Privacy Policy

Last updated 8 September 2026

Devign turns Figma designs into code. To do that we need a small amount of information about you and access to the designs you ask us to convert. This page says exactly what we keep, what we do with it, and how to make us delete it.

What we collect

• Account details. Your email address and a password, or, if you sign in with Google, GitHub or Apple, the name and email address that provider shares with us. We use it to sign you in and to reach you about your account. We do not send marketing email.
• Your Figma access token. When you connect Figma we store your personal access token so we can read the files you convert. It is encrypted at rest with a key that is not stored in the database, and it is decrypted only while a conversion runs. You can replace or remove it at any time from your settings.
• Design data. For each frame you convert we fetch its layers, text, styles and images from Figma and keep a snapshot so we can rebuild and compare the result. We keep the generated HTML, CSS and image files, screenshots of the result, and a record of each conversion (when it ran, how close it got, what went wrong).
• Fonts you upload. If your design uses a font that is not publicly available, you can upload the font file so your pages match. It is stored privately under your account, used only when building your own pages, and included in the code you export. Remove it any time from your settings.
• Usage records. How many conversions you ran, so we can apply your plan’s limits. Nothing else about your behaviour is tracked. We run no advertising or analytics scripts.

Who processes it

• Supabase hosts our database, sign-in and file storage.
• Figma is where your design data comes from, using the token you gave us.
• Anthropic provides the AI model we use for some conversions. In those runs, the structure of your frame (layer names, sizes, text and styles) and images of the result are sent to the model to decide layout and naming. The model is not trained on your data.
• Cloudflare hosts pages you choose to publish. Only what you publish is sent there.

None of them receives your email or password from us, and we sell nothing to anyone.

Sharing and publishing

Nothing you convert is visible to anyone else until you create a share link or publish a page. A share link shows one result to whoever has the link; you can revoke it. A published page is public on the web until you unpublish it.

Cookies and local storage

We use one cookie, to keep you signed in. Your browser also keeps a few preferences locally (language, sidebar state, editor appearance). There are no tracking cookies.

Keeping and deleting

We keep your data as long as your account exists. Deleting a project removes its conversions and files. To delete your whole account and everything in it, or to ask for a copy of what we hold, write to avielwork11@gmail.com and we will do it within 30 days.

Changes

If this policy changes in a way that matters, the date at the top changes and signed-in users are told on their next visit.

Contact

Devign is operated by Aviel Malin, Israel. Questions: avielwork11@gmail.com.