At FigMail, we take the security of our users' data seriously. This page outlines our security practices and provides information on how to report security vulnerabilities.
Encryption in Transit
All data transmitted between the Figma Plugin, our servers, and your browser is encrypted using HTTPS/TLS.
Secure Payments
Payment processing is handled by Stripe, which is PCI DSS compliant. We never store your card details.
1. Vulnerability Disclosure Policy
We encourage responsible disclosure of security vulnerabilities. If you discover a security issue in FigMail, please report it to us privately so we can address it before it becomes public.
Please Do Not
- Publicly disclose the vulnerability before we've had a chance to fix it
- Access, modify, or delete data belonging to other users
- Perform actions that could harm the availability of our services
2. How to Report a Vulnerability
Send your security report to the email above. Please include:
- A detailed description of the vulnerability
- Steps to reproduce the issue
- Potential impact of the vulnerability
- Any suggestions for remediation (optional)
3. Our Response Process
Acknowledgment
We will acknowledge receipt of your report within 48 hours.
Investigation
We will investigate and validate the reported vulnerability.
Resolution
We will work to resolve confirmed vulnerabilities as quickly as possible.
Notification
We will notify you when the vulnerability has been fixed.
4. Security Measures
FigMail implements the following security measures to protect your data:
- HTTPS/TLS encryption for all data in transit
- Secure authentication via Figma OAuth
- PCI DSS compliant payment processing through Stripe
- Regular security updates and dependency monitoring
- Access controls to ensure users can only access their own data
- Secure hosting with industry-standard infrastructure
5. Data Protection
For detailed information about how we collect, use, and protect your personal data, please refer to our Privacy Policy.
6. Contact
For security-related inquiries:
- Security issues: dudin.tv@gmail.com
- General inquiries: dudin.tv@gmail.com
- Contact page: figmail.pro/contact