1. Scope
This Privacy Policy explains how Perture collects, uses, discloses, protects, and retains information when you access or use its website, application, accounts, subscriptions, Brand Pages, uploads, Logs, Brand Quality Index, collaboration, plugins, API, MCP, and related services. Perture is a Brand Page and design-system platform for designers, brands, teams, and authorized AI agents. This Policy is drafted for a United States-based service. If Perture later targets users in jurisdictions with additional privacy requirements, supplemental notices may be required.
2. Information We Collect
Perture collects information reasonably necessary to provide, secure, bill for, and improve the Service. This may include account information such as name, email address, authentication data, account settings, and profile changes; billing information such as plan, subscription status, billing period, customer identifiers, implementation status, and entitlements; user content such as Brand Page references, assets, files, fonts, images, documents, design-system rules, Interface System components, and feedback; collaboration information such as invitations, collaborator emails, permissions, and transfers; plugin, API, and MCP information such as authorized connections, scopes, access status, and technical credentials; Logs, Brand Quality Index inputs and results, agent workflow requests and outcomes; device and technical information such as IP address, browser, device type, operating system, session data, security events, and diagnostics; and usage information such as application interactions and feature activity.
Perture does not intend to collect full payment card numbers, card security codes, or raw payment credentials. Payments are processed by Stripe. Do not submit passwords, payment-card data, authentication secrets, sensitive regulated information, or children's information in Brand Pages, logs, or agent requests.
3. Sources of Information
We receive information directly from you when you create an account, edit your profile, subscribe to a plan, create projects, upload files, configure permissions, invite collaborators, generate credentials, connect integrations, or use the Service. We also receive information automatically from your browser, device, session, cookies, browser storage, logs, and security systems when you interact with Perture. If you authorize an integration or third-party platform, Perture may receive or disclose information needed to operate that integration. If you subscribe to a paid plan, Stripe may provide subscription, invoice, payment status, and customer-status information so Perture can maintain billing and access controls.
4. How We Use Information
Perture uses information to provide and operate the Service; create, authenticate, and manage accounts; maintain sessions; save, display, deliver, and organize user content; process uploads; enable collaboration and role-based access; provide API, MCP, integrations, and authorized access; manage billing, plans, entitlements, renewals, cancellations, and payment status; prevent fraud, abuse, unauthorized access, and misuse; secure accounts, content, credentials, and infrastructure; troubleshoot, debug, and maintain reliability; respond to user requests; enforce terms and policies; comply with legal obligations; and improve the usability, stability, and performance of the Service. This Policy does not disclose Perture's proprietary logic, internal systems, validation methods, processing architecture, or operational know-how.
5. User Content
You control the content you choose to upload, create, store, or make available through Perture. User Content may include brand materials, reference files, logos, fonts, images, documents, visual systems, written rules, examples, feedback, outputs, memory, assets, and other Brand Page materials. Perture processes User Content to provide the Service, including storage, display, delivery, collaboration, access control, Logs, brand-quality checks, plugins, API, MCP, support, security, and workflows you authorize or request. You retain ownership of your User Content, subject to the operational license described in the Terms of Service.
6. Cookies and Browser Storage
Perture uses cookies and browser storage for essential, functional, and analytics purposes. Essential technologies support login, authentication, session continuity, security, and account access. Functional technologies support preferences, interface state, drafts, local recovery, caching, and user experience. After you accept analytics, Microsoft Clarity may provide behavioral metrics, heatmaps, and session replay on Perture's public landing pages and blog. The onboarding flow is measured through predefined step and action events in a separate analytics document, without replaying its Brand Page editor or sending its drafts, files, website address, or connection credentials. Clarity is not enabled on account pages, OAuth screens, or the private Perture workspace.
Microsoft Clarity may use first-party and third-party cookies and other tracking technologies after consent. Advertising storage is denied in Perture's implementation. You may accept or decline Clarity analytics and change your decision later through Cookie settings in the site footer. Disabling essential technologies may prevent parts of the Service from working correctly. For information about Microsoft's processing, see Microsoft Privacy Statement.
7. Logs, Brand Quality, and Agent Workflows
Perture processes activity Logs and Brand Quality Index inputs and results to show project activity, review brand information, and support requested checks or corrections. If you choose an agent workflow, Perture may transmit the selected Brand Page context, relevant logs, issues, and proposed solutions to the authorized agent or connected provider. That provider may process the information under its own terms and may charge for token or credit usage. Performance tracking for third-party websites is currently archived and is not included in Solo or Pro.
8. Integrations, API, MCP, and AI Platforms
Perture may allow you to authorize external tools, AI platforms, agents, hosts, connectors, API clients, or MCP clients to access Brand Page context, User Content, assets, rules, Logs, brand-quality results, and related materials according to the permissions and scopes you grant. Official plugins may use restricted MCP access for context and checks; separate Pro authorization may permit scoped edits to Brand Page records and agent settings. When you connect a third-party service, that third party is separate from Perture and may process information under its own terms, privacy policy, security controls, retention rules, and account settings. Perture is not responsible for what you choose to send to third-party AI platforms, what those platforms generate, how they use information after receiving it through an authorized connection, or whether their outputs are accurate, lawful, non-infringing, or ready for publication.
If you run the Perture Figma import plugin, the plugin sends the component family or local component system you explicitly choose to Perture over HTTPS for the destination brand selected after connecting your Perture account. That data may include visible text, component and layer structure, variants, states, component properties, prototype reactions, layout and visual values, vector/SVG representations, and Figma identifiers made available by Figma's official Plugin API. The plugin does not modify the Figma file. It may store a revocable Perture connection credential in Figma client storage so the connection can persist between plugin sessions. Completed imports are added directly to the selected brand's editable Interface System as Figma-sourced components; they do not populate or approve rules in other brand sections.
9. How We Disclose Information
Perture may disclose information to service providers that help operate the Service, including providers for authentication, database, storage, billing, hosting, infrastructure, analytics, fonts, content delivery, security, and technical operations. These providers may include Amazon Web Services, Supabase, Stripe, Microsoft Clarity, Google Fonts, CDN or repository infrastructure when required for authorized workflows, and AI platforms or connectors when you authorize them. Perture may also disclose information to collaborators you invite, according to their assigned roles and permissions; to third parties involved in a merger, acquisition, financing, reorganization, or sale of assets; and to authorities, courts, regulators, or other parties when required to comply with law, protect rights, prevent fraud, investigate abuse, or secure the Service.
Perture does not sell personal information for money. As currently configured, Perture does not share personal information for cross-context behavioral advertising. If that changes, Perture will update this Policy and provide any legally required notices and choices before the change applies.
10. Security
Perture uses reasonable administrative, technical, and organizational safeguards designed to protect accounts, content, credentials, files, integrations, and technical data from unauthorized access, misuse, loss, alteration, or disclosure. These safeguards may include access controls, authentication, role-based permissions, controlled storage, encryption where appropriate, secure transmission, credential protection, temporary or controlled access links, technical monitoring, and internal access restrictions. No system is completely secure. You are responsible for protecting your password, devices, sessions, credentials, API keys, tokens, and authorized integrations.
11. Retention and Deletion
Perture retains information for as long as reasonably necessary to provide the Service, maintain your account, support billing, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, maintain security, and preserve required records. When you delete your account, Perture will delete or disable account information and associated active content according to the Service's deletion process and applicable legal requirements. Some information may remain for a limited period in backups, logs, billing records, tax records, fraud-prevention records, security records, or systems maintained by service providers. Information already disclosed to third parties you authorized, such as external AI platforms, infrastructure providers, CDNs, or billing processors, may be retained according to their own policies.
12. Your Privacy Rights
Depending on your U.S. state of residence and whether a particular state privacy law applies to Perture, you may have rights to request access, confirmation, correction, deletion, portability, opt-out of sale or sharing, opt-out of targeted advertising, limitation of certain sensitive information uses, or appeal of a privacy-rights decision. To exercise a privacy right, contact supportperture@gmail.com and include enough information for us to verify your identity and locate your account. Perture may deny or limit a request where permitted by law, including where retention is necessary for security, fraud prevention, legal compliance, billing records, dispute resolution, protection of rights, or completion of a transaction you requested.
13. California Privacy Notice
If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to Perture, this section supplements the rest of the Policy for California residents. In the preceding 12 months, Perture may have collected identifiers, account information, commercial information related to subscriptions, internet or electronic network activity, device and technical information, user-provided content, collaboration information, and inferences or usage information related to the Service. Perture collects these categories from you, your device, your browser, collaborators, service providers, billing providers, and authorized integrations. Perture uses these categories for the purposes described in this Policy and may disclose them to service providers, collaborators, authorized integrations, infrastructure providers, billing processors, and legal or security recipients as described above.
Perture does not sell personal information for money and, as currently configured, does not share personal information for cross-context behavioral advertising. California residents may request to know, access, delete, correct, and receive information about certain disclosures, and may not be discriminated against for exercising applicable privacy rights. Requests may be sent to supportperture@gmail.com.
14. Children
Perture is not directed to children under 13 and should not be used by children under 13. If we learn that we have collected personal information from a child under 13 without legally required parental consent, we will take reasonable steps to delete it. Do not use Perture to collect information from children unless you have obtained all legally required consents and Perture has expressly agreed in writing to the applicable compliance requirements.
15. U.S. Processing and International Transfers
Perture is operated for a U.S.-focused service and may process information in the United States and in other countries where its service providers maintain infrastructure or operations. These countries may have privacy laws different from those in your location. Where required, Perture will use reasonable contractual, technical, and organizational measures for cross-border processing.
16. Changes to This Policy
Perture may update this Privacy Policy from time to time. If changes are material, Perture may provide notice through the Service, by email, or by another reasonable method. The "Last Updated" date indicates the current version. Continued use of the Service after an updated Policy becomes effective means you acknowledge the updated Policy, where permitted by law.
17. Contact
For privacy requests, legal notices, and other support requests, contact supportperture@gmail.com.