Privacy Policy

Last updated 8 September 2026

Devign turns Figma designs into code. To do that we need a small amount of information about you and access to the designs you ask us to convert. This page says exactly what we keep, what we do with it, and how to make us delete it.

Cookies and the Meta Pixel

The site sets the cookies it needs to sign you in, and nothing else until you say so. With your permission we load the Meta Pixel, which tells us which advertisement brought somebody here. It is not loaded at all until you press Accept, and refusing costs you nothing. The detail, cookie by cookie, is on the Cookie Policy.

Who else sees your data

• Supabase Inc. — the database, authentication and file storage (EU region).
• Vercel Inc. — hosting for this site and the app.
• Railway Corp. — the machine that runs conversions.
• Cloudflare, Inc. — hosting for the sites you publish.
• Anthropic PBC — the model that adds semantics and a phone layout to a conversion. Your design data is sent for that step and is not used to train models.
• Figma, Inc. — where your designs come from, read with the token you give us.
• Polar Software Inc. — payments. We never see card details.
• Meta Platforms Ireland Ltd. — advertising measurement, only after you accept cookies.
• Resend — the email that tells a site owner a lead arrived.

Your rights

Whatever law covers you, the answer here is the same: write to us and we will do it. You can ask to see what we hold, to correct it, to have it deleted, or to get a copy in a portable form. Under Israel's Privacy Protection Law (including Amendment 13, in force since 14 August 2025) and under the GDPR you can also object to a use or withdraw a consent you gave, and under California's CCPA you can ask what was collected and have it deleted. We do not sell personal information and we do not share it for cross-context behavioural advertising.

What we collect

• Account details. Your email address and a password, or, if you sign in with Google, GitHub or Apple, the name and email address that provider shares with us. We use it to sign you in and to reach you about your account. We do not send marketing email.
• Your Figma access token. When you connect Figma we store your personal access token so we can read the files you convert. It is encrypted at rest with a key that is not stored in the database, and it is decrypted only while a conversion runs. You can replace or remove it at any time from your settings.
• Design data. For each frame you convert we fetch its layers, text, styles and images from Figma and keep a snapshot so we can rebuild and compare the result. We keep the generated HTML, CSS and image files, screenshots of the result, and a record of each conversion (when it ran, how close it got, what went wrong).
• Fonts you upload. If your design uses a font that is not publicly available, you can upload the font file so your pages match. It is stored privately under your account, used only when building your own pages, and included in the code you export. Remove it any time from your settings.
• Usage records. How many conversions you ran, so we can apply your plan’s limits. Nothing else about your behaviour is tracked. We run no advertising or analytics scripts.

Who processes it

• Supabase hosts our database, sign-in and file storage.
• Figma is where your design data comes from, using the token you gave us.
• Anthropic provides the AI model we use for some conversions. In those runs, the structure of your frame (layer names, sizes, text and styles) and images of the result are sent to the model to decide layout and naming. The model is not trained on your data.
• Cloudflare hosts pages you choose to publish. Only what you publish is sent there.

None of them receives your email or password from us, and we sell nothing to anyone.

Sharing and publishing

Nothing you convert is visible to anyone else until you create a share link or publish a page. A share link shows one result to whoever has the link; you can revoke it. A published page is public on the web until you unpublish it.

Cookies and local storage

We use one cookie, to keep you signed in. Your browser also keeps a few preferences locally (language, sidebar state, editor appearance). There are no tracking cookies.

Keeping and deleting

We keep your data as long as your account exists. Deleting a project removes its conversions and files. To delete your whole account and everything in it, or to ask for a copy of what we hold, write to avielwork11@gmail.com and we will do it within 30 days.

Changes

If this policy changes in a way that matters, the date at the top changes and signed-in users are told on their next visit.

Contact

Devign is operated by Aviel Malin, Israel. Questions: avielwork11@gmail.com.

Devign is operated by Aviel Malka, a licensed business in Israel. Contact: avielwork11@gmail.com. Payments are processed by Polar Software Inc. Hosting: Vercel Inc. and Supabase Inc.