html.to.design - Privacy Policy

Last Updated: January 15th, 2026

1. Introduction

Welcome to html.to.design (“we,” “us,” or “our”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, Figma plugin, Chrome extension and related services (the “Service”).

2. Information We Collect

2.1 Account

html.to.design Figma plugin

We do not require you to create an account to use the html.to.design Figma plugin. Users are identified via the anonymous Figma UID - we do not collect any personal information such as email addresses.

html.to.design Chrome extension

We do not require you to create an account to use the html.to.design Chrome extension. By default, you can save the generated designs as downloadable .h2d files locally without any account.

You can optionaly login with your Figma account in order to save the generated designs directly into our Figma plugin. In this case, we collect your email address from Figma for identification purposes.

2.2 Billing Information

When you purchase html.to.design inside the Figma plugin, we use Figma payment system. Figma is managing your payment details (e.g., credit card information).

When you purchase html.to.design for TEAMS, we use Stripe as our payment processor. Stripe is managing your payment details (e.g., credit card information).

In both cases, we do not store your payment information directly.

2.3 Usage and Technical Data

We automatically collect certain technical data when you use the Service, including:

Log Data: IP address, browser type, operating system & access times.
Analytics Data: Anonymous usage statistics to help us improve the Service.

2.4 Input Data (The Code You Send for Processing)

In the course of using the Service, you send us URLs, HTML or .h2d files (“Input Data”) to be converted into Figma designs.

Processing: We process this Input Data solely for the purpose of generating the requested design output.
Storage: HTML data sent to the Service is processed in memory of our servers and not stored. URLs (which must be publicly accessible) are processed by our service and the result is store for 24h to serve the plugin.

When using the a .h2d file generated by the Chrome extension, the file is never uploaded to our servers and 100% of the processing is done locally.

3. How We Use Your Information

We use the collected information for the following purposes:

Service Delivery: Perform the HTML-to-Figma conversions.
Support: To respond to your inquiries and troubleshoot errors.
Improvement: To analyze usage trends and improve the accuracy of our conversion engine.

We do not sell your personal data or the Input Data you provide.

We share information only in the following situations:

Service Providers (Sub-processors): cloud servers, payment processing and authentication.
Legal Obligations: If required to do so by law or in response to valid requests by public authorities.

5. Data Retention

Account Data: Retained as long as your account is active or as needed to provide you services.
Input Data: As explained in Section 2.4, only results of public URLs are stored for 24h. HTML data or .h2d files are not stored.

6. Security

We implement appropriate technical and organizational security measures designed to protect the security of any personal information we process. This includes encryption of data in transit (HTTPS).

7. Your Data Protection Rights (GDPR/CCPA)

Depending on your location, you may have the following rights:

Access: The right to request copies of your personal data.
Rectification: The right to request that we correct any information you believe is inaccurate.
Erasure: The right to request that we erase your personal data (“Right to be Forgotten”).
Portability: The right to request that we transfer your data to another organization.

To exercise these rights, please contact us at [email protected].

8. International Transfers

Our processing servers are located in United States. If you are accessing our Service from outside, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information.

9. Data Processing Agreement (DPA)

If you are a business customer and your use of the Service requires a Data Processing Agreement (DPA) to comply with the GDPR or CCPA, you can review our standard DPA here.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Revised” date and will be effective as soon as it is accessible.

11. Contact Us

If you have questions or comments about this policy, you may contact us at:

Email: [email protected]
Address: DIV-RIOTS, 32 rue de Paris, 92100 Boulogne-Billancourt, France