Privacy notice
1. Who is responsible
The controller of your personal data is Yair Zaks, Israel, the owner of DSister.
- Email: yaozaks@gmail.com
- Phone: +972545396079
2. What we process
- Figma user id. If you use DSister without signing in, this is the anonymous key we use to count your monthly allowance.
- Email address. Only if you sign in.
- Component structure, names and text. Sent from the plugin to generate your documentation.
- Usage events. One record per documentation run, used to count your monthly allowance.
- Feedback. The text you send and any images you attach.
- Server logs. These include your IP address.
3. Why we process it, and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Run the plugin and write your documentation | Figma user id, component structure, names and text | Contract (you asked for the service) |
| Count and limit monthly use | Figma user id, email, usage events | Contract; legitimate interest in preventing abuse |
| Sign-in | Email address | Contract |
| Feedback and support | Feedback text and images | Legitimate interest in improving DSister |
| Security and reliability | Server logs including IP address | Legitimate interest |
4. Who receives your data
- Vercel: hosting and API.
- Supabase: database.
- Anthropic: AI provider, used for most AI-written sections.
- Google (Gemini): fallback AI provider, used only for signed-in users.
- Polar: only if paid plans are introduced. Polar would act as merchant of record, and we would never see your card numbers.
We do not sell personal data and we do not share it for advertising.
5. International transfers
These providers may process data outside Israel, the EU and the UK. Where the law requires safeguards for such transfers, we rely on the contractual safeguards of each provider, such as standard contractual clauses.
6. AI processing
To write some sections, the plugin sends component structure, names and text to our server, which calls an AI provider. API keys stay on our server and are never in the plugin. Anthropic's commercial API terms state that customer data is not used for model training by default. We do not opt in to model training with any provider.
7. Your generated documentation
Generated documentation stays in your Figma file.
8. Cookies and tracking
This site sets no cookies. It stores nothing in your browser. There is no analytics and there are no ads.
9. How long we keep data
- Usage events: 13 calendar months. We keep the earliest event of each identity so that your monthly allowance resets on the right day. It is deleted on request.
- Sign-in codes: deleted automatically after about 10 minutes.
- Account data (email): while your account is active. We delete it on request within 30 days.
- Feedback and attached images: until you ask us to delete them.
- Server logs: only as long as needed for security and debugging.
10. Your rights
Under the GDPR, the UK GDPR and the Israeli Privacy Protection Law (including Amendment 13), you can ask for access to your data, correction, deletion, and you can object to processing.
How to ask for deletion or any other request
- Email yaozaks@gmail.com from the address on your account, or tell us your Figma user id if you never signed in.
- Say what you want: access, correction, deletion or objection.
- We may ask you to confirm who you are. We reply and act within 30 days.
You can also complain to your local data protection authority, or in Israel to the Privacy Protection Authority.
11. Changes
We will update this notice when our practices change and show the date at the top.
12. Contact
Yair Zaks, Israel. Email yaozaks@gmail.com, phone +972545396079.