Privacy

Adrian Sobiechowski, Łochowo, Poland

Email: hello@sobiworks.com

• On your computer. So you don’t have to set things up again, the plugin saves your sheet link, pasted or uploaded CSV and settings in Figma’s plugin storage on your computer.
• In your Figma file. To keep track of what it synced, the plugin saves short notes on layers, such as the image link it used and which cards belong to a template. They stay in the file and go wherever the file goes.
• Google Sheets. The plugin downloads your public sheet straight from Google, so Google sees that request.
• SheetSync server. If that doesn’t work (Figma sometimes blocks it), the SheetSync server downloads the same public CSV and passes it to the plugin. It receives the sheet link and stores neither the link nor the data.
• Images. The plugin downloads images straight from the links in your sheet (the sample CSV’s images come from picsum.photos), so the servers hosting them see the request.
• Plus. The plugin asks Figma, inside Figma, whether your account has Plus, and Get Plus opens Figma’s checkout. Nothing about your purchase goes to the SheetSync server.
• Request limits. The server uses your IP address to count requests per minute and stop floods. SheetSync doesn’t save the address. Cloudflare, which runs the server, processes it with every request, as it does for the sobiworks.com website.

The plugin doesn’t send your Figma designs anywhere.

Plus is sold in Figma Community. Figma, and the payment provider it uses, process your payment and billing details as their own controllers, under Figma’s privacy policy. SheetSync doesn’t receive your card or billing details; it sees only the sales figures Figma shows creators. The plugin doesn’t read your Figma name or ID. If you write about a purchase, SheetSync uses what you send to help.

When you write, Cloudflare forwards your message to a Gmail mailbox run by Google Ireland, where your address and message stay as long as needed to handle your matter.

• Fetching a sheet through the server: the agreement with you (GDPR art. 6(1)(b)).
• Helping with a purchase you write about: legitimate interest (GDPR art. 6(1)(f)), namely answering your question.
• Protecting the server and answering email: legitimate interest (GDPR art. 6(1)(f)).

Cloudflare (the SheetSync server and email forwarding) and Google (email, and your sheet when you link one). Figma handles your Plus purchase as its own controller. Cloudflare is in the United States, and Google Ireland may transfer data to Google in the United States; data goes there under the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

You can ask for access to your data, a copy, correction, deletion, restriction or transfer to another service. Write to the address above. You can also complain to a data protection authority, in particular in the country where you live or work, or to the Polish one (Prezes UODO, uodo.gov.pl).

You can object at any time to processing based on legitimate interest.

The plugin contacts the SheetSync server only when a public sheet can’t be downloaded directly; a pasted or uploaded CSV never reaches it. Everything else is up to you: without your email address you can’t get a reply. Data isn’t sold, used for ads or used for automated decisions about you. The sobiworks.com website itself is covered on the Legal page.