Privacy policy

Last updated 3 October 2026. Controller: Samet Ateşen, trading as Atesen Software, Sakarya, Türkiye. Contact: support@atesensoftware.com.

This policy explains what Libnotes stores and why.

What we store

• Your Figma account basics: Figma user id, handle and e-mail (from Figma's /v1/me), to identify your account and send service e-mails.
• Figma credentials: the OAuth access/refresh token or the personal access token you provide, encrypted with AES-256-GCM. Used only to read the library files you connect and to manage their publish webhooks.
• Library metadata: for each connected file — its name and key, and a snapshot of its published components, component sets and styles (key, name, description, node id, page/frame name, style type). We do not download or store your design files.
• Publish history: the change list of each publish and the names announced by Figma (including variable names), kept 30 days on Free, 365 days on Pro, 730 days on Team. After a downgrade, a cancellation or the end of a trial, the previous plan's period still applies for 30 days; nothing is deleted while a payment is being retried.
• Renders: PNG images of components that changed (before/after), produced by Figma's image API and copied to our storage because Figma's links expire. Kept 90 days on Free, 365 days on Pro, 730 days on Team (the latest image of each component is kept while the library is connected, as the “before” of the next publish). Images have long random URLs so chat tools and e-mail can display them; anyone who has the link can view the image.
• Destinations: webhook URLs, GitHub/Linear tokens and e-mail recipients you enter, encrypted with AES-256-GCM.
• Billing: plan, subscription status and Paddle customer/subscription ids. Card data never reaches us.
• Logs: technical events with ids, counts and error codes only — no names, e-mails or tokens.

Subprocessors

• Cloudflare, Inc. — hosting (Workers), database (D1) and image storage (R2).
• Resend — sending changelog and service e-mails.
• Paddle.com Market Ltd — payments as merchant of record (Paddle's own privacy policy applies to checkout).
• Figma, Inc. — the API we read from (your existing relationship with Figma).
• Destinations you choose (Slack, Discord, Microsoft, GitHub, Linear) receive the changelog you send them.

Deletion

Removing a library deletes its webhook in Figma, its snapshot, history and images. Deleting your account (Settings → Delete account) deletes all your data immediately, except a record of your Figma user id and trial end date (to prevent repeated trials) and payment records that law requires us to keep. You can also e-mail support@atesensoftware.com to request deletion or a copy of your data. Every changelog e-mail has an unsubscribe link.

Legal basis and your rights

We process data to provide the service you signed up for (contract) and to meet legal obligations. You can request access, correction, deletion or a copy of your data at any time via support@atesensoftware.com.