Privacy Policy

1. Overview

SM Exporter is a plugin for Figma that exports the frames you select as JPEG, PNG, WebP, SVG or PDF files. If you choose, it can also upload those files to a Google Drive folder. The plugin is provided by the developer named in the contact section below (“we,” “us,” or “our”).

This policy explains what information may be processed when you use SM Exporter, including when you connect a Google account. What's processed depends on the features you use and the permissions you grant.

2. Information handled

Depending on how you use the plugin, SM Exporter may process:

• Design content you select for export: the frames you choose in Figma and their rendered output.
• Export preferences: your format choices, scale settings, file naming and other plugin settings.
• Google authorization data: the credentials or tokens needed to connect the plugin to Google Drive, handled by the plugin and its sign-in service.
• Google Drive folder information and metadata: information needed to display and navigate folders in My Drive, Shared with me, and Shared drives; search for folders; identify the destination you select; and create a folder when you request it. This may include folder names and identifiers, parent-folder relationships, and the folder link you paste.
• Technical request data: limited technical information that hosting and service providers process as part of normal operation.

Please only export content you have permission to access and share.

3. Google Drive access

Google Drive is optional. If you choose to connect it, Google asks you to approve the permissions the plugin requests. SM Exporter uses that access to provide the Drive features you initiate: displaying and navigating folders in My Drive, Shared with me, and Shared drives; searching for folders; creating a folder when you request it; using a folder link you paste; identifying the destination you select; and uploading the exported files you choose. The plugin uses the folder information and metadata needed to provide these features.

SM Exporter does not intentionally browse or upload files on its own. A Drive upload happens when you choose to upload exported files and select a destination. The files uploaded are the exports you selected, not an automatic copy of your entire Drive.

The plugin requests the https://www.googleapis.com/auth/drive scope. This is a broad Google permission: Google's consent screen may describe it as letting the plugin view and manage files in your Drive, not only files the plugin creates. You can see and revoke this access at any time in your Google Account settings.

SM Exporter does not sell Google user data, use it for advertising, or use it to train generalized AI or machine-learning models. Google user data is used only to provide the user-facing Drive features described in this policy, and is not used for unrelated purposes. We do not transfer Google user data to third parties except as necessary to provide the feature you request, comply with applicable law, or protect the service and its users. SM Exporter's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

4. How information is used

We process information to:

• export the frames you select in the formats and scales you choose;
• remember your plugin settings, where the plugin offers that feature;
• show your Drive folders and complete a Google Drive upload that you start;
• keep the plugin running, secure and working well, and to fix problems.

We don't use Google user data for anything unrelated to the plugin's features.

5. Storage and security

Exported files are processed only to complete the export or upload you ask for.

To keep you connected between sessions, the plugin saves your Google authorization tokens in Figma's plugin client storage. The sign-in service that supports Google authorization runs on Cloudflare. During sign-in, the service temporarily stores authorization state in Cloudflare KV; this state is configured to expire after 10 minutes. The service exchanges the authorization code with Google and returns the resulting access and refresh tokens to the plugin. The service is not intended to retain refresh tokens long term. The plugin uses the tokens to make the Google Drive requests needed for the features you initiate.

The service logs errors so we can troubleshoot. Cloudflare may process technical logs as part of running its infrastructure, and how long those are kept depends on Cloudflare's service and account settings.

We take reasonable measures to protect the information the plugin and its supporting services handle. No method of transmission or storage over the internet is completely secure, so we can't guarantee absolute security.

6. Sharing and service providers

When you upload to Google Drive, the exported files you selected are sent to Google Drive based on your authorization and the destination folder you chose. To display and navigate Drive folders, the plugin sends the relevant Drive API requests to Google. The plugin's sign-in flow is supported by a service hosted on Cloudflare, which processes the authorization-code exchange and may process technical request data as part of providing its infrastructure.

We don't sell personal information or Google user data. We don't share Google user data with third parties except as needed to provide the feature you requested, to comply with the law, or to protect the service and its users.

7. Retention and deletion

Files you upload to Google Drive live in your Google account and are governed by Google's controls and your account settings. You can manage or delete them in Google Drive at any time.

You can revoke SM Exporter's access in your Google Account's third-party connections settings. Revoking access stops any future use of that authorization, but it doesn't automatically delete information a service has already retained. To ask us to delete information we control, contact us using the details below.

Temporary sign-in records expire after 10 minutes. How long operational logs are kept depends on the hosting and service settings.

8. Your choices

• Use the export features without connecting Google Drive, wherever the plugin allows it.
• Decline Google's authorization request, or revoke access later.
• Choose which frames to export and whether to upload the results.
• Contact us with questions or requests about information the service handles.

9. Children's privacy

SM Exporter is a productivity tool for design workflows and isn't directed at children. If you believe personal information has been provided to us inappropriately, contact us and we'll review it.

10. Changes to this policy

We may update this policy if the plugin's features, our data practices or legal requirements change. When we publish a revised version, we'll update the effective date at the top of this page.

11. Contact