Privacy Policy

Nexports (“we”, “us”) is a Figma plugin and web service that lets you bulk-export assets from Figma and share them through hosted portals. This policy explains what we collect, why, how long we keep it, and the choices you have. We aim to collect as little as possible and to delete it as soon as it’s no longer needed.

• Account details — your email address (used for passwordless sign-in), and a display name/avatar if you provide one.
• Exported assets — the images, icons and files you export from Figma, plus basic metadata (name, dimensions, format) and the portal they belong to.
• Device identifier — an anonymous, randomly generated id stored on your device to meter free usage before you sign in.
• Usage information — export counts and basic operational logs needed to run the service and enforce plan limits.
• Billing information — handled entirely by our payment provider (Lemon Squeezy). We do not receive or store your full card details.

We do not sell your data, and the plugin contains no third-party advertising or analytics trackers.

• To provide the service — process exports, create and serve your portals, and let you share and download assets.
• To operate your account, apply your plan’s limits, and process payments through our provider.
• To generate optional AI alt-text and tags for images, when you enable that feature (see Sub-processors).
• To maintain security, prevent abuse, and comply with legal obligations.
• To respond to your support requests.

Exported files are stored in Cloudflare R2 object storage; account and portal metadata are stored in a managed PostgreSQL database (Supabase). Data is encrypted in transit (HTTPS/TLS) and at rest. Uploads are performed using short-lived, single-purpose signed URLs, and our backend credentials are never shipped inside the plugin. See our security page for more detail.

We rely on a small number of trusted providers to run the service:

• Cloudflare — object storage (R2) and content delivery.
• Supabase — database and authentication (magic-link email).
• Vercel — website and API hosting.
• Lemon Squeezy — payment processing and billing (merchant of record).
• Resend — transactional and support email delivery.
• Anthropic / Google — AI models used only when you enable alt-text generation; image data is sent for that purpose and not used to train their models.

We keep data only as long as needed:

• Free portals expire and are permanently deleted after 24 hours.
• Signed-in free portals lock at expiry and are permanently purged 30 days later.
• Paid portals follow the expiry you choose for each portal.
• Account information is kept while your account is active and removed on request (see Your rights).

Portals are designed to be shared: anyone you give a portal link to can view and download the assets in it, so share links only with people you trust. Aside from that, access to stored data is limited to you (the account owner) and our systems operating the service. We disclose data to third parties only where required by law.

You can access, correct or delete your data. You can remove individual assets from your workspace, and you can request deletion of your account and associated data by emailing support@nexports.in. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honour valid requests under applicable law.

Nexports is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above, and where appropriate we’ll notify you.

Questions about privacy? Email support@nexports.in.