Privacy Policy
Last updated: September 14, 2026. This Privacy Policy details how Figgi collects, processes, and protects information when you explore web applications, generate PRD documentation, create navigation flowcharts, and export designs.
1. Introduction & Overview
Figgi (“we,” “our,” or “us”) provides an intelligent product exploration, web architecture analysis, automated PRD generation, and design conversion platform.
This Privacy Policy explains how we collect, store, handle, and protect information when you visit our website, use our automated crawling services, interact with our interactive chatbot, or generate design specifications. By accessing or using Figgi, you acknowledge and agree to the practices outlined in this policy.
2. Information We Collect
We collect information in the following categories when you interact with our platform:
A. User-Supplied Information
- Target URLs and web addresses submitted for exploration and crawling.
- Crawl configuration parameters (such as exploration depth, screen limits, and deep analysis flags).
- Chatbot prompts, questions, and conversational inquiries regarding crawled applications.
- Feedback, issue reports, or contact inquiries you transmit to us.
B. Web Crawling & Exploration Data
When executing a crawl on your behalf, our headless crawler automated engine captures:
- Public page URLs, HTTP status codes, titles, headers, and DOM navigation nodes.
- Full-page screen screenshots and visual snapshots of traversed interfaces.
- Clickable selectors, links, buttons, and navigation graph transitions between screens.
- Publicly visible text, product copy, and UI metadata necessary to construct PRDs and design tokens.
C. Automated Telemetry & Device Information
- Browser type, operating system version, and screen resolution.
- IP addresses and standard server request logs for rate limiting and DDoS prevention.
- Local storage preferences (such as your chosen light or dark theme).
3. How We Use Your Information
We process collected data solely for the following legitimate purposes:
- Providing Core Features: Executing headless browser crawls, mapping application workflows, visualizing React Flow nodes, and building interactive screen relationship diagrams.
- Generating Documentation & Artifacts: Synthesizing product requirements documents (PRDs), markdown downloads, PDF bundles, and Figma document export packages.
- Powering Contextual AI Chat: Answering user questions about crawled application features, technical architecture, user flows, and product gaps using retrieval-augmented generation.
- Platform Reliability & Performance: Monitoring crawl failures, optimizing screen traversal speed, handling server errors, and preventing platform abuse.
4. Web Crawling & Public Data Ethics
Figgi operates as a tool instructed directly by its users. We adhere to responsible automation principles:
- Public Surface Traversal: Our crawler strictly traverses publicly accessible links, buttons, and routing paths unless explicitly configured by the user.
- Rate Limiting & Politeness: Automated exploration incorporates adaptive throttling and concurrency caps to prevent straining target web servers.
- No Intentional Sensitive Data Scraping: We do not design our crawlers to harvest passwords, credit card numbers, or personally identifiable customer records. If sensitive data is inadvertently rendered on a public target screen, our processing pipelines do not index it for external distribution.
- User Authorization Warranty: Users submitting URLs represent and warrant that they possess the necessary rights or authorization to explore the target property.
5. AI Processing & Third-Party Services
To provide advanced visual understanding, PRD synthesis, and chatbot reasoning, Figgi integrates with reputable third-party cloud and AI infrastructure providers:
AI Model Providers: We utilize state-of-the-art multimodal vision and language models (including OpenAI, Anthropic Claude, and Google Gemini API endpoints). Data transmitted through enterprise API endpoints is governed by strict zero-retention or non-training agreements with our model partners. Your crawl data is never used to train public foundation models.
Infrastructure & Hosting: Application hosting, database storage, and headless browser clusters run on secure, ISO/IEC 27001 and SOC 2 certified cloud data centers.
6. Data Retention & Deletion
We retain crawl outputs, cached screenshots, and generated PRD markdown only as long as necessary to fulfill the services requested or comply with legal obligations:
- Session and temporary crawl captures may be cached locally or in short-lived memory pools to allow immediate re-querying and export generation.
- Demo datasets (such as pre-indexed samples) are static and publicly available for demonstration.
- You may request complete removal of crawl data, stored screenshots, or project artifacts at any time by contacting our privacy team.
8. Data Security & Storage
We employ organizational and technical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction:
- All web traffic and API calls are encrypted using modern Transport Layer Security (TLS 1.2+).
- Crawler instances run in isolated sandbox environments preventing cross-tenant data contamination.
- API keys and third-party credentials are encrypted at rest with strict role-based access restrictions.
9. Your Privacy Rights (GDPR & CCPA/CPRA)
Depending on your location, you may have statutory privacy rights under applicable data protection laws, including the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA):
Right of Access & Portability
Request a copy of the personal information and generated artifacts associated with your sessions.
Right to Erasure (Deletion)
Request that we permanently purge your stored crawl outputs, images, and chat history.
Right to Rectification
Request corrections to inaccurate personal data maintained within our systems.
No Sale of Personal Data
We do not sell, rent, or trade your personal data to data brokers or third-party advertisers.
10. Children's Privacy
Figgi is a developer and product management tool not directed to individuals under the age of 16. We do not knowingly collect or solicit personal information from children. If we become aware that we have collected information from a child under 16 without verified parental consent, we will promptly delete that data.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect modifications in our crawling technologies, AI model integrations, or legal requirements. When updates occur, we will update the “Last updated” timestamp at the top of this document. Significant changes will be communicated via notice on our website.
12. Contact Us
If you have any questions, concerns, or privacy requests regarding this Privacy Policy or our automated exploration practices, please reach out to:
Figgi Privacy & Compliance Team
Email: arihita.dirghangi@gmail.com
Subject Line: Privacy Inquiry / Data Request