[hn_throwaway_99]

Figma is explicit about this:

> Two important highlights: First, all admins have control of whether their team’s content data is used for training. Second, participation in AI content training is not required to use Figma or Figma’s AI features. Learn more about our approach to training.

Blanket bans on third party AI tools don't make any sense to me. As the parent commenter said, they already have all your data, so you already have to trust them with that. Why would you trust them in those other areas but not trust their explicit statements that say that you can disable training on your data?

[sofixa]

> Blanket bans on third party AI tools don't make any sense to me

It's an easy, safe and secure default.

[hn_throwaway_99]

I agree with this, I think I was just interpreting "ban" differently. I.e. if the default is you can't use it, but then there is a specific request/review/audit process to allow it (as original GP's comment said), that makes sense. I just don't think it makes sense to ban without an exception process.

[542458]

I think the “easy” bit is increasingly not true, given that blanket AI feature bans mean you’ve banned both Mac OS and Windows.

[alucheni]

The language in the announcement looks tricky (albeit I didn't get into the legal document). It says NEW content won't be used for training. Also, it's going to be on for a moment. You have to go out of your way to turn it off. They could claim they copied your info in the hour or so before you got around to it.

[__loam]

Is that control opt-out by default?

[hn_throwaway_99]

Another commenter mentioned that the default is no training for Enterprise and Organization accounts, but for Starter and Professional accounts the default allows training and you need to explicitly opt out.

[__loam]

Once again saying that these dark patterns should be illegal.

[moffkalast]

If Figma takes a little inspiration from Adobe (they were almost acquired at one point after all) they'll realize they can change their TOS at any time for any reason with impunity. Such statements are at best dubious and at worst complete unprovable bullshit.

The only way to be sure your data stays yours is local models running on your machines.

[fnordpiglet]

This applies to all non self hosted software and even much self hosted software that radios out invasive telemetry. The difference between offering an AI feature or not offering it is time, but collecting your data as training for that eventually inevitable AI feature is happening now, everywhere, all the time. The only defense is retreat into a SKIF or depend on ToS, and as you point out ToS is a very weak defense. Things are moving considerably faster than law, regulation, judicial review, and establishment of a compliance framework can possibly accommodate.

Welcome to the future you were promised! It’s already too late.