Spec LayerPrivacy Policy
This policy explains what data the Spec Layer Figma plugin handles and why. Spec Layer is provided by Oleksandr Kurchev (the "Provider", "we", "us"), an individual acting as the data controller. You can reach us at oleksandr.kurchev@gmail.com.
Our starting point is to collect as little as possible. The plugin has no user accounts, and everything deterministic (measurements, states, anatomy, tokens) runs locally in Figma without sending your data anywhere.
What we collect
- Component content you choose to document. When you use an AI-written documentation feature, the relevant content from the components you select (such as layer names, text, and structure) is sent to our proxy and on to our AI provider to generate the documentation. This happens only for the components you act on.
- License and usage data. If you have Pro, we process your license key and a count of AI generations used, along with timestamps, so we can enforce your plan's allowance and fair-use limits. We do not build a profile of your designs.
- Order information. When you buy Pro, Lemon Squeezy shares limited order details with us (such as your email and order identifier) so we can issue and manage your license key.
We do not collect payment card details. Those are handled entirely by Lemon Squeezy.
How we use it
- to generate the documentation you ask for;
- to validate your license and apply your plan's usage allowance;
- to detect and prevent abuse and enforce fair use;
- to provide support and process refunds.
Our legal bases are performance of our contract with you (providing the plugin and Pro features) and our legitimate interest in keeping the service secure and preventing abuse.
AI processing
AI-written documentation is generated by Anthropic using its Claude models. The content you submit is sent to Anthropic through our proxy solely to produce your documentation. Anthropic does not use data submitted through its API to train its models. To avoid repeated processing, results may be cached by our proxy against a hash of the request; the cache does not identify you personally.
Service providers (sub-processors)
- Anthropic — AI generation of documentation.
- Cloudflare — hosting of our proxy and license infrastructure.
- Lemon Squeezy — payments and subscription management (merchant of record).
- Figma — the environment the plugin runs in.
Each provider processes data under its own privacy terms. Some may process data outside your country; where that happens, appropriate safeguards apply.
Data retention
We keep license and usage records for as long as your subscription is active and for a reasonable period afterwards to meet legal and accounting obligations. Component content sent for AI processing is used to generate your result and is not retained by us beyond any short-lived cache described above.
Your rights
Under the GDPR and similar laws, you can request access to the personal data we hold about you, ask us to correct or delete it, object to or restrict certain processing, and request a copy in a portable format. To exercise any of these, email oleksandr.kurchev@gmail.com. You also have the right to lodge a complaint with your local data protection authority.
Cookies
The plugin does not use advertising or tracking cookies. This marketing website does not set tracking cookies either.
Children
Spec Layer is a professional design tool and is not directed at children under 16.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.
Contact
Questions about privacy? Email oleksandr.kurchev@gmail.com.