separately. The present diff alone does not establish that Customer Content is excluded from AI training.
4. Usage Data survives termination
The right to use Usage Data applies during and after the Term. Even after termination, Figma may continue using qualifying de-identified and aggregated Usage Data.
5. Billing and AI credits
The revised text clarifies terminology for:
- Seat Credits;
- Purchased AI Credits;
- Monthly AI Credits subscriptions; and
- Pay-As-You-Go billing.
AI subscriptions automatically renew monthly, and additional AI charges may be billed in arrears. Customers should monitor renewal and usage settings.
6. Other notable points
- Customer remains responsible for Authorized Users and their activities.
- Customer indemnity continues to cover Customer Content and violations of the Terms.
- Arbitration and class-action waiver provisions appear substantively unchanged.
- The final “See all versions” language appears to be a website/version-history addition rather than a substantive contractual change.