Privacy Policy
We respect your privacy and are committed to protecting your personal data.
Last updated: 6/26/2026
What Information We Collect
- Account information: When you create an account, we collect your email address and name (if provided).
- Study data: We store the card sorting studies you create, including cards, categories, and participant responses.
- Usage data: We may collect anonymous usage statistics to improve our service (e.g., number of studies created).
- Technical data: We automatically collect IP addresses, browser information, and device data for security and functionality.
How We Use Your Information
- Provide and maintain our service: Your data is used to deliver the card sorting functionality.
- Account management: We use your email to send important account-related notifications.
- Improve our service: Anonymous usage data helps us understand how to make the platform better.
- Security: We monitor for suspicious activity to protect your account and data.
Data Storage and Security
- We use industry-standard encryption to protect your data both in transit and at rest.
- Your data is stored securely using Redis cloud infrastructure with regular backups.
- We implement access controls and monitoring to prevent unauthorized access.
- Participant responses are anonymized and contain no personally identifiable information unless explicitly provided.
Data Sharing
- We do not sell, trade, or rent your personal information to third parties.
- We may share anonymized, aggregated data for research or improvement purposes.
- We may disclose your information if required by law or to protect our rights and users.
- Study participants' data is only accessible to the study creator.
Your Rights
- Access: You can request a copy of all data we have about you.
- Correction: You can update your account information at any time in your dashboard.
- Deletion: You can delete your account and all associated data by contacting us.
- Portability: You can export your study data in CSV format at any time.
Cookies and Tracking
- We use essential cookies to maintain your session and provide functionality.
- We do not use third-party tracking cookies or advertising networks.
- You can disable cookies in your browser, but this may affect site functionality.
- We use local storage for user preferences like theme settings.
Figma Plugin
- If you install our Figma plugin, the plugin reads visible text from the frame you select in Figma — only when you explicitly run the plugin and only from your current selection. It does not access other frames, pages, or files.
- The selected card labels, study title, and category names you choose to send are transmitted over HTTPS to validatethat.io to create a card sort study in your account. No Figma file content is stored beyond the cards you submit.
- Authentication uses a per-account API token. Tokens are stored locally in Figma's clientStorage (scoped to this plugin only) and on our servers as a SHA-256 hash — the raw token is never persisted server-side. You can revoke any token at any time from Settings → Integrations.
- The plugin does not transmit data to Figma, Anthropic, or any third party other than ValidateThat. No analytics or tracking is added by the plugin.