Network Access
Network resources the Figma plugin connects to when using the Community build
The plugin connects to a small set of external services so it can work as intended (export icons to Git providers and validate Pro licenses). We keep the surface area minimal and do not proxy your design content through our own servers for sync operations.
All users
https://gitlab.com
Why: Git provider---used to create branches/commits/MRs and upload exported assets when you choose GitLab as your destination.
What's sent/used:
- User authentication token you provide (e.g., Personal Access Token or OAuth token)
- Repository identifiers you select (group/project, branch, path)
- Exported files (e.g., SVGs/ZIP), commit message, merge request metadata you confirm in the UI
Notes:
- Sync happens directly between the plugin and GitLab's API endpoints under
gitlab.com. - We do not store your files or repository contents on our infrastructure.
- More info: GitLab API docs, GitLab Privacy
https://api.github.com
Why: Git provider---used to create branches/commits/PRs and upload exported assets when you choose GitHub as your destination.
What's sent/used:
- User authentication token you provide (e.g., Personal Access Token or OAuth token)
- Repository identifiers you select (owner/repo, branch, path)
- Exported files (e.g., SVGs/ZIP), commit message, pull request metadata you confirm in the UI
Notes:
- Sync happens directly between the plugin and
api.github.com. - More info: GitHub REST API, GitHub Privacy Statement
Optional depending on usage / Only Pro users
https://fivra-licensing.vercel.app
Why: License validation backend---used to verify if a Pro license is valid and active.
What's sent/used:
- License key you enter in the plugin
- Figma User ID (to validate unique usage and associate the license to your account)
- (Optionally) Plugin version/build info for troubleshooting
What's returned:
- License status (valid/invalid/Usage) and entitlements needed to enable Pro features
Notes:
- This endpoint is hosted on Vercel; regional routing is managed by Vercel.
- We do not access your design files or repository contents as part of license validation.
- Any operational logs are minimal and used strictly for reliability and abuse prevention.
About Git providers
When you choose to export, the plugin connects directly to the selected provider (GitHub or GitLab) using the credentials you supply. The export includes only the assets and metadata you explicitly confirm (e.g., SVGs, commit messages, PR/MR titles).
If you have questions about data handling or want something removed/clarified, reach out via the plugin's support channel.