Privacy

Controller

Using the plugin

When you export, the plugin uploads rendered images of your selected frame (PNG files exported by Figma), the video files you attach, and a description of the frame’s layout, together with your Figma user ID, which travels as an HTTP request header. They are stored in our own Amazon S3 buckets in Frankfurt, and the finished video is written to a second bucket there — see Hosting and rendering below. We need all of it to produce your video and to count exports against the free tier. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.

None of these files is public, and nothing is uploaded until you press Export. The plugin reaches them only through signed links, which expire after 15 minutes for an upload and after 24 hours for the download of your finished video. The files themselves are deleted after seven days.

If you ask the plugin to email you a download link, we store the address you typed with your Figma user ID, send the link to it, and send one confirmation email. Clicking the confirmation proves the address is yours and adds two free exports a month to your account. We use the address to send the links you ask for and, only if you also ticked the box and confirmed, to write to you about Video Exportify now and then — rarely, and every such email has a way to stop them. Legal basis: performance of a contract for the links, Art. 6(1)(b) GDPR; your consent for anything else, Art. 6(1)(a), which you can withdraw at any time by replying to any email or writing to the address below.

We also keep a log of each export: when it happened, the settings you chose (length, frame rate, resolution, format), the frame’s pixel size, whether it succeeded or failed and why, and your Figma user ID. It never contains the frame itself, your video files, layer names or any text from your design. We need it to support you when an export goes wrong and to see how the free tier and Pro are used. Legal basis: our legitimate interest in running and improving the service, Art. 6(1)(f) GDPR.

Your account

Email address, licence key, plan status and remaining render seconds. Legal basis: performance of a contract.

Payments

Handled by Stripe Payments Europe Ltd., Dublin. We never see your card details. Stripe processes your payment and billing data as an independent controller; see stripe.com/privacy.

Hosting and rendering

Amazon Web Services EMEA SARL. Rendering, storage and the database all run in the Frankfurt region (eu-central-1). AWS acts as our processor under a data processing agreement. The website is hosted by Vercel.

Website

Our host records standard server logs including IP address, for security and stability. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.

What we do not do

No advertising trackers, no analytics, no profiling, no selling data, and no sharing beyond the processors named above. There are no cookies that would need your consent, which is why this site has no cookie banner.

Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. Write to mail@mariusjopen.com. You may also complain to a supervisory authority — for us, the State Commissioner for Data Protection Baden-Württemberg.

Retention

Render files: seven days. The export log: for the life of your account. Account data: for the life of your account plus statutory retention periods for invoices, which run up to ten years under German tax law.