Paint By JSON

Privacy Policy

Last updated May 2026

Paint By JSON is a Figma plugin. This policy describes what we collect, why, and how to contact us about it.

The data controller is Robert McLoughlin, sole trader, based in Ireland. You can reach us at hi@paintbyjson.com.

What we collect

  • Account data — email address and authentication identifiers (via Supabase). Used to sync your saved palettes across devices.
  • Palette data — endpoint configuration and layer mappings you choose to save. Stored in your account on Supabase (PostgreSQL).
  • Billing data — handled by Paddle, our merchant of record. We never see or store your card details.
  • Product analytics — anonymous usage events via PostHog, used to improve the plugin. You can opt out in the plugin’s settings.

What we don’t collect

We don’t see the JSON responses from APIs you call — those are fetched directly by the plugin running in your browser and never pass through our servers.

Third parties

  • Supabase — authentication and storage.
  • Paddle — payment processing.
  • PostHog — product analytics.
  • Vercel — website hosting.

Communications

We send two kinds of email. Service emails are part of providing Paint By JSON to you and are sent without a separate opt-in:

  • Account and security — sign-in links, password changes, suspicious-activity alerts.
  • Billing — receipts, renewal reminders, payment failures, refund confirmations.
  • Service changes — material updates to these terms or this policy, breaking changes, planned outages, and feature sunsets.
  • Support — replies when you contact us.

Marketing emails — product announcements, newsletters, and similar — are only sent if you opt in. Every marketing email has a one-click unsubscribe link, and we honour opt-outs immediately.

Your rights

Under the GDPR you can ask us to access, correct, delete, or export the personal data we hold about you, restrict or object to certain processing, and withdraw consent for analytics at any time. Email hi@paintbyjson.com and we’ll respond within 30 days. You can also complain to your local data-protection authority — in Ireland that’s the Data Protection Commission.

Contact

Questions about this policy? Reach us at hi@paintbyjson.com.