Privacy policy

Last updated: 15 October 2026

1. Who we are

This Privacy Policy explains how CreativePouch (“we”, “us”) collects, uses and protects personal data when you use HTML to Figma by Creative Pouch at creativepouch.com and in Figma (the “Service”).

We are the data controller for the personal data described here. We are based in Latvia and process data in line with the EU General Data Protection Regulation (GDPR).

• Controller: CreativePouch
• Country: Latvia
• Privacy contact: info@creativepouch.com

By using the Service you acknowledge this Policy. It applies together with our Terms of use, which include our refund policy.

2. Data we collect

We collect only the data needed to run the Service.

• Plugin account data (from Figma, when you open the plugin): your Figma user id and display name.
• Usage data (automatically): plan (trial or PRO), number of imports, plugin version, dates of first and last use, and events such as registration, import, activation, paywall view, validation and error messages.
• Device and log data (automatically): approximate country derived from the request, and the IP address, browser type and referring URL in our hosting provider’s server logs. Our licence server does not store your IP address; it uses it only briefly to limit abuse.
• Licence data: your serial key status and expiry date. The key itself is stored only in hashed or encrypted form.
• Purchase information (from Creem, our payment provider): your email address, order amount, currency, order status and order reference.
• Support communications: messages you send to info@creativepouch.com.

Your designs stay on your device. The HTML, CSS, images and fonts you paste or upload, and the Figma layers created from them, are processed entirely inside the plugin on your computer. They are never sent to our servers.

We do not receive or store your card number, CVC or bank details. We do not knowingly collect special categories of data (health, religion, biometrics, etc.).

3. Payments through Creem

Our order process is handled by our online reseller and Merchant of Record, Creem (Armitage Labs OÜ, Rotermanni 14, Tallinn 10111, Estonia). Creem processes payments, calculates and remits taxes, and handles invoices, receipts and customer billing enquiries.

When you buy, you enter your payment details directly on Creem’s checkout. Creem processes that data as an independent controller under the Creem Privacy Policy. Creem shares with us only what we need to provide the Service: your email address and the order details listed above.

A PRO licence is a one-time payment and does not renew automatically. For billing questions, use the link in your Creem receipt or write to us.

4. Why we use your data

• Count trial imports, activate and validate licences, and deliver your PRO key: performance of a contract.
• Process refunds and answer support requests (we reply within 3 business days): performance of a contract; legitimate interests.
• Send service messages about your purchase or licence: performance of a contract.
• Keep the Service secure and prevent fraud and abuse, such as creating accounts to get around the trial limit: legitimate interests.
• Understand, in aggregate, how the plugin is used and improve it: legitimate interests.
• Keep accounting and tax records: legal obligation.

We do not sell your personal data, use it for advertising or send marketing emails. We do not use it for automated decisions that have legal or similarly significant effects on you.

5. Who we share data with

We share personal data only with the providers below, and only as far as they need it.

• Creem (Armitage Labs OÜ, Estonia): Merchant of Record and independent controller for payments, tax, invoicing and billing support.
• Figma: runs the plugin and provides your Figma id and name to it. Your use of Figma is covered by Figma’s own privacy policy.

We may also disclose data if required by law, to protect our rights, or as part of a merger or sale of the business.

International transfers. If a provider processes data outside the EU/EEA, we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or Standard Contractual Clauses.

6. Retention, security and cookies

Retention. Licence and usage data is kept while your licence is valid and for up to 24 months afterwards, then deleted. If you ask us to delete your data, we do so within 30 days, except data we must keep by law. Order records are kept for 5 years, as Latvian accounting law requires. Server logs are kept for up to 90 days.

Security. We use encryption in transit (HTTPS/TLS), hashed or encrypted serial keys, hashed admin passwords, access controls and regular backups. No system is fully secure. If a breach affects your rights, we will notify you and the supervisory authority as the law requires.

Cookies. The public website does not use tracking or advertising cookies. The admin area uses one strictly necessary session cookie. You can block cookies in your browser.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted (“right to be forgotten”);
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting earlier processing.

To use these rights, email info@creativepouch.com with your Figma name or purchase email so we can find your records. We reply within 30 days. For payment or invoice data held by Creem, you can also contact Creem directly. You may complain to your local data protection authority. In Latvia this is the Data State Inspectorate (Datu valsts inspekcija).

California and other US residents. We do not sell or share personal information for cross-context behavioural advertising. You may ask us to know, delete or correct your data at the email above.

8. Children

The Service is not meant for anyone under 16. We do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

9. Changes to this Policy

We may update this Policy. We will post the new version on this page with a new “Last updated” date. For material changes, we will notify you by email (if we have it), on the website or in the plugin before they take effect.

10. Contact

• Privacy and support: info@creativepouch.com