Privacy Policy

This Privacy Policy governs the privacy practices for the TypeGradient app, TypeCutOut app, TypeExtrude app, TypeLettering app, TypeStudio app, TypeCraft app, Vectorify app, Video FX Studio app, Figma to Canva app, and any other application developed by © Pixel Tinkers (referred to as "the Apps"). This policy explains how we handle information collected, processed, or generated through the use of the Apps.

We are committed to being transparent about the data we handle and to keeping your information safe. Please read this policy carefully so you understand what we collect, why, and the choices available to you.

For information about reporting security vulnerabilities, see our Security Policy.

Most of our Apps are designed to work without requiring you to create a Pixel Tinkers account. For these Apps, we do not collect personally identifiable information, do not track or store user sessions on our servers, and do not use advertising cookies or similar tracking for marketing purposes.

Design content you create stays within the Canva environment according to Canva's own terms and privacy practices.

Certain Apps require you to sign in before you can use them. When this is the case, we use trusted third-party authentication providers to verify your identity. The sign-in process is handled by the authentication provider; we never see, receive, or store your password.

Figma to Canva currently supports:

• Google Sign-In — used in the Figma plugin
• Canva OAuth — used in the Canva companion app

When you sign in, we may receive and store the following information from the authentication provider:

• Email address — used to identify your account and associate your data within the App (when provided by the provider or voluntarily by you; see below)
• Display name and profile photo — used to personalize your experience inside the App
• Unique user identifier — a technical ID provided by the authentication service, used to match your session across visits
• OAuth tokens — access and refresh tokens required to keep you signed in and to call platform APIs on your behalf (stored securely; we do not store passwords)

You may also voluntarily provide an email address in the Figma plugin if one was not supplied by Google, for account identification and support.

We may store technical session data (such as IP address and browser user agent) for security, fraud prevention, and session management.

Figma to Canva is different from our other Apps because it uses a hosted backend to transfer your design from Figma to Canva. When you use this App, data read or derived from the Figma Plugin API may be sent to our servers.

Backend hostname: figma-canva-backend.pixeltinkers.workers.dev

What we collect and store

Exports are accessible only to the authenticated user who created them. You can delete an export before it expires where the App provides that option.

What we do not do with export data

• We do not sell, rent, or share your export content with advertisers or data brokers
• We do not use your Figma or Canva design content for advertising or unrelated profiling
• We do not retain export metadata or assets beyond the 24-hour window except where required for security logs or legal compliance

How the transfer works

1. In Figma, the plugin reads your selected frame(s) via the Figma Plugin API and builds an export.
2. Export metadata and assets are uploaded to our backend over HTTPS.
3. In Canva, the companion app retrieves your export using your authenticated session so you can import it into a design.

We take data security seriously. We implement industry-standard measures—including encrypted connections (HTTPS) and secure cloud storage—to protect the integrity and confidentiality of information we handle.

Because we rely on established third-party authentication providers and never store passwords, credential exposure through our authentication flow is limited to industry-standard OAuth token handling.

For details on how to report security issues, see our Security Policy.

Our Apps integrate with third-party services and platforms. These providers have their own privacy policies and data-handling practices. We work with reputable providers who follow industry standards for privacy and data protection.

The following third parties are relevant to Figma to Canva and our hosted backend:

Other Apps may use only Canva and, where applicable, services required by the Canva Apps SDK.

We encourage you to review the privacy policies of any third-party services you access through our Apps.

For Figma to Canva, we log aggregated usage events on our backend (for example: export created, export completed, pairing completed, WebSocket connected). These events are associated with a technical user identifier and may include non-content metadata such as export ID, duration, or asset counts. They do not include the full text or visual content of your design.

We use Sentry to collect error and diagnostic information when the Apps encounter failures. This helps us fix bugs. We take steps to reduce sensitive data in error reports (for example, stripping authorization headers where applicable).

We do not use these tools for advertising or to build marketing profiles.

Our simple Canva Apps generally do not use advertising cookies.

Account-based Apps (including Figma to Canva) use session tokens and similar mechanisms strictly for authentication and to keep you signed in. These are essential to the service, not used for cross-site advertising.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent to data processing where consent is the legal basis
• Object to or restrict certain processing, where applicable by law

To exercise any of these rights, contact us at products@pixeltinkers.io. We will respond within a reasonable timeframe.

If you are in the European Economic Area or United Kingdom, you may also have the right to lodge a complaint with your local data protection authority.