Privacy

Your designs stay on your computer

Tool calls go from your AI client to the canvashand server and the Figma plugin, both on your machine. Your files, layers and text are not sent to our servers.

Account

You sign in with Google. We store your name, email address and profile picture from Google, the sign-in tokens Google issues, and, for each signed-in session, the IP address and browser it came from. Sessions are deleted when they expire. Everything else is kept until you delete your account.

Billing

Payments run through Polar. We store your Polar customer ID and subscription status. We never see or store card details.

Usage limits

To apply the free plan's limit we count your tool calls per month. We also store the plugin and CLI versions you last used, to help when you contact support.

Diagnostics

The plugin's Diagnostics switch is on by default. While it is on, the plugin sends us, about every five minutes and when the plugin closes:

• Which tools ran, how often, how many failed, and how long they took
• The name of your AI client, such as Claude Code or Cursor
• The plugin and CLI versions, and whether you were in Figma Design or Dev Mode
• For each failure: when it happened, whether the plugin or the canvashand server reported it, the cleaned error message, and the names of the settings the AI sent, never their values

It is built never to send file names, page or layer names, layer IDs, text, colors, images, the values the AI sent, email addresses, tokens, or file paths.

Error messages are cleaned on your computer before they are sent, and again on our server. Quoted text, links, email addresses, file paths, IP addresses, colors, layer IDs and long codes are replaced, and any word that does not appear in Canvashand’s own code becomes “…”. A short error message can still contain numbers and common words that also appear in Canvashand’s own code, such as “button” or “checkout”.

We store diagnostics with your account so we can help when you contact support, and delete them after 90 days. They stay in our own database and are not shared with anyone else.

To turn Diagnostics off, open the Canvashand plugin, go to Advanced, and clear Share usage and errors. Nothing more is sent from that device, and anything recorded while it is off is discarded, even if you turn it back on later.