Privacy, terms, and data processing

Privacy summary

• We store only what's necessary to operate the product: account data, workspace membership, Figma + Dataverse connector metadata, generation history.
• Figma access tokens and Dataverse client secrets are encrypted at rest and scoped to the workspace.
• We do not sell, rent, or share customer data with third parties.
• Sub-processors: Lovable Cloud (Supabase) for database/auth, Cloudflare for hosting, Stripe for payments, Resend for email. List updated as needed.
• Account deletion: email privacy@migrateto.dev. We soft-delete for 30 days then purge.

Terms summary

• You own your designs, your data, and the output we generate from them.
• You're responsible for keeping Figma and Dataverse credentials accurate and authorized.
• We provide the service "as is" during private beta. SLAs ship with Team and Enterprise plans.
• Generation credits are non-refundable but never expire while your workspace is active.
• Either party may end the relationship at any time; you can export your packages before doing so.

Data processing

• We act as a processor for any customer data you upload (Figma content, Dataverse rows, comments).
• EU and UK customers can request our Standard Contractual Clauses addendum.
• Data residency: currently EU (Frankfurt). Other regions ship with Enterprise.

Cookies

We use first-party session cookies for authentication. No third-party tracking or advertising cookies.