Your tokens live in the Figma file and, once you connect a provider, in your own Git repository. The plugin talks to the Figma API and to your provider directly, so no token data reaches our infrastructure at all. Sync credentials stay in the plugin's own storage on your machine. Sign-in for the documentation runs on Supabase, and this site and the documentation are hosted on Vercel. Both are US companies, so any transfer outside the EU rests on the EU-U.S. Data Privacy Framework or on the European Commission's standard contractual clauses. The
privacy notice lists every provider involved.