Draft, pending legal review. This text is not a binding policy yet. Items in square brackets are to be filled in by the owner or a lawyer.
Version of [date]. Controller: [legal name and registration]. Data contact: [e-mail].
In short
Live Bridge runs on your computer. Layouts never go online, there is no telemetry and no account. The companion talks to our license server only to count free transfers and check license keys (see «License server» below).
A beta caveat: the companion's local address (localhost) is reachable by other programs and open browser pages on the same computer. Pairing keeps others from reading the Figma layout queue, but any program or page on this computer can still put a layout into the queue. So turn off Import new layouts automatically in the plugin if you open untrusted pages, and avoid them while the companion runs with important files. [Remove this caveat once scene intake and the responses that contain paths are covered by the pairing token — audit of Oct 2, V1 and V5.]
Figma plugin and companion
- Layouts. The Figma plugin, the Adobe panels, the CorelDRAW docker and the companion exchange layouts only through the local address
localhost(ports 3131–3136). The Figma plugin is allowed to reach only these addresses — you can see that in its manifest. The companion does not send layouts, files or their contents to us or to third parties. Other programs on your computer can reachlocalhostthe same way the plugin does (see the caveat above). - Telemetry and updates. The companion and the plugin send no usage analytics and no automatic error reports. The app checks our server for updates (no personal data in the request).
- What is stored on your computer. Transfer results and reports go to the
%USERPROFILE%\LiveBridgefolder (for earlier installations, to folders on the Desktop) or to a folder you choose. Settings (the results folder) and a work log are kept in your profile folder. The log and reports may contain file names, layer names and disk paths, including your Windows user name. All of it stays on your computer and is deleted by you. - Pairing with Figma. To receive layouts in Figma, the plugin asks for permission once through a Windows system dialog. The plugin keeps the issued token in Figma local storage; the companion keeps only its hash (SHA-256) on disk.
- Version checks. The companion and the plugin compare each other’s build numbers over
localhost. This data does not leave your computer.
License server
To count the 10 free transfers per week and to check license keys, the companion contacts the Live Bridge license server (license.129-101-114-138.sslip.io). It sends:
- an anonymous machine code: two 6-character hashes of the Windows and motherboard identifiers (the identifiers themselves are never sent);
- for each transfer, a random transfer ID, a keyed hash of the transfer that cannot be turned back into the layout, the direction (for example Figma → After Effects) and the app version;
- the license key, when you enter one; with a paid key, a daily transfer count during the first 14 days.
Layouts, file names, layer names and paths are never sent. The server stores the machine code re-hashed with a server secret, transfer records for 30 days and machine records for 400 days. Your IP address is used only in memory to limit request rates and is not stored. The app checks the same server for updates; that request carries no personal data.
If you contact support
You may send a transfer report or the log yourself, by e-mail to [address]. They may contain file and layer names and paths with your Windows user name — review the file before sending. What you send is used only to investigate the issue and is kept for [period — to be filled in by the owner].
Website
The site is static: no analytics, ad pixels, third-party scripts or cookies; fonts are served by the site itself. The hosting provider may keep technical request logs (IP address, time, page) — [hosting provider and retention period to be filled in by the owner].
Payments
There are no payments in the beta. When a paid version comes, card data will be handled by the payment provider [name]; it is not shared with us. [Complete after the provider is chosen.]
Your rights
[Data subject rights under applicable law (Russian Federal Law 152-FZ, GDPR where applicable), how to exercise them and response times — to be written by a lawyer.]
Changes
A new version is published on the site with its date.