Privacy policy

Information we handle

When you sign in with Google, we receive information needed to create and secure your account, such as your name, email address, profile image, and Google account identifier. Our authentication system also handles credentials issued by Google, session identifiers, and technical session information such as IP addresses and browser information. We do not receive your Google password.

We store projects you save to your account, including animation data and embedded assets, project names, motion presets, and previous versions. We also store workspace memberships, roles, and invitations. The editor uses browser storage for local projects and preferences. Clearing browser storage may remove local copies.

Stripe processes payments. We keep customer and subscription identifiers, plan and seat information, payment status, checkout records, and purchase and refund information. Payment details entered into Stripe's checkout are handled by Stripe; our app does not store full payment card numbers or card security codes.

If you email us, we receive your email address, message, and attachments. If someone invites you to a workspace, we receive the email address they provide for the invitation.

Our hosting and authentication services process technical information needed to deliver requests, maintain sessions, and protect the service. This can include IP addresses, request times, browser information, and error information.

How we use information

We use information to provide the editor, save and synchronize projects, manage accounts and workspaces, process subscriptions and refunds, deliver invitations, respond to support requests, prevent abuse, and meet legal and accounting obligations.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use customer projects for advertising, public showcases, AI training, or our own creative work. We do not send promotional newsletters.

The service also measures activity on selected pages, such as visits, tool use, exports, and sign-ups. It uses temporary visit identifiers and page attribution to produce activity counts. Separately, it assigns visitors to pricing offers and records offer views, purchase-button clicks, purchases, and refunds to compare pricing results. Pricing assignments can be associated with your account and workspace. We also record account-linked editor activity, feature categories, estimated active editing time, save and import outcomes, export attempts and render outcomes, and errors identified by category. This helps us understand use, improve features, and diagnose failures. Events can include account, workspace, project, visit, and session identifiers. Analytics events do not include project artwork, text, filenames, prompts, or credentials. Restricted administrator reports show account information and saved project metadata separately from event data. These uses do not inspect your project contents.

Your projects and optional connections

Your creations remain yours. We process them only as needed to provide the features you request, including saving, editing, exporting, recovery, and workspace collaboration. Content in a shared workspace is accessible to other members according to workspace permissions. Exporting or sharing content with someone makes it available to that recipient.

If you choose to connect an external AI agent, the connection can send project information, assets, previews, exports, and editing results to that agent at your direction. The agent and its provider may retain that information under their own terms and privacy policies. Ending the connection stops further access through that connection, but does not erase copies already received by the provider. Lottieditor does not use these transfers to train its own models.

If you connect Figma, we store encrypted access credentials so we can import the files or artwork you select. We process the requested file information and rendered artwork, and imported assets become part of your project. Disconnecting Figma removes the stored connection credentials; it does not delete artwork already imported into your projects.

Service providers and other disclosures

We use DigitalOcean for hosting, Google for sign-in, Stripe for payment processing, Figma for imports you request, and Gmail for support correspondence. If invitation email delivery is enabled, our email delivery provider processes recipient addresses and invitation messages.

These providers receive information needed for their services. Google and Stripe also process some information for their own purposes under their respective privacy policies.

We may disclose information where legally required, to respond to a valid legal request, or as necessary to protect people, investigate fraud, and establish or defend legal claims. If ownership of the service changes, information needed to continue operating it may transfer with the business, subject to applicable law and the protections described in this policy.

Cookies and browser storage

We use authentication cookies to keep you signed in and browser storage to retain editor data and preferences. Account sessions are configured to last up to 30 days and may be renewed with continued use.

An optional Figma connection uses a security cookie, lottieditor-figma-state, with a ten-minute lifetime during authorization.

Only after you allow optional cookies, the lottieditor-visitor cookie contains a random visitor identifier used for pricing assignments. It has a one-year lifetime when set. The seo_source cookie records the selected page associated with a visit and lasts 30 minutes. Page measurement also uses session storage in your browser. A separate lottieditor-analytics cookie contains a signed random visitor identifier and lasts up to 30 days. Browser local storage holds a rolling analytics session identifier. An anonymous visitor can be linked to an account on sign-in; switching accounts or signing out rotates the visitor identity. Server records can outlast the corresponding cookies.

Optional page measurement, behavioral analytics, sign-up attribution, and pricing experiments stay off until you allow optional cookies. They also respect Do Not Track and Global Privacy Control when detected. Essential account, billing, and security records continue to operate. We do not use advertising pixels to track you across unrelated websites. External services you choose to use, including Google and Stripe, handle information under their own policies.

Use Cookie settings under Account > Personal settings > Profile to allow optional cookies or withdraw your choice. We remember your choice for 180 days in lottieditor-consent. Choosing Deny stops optional collection and removes its browser identifiers. You can also manage cookies and stored site data in your browser. Blocking required cookies can prevent sign-in or other features from working. Removing cookies does not delete records already stored on our servers.

Retention and deletion

We retain account and saved project information to provide your account and requested storage. The service retains up to 30 previous project versions for recovery. Deleting a project in the editor currently marks it deleted without immediately erasing its contents or previous versions from server storage.

You can request account closure, access, correction, or deletion by emailing nextablesupport@gmail.com. We may ask for information needed to verify your identity and authority over the records. Shared workspace records may involve other users' rights and require separate handling.

Account and project records remain stored until removed in response to an account closure or deletion request, or as part of service maintenance. Deleted project and preset contents can remain in storage until that removal takes place. Backup copies remain until the backups are replaced or deleted; deletion in the editor does not immediately remove those copies. We retain support correspondence while needed to handle your request and related follow-up, security records while needed to investigate or prevent abuse, and payment records while needed for subscriptions, refunds, disputes, and legal or accounting obligations. Pricing records remain available to maintain assigned offers and compare pricing results. Page activity counts may be retained after temporary visit records expire. Detailed behavioral analytics events are retained for up to 90 days, with daily activity summaries for up to 13 months. These summaries can remain linked to an account and are removed with its analytics records on an account deletion request. Retention cleanup runs during analytics collection and report access. Contact us for information about the records associated with your account.

We may need to retain limited records to meet legal obligations or resolve disputes. Where a deletion request cannot be fully honored, we will explain the applicable reason. Copies you or other recipients have downloaded remain outside our control.

Security

We use access controls and technical measures designed to protect information. No online service can guarantee complete security. Keep your Google account and devices secure, and share workspace invitations and agent pairing codes only with intended recipients.

International users and privacy rights

We operate from the United States, and our providers may process information in other countries. Privacy protections can differ between countries.

The country in which information is processed depends on the service provider and the feature you use. Contact us for information about the providers and transfer arrangements relevant to your information. Where applicable law requires safeguards for an international transfer, that transfer is subject to those requirements.

Where applicable privacy law grants them, your rights may include access, correction, deletion, a portable copy, restriction of processing, objection to processing, and withdrawal of consent. You may also complain to your local data protection authority. We will respond within the time required by applicable law and will not unlawfully discriminate against you for exercising your rights. Send requests to nextablesupport@gmail.com.

Where EU or UK data protection law applies, Cooper Dalton is the controller for account administration, billing, and support information. We rely on performance of a contract where processing is necessary to provide the service you request, legal obligations for required records, and legitimate interests for proportionate security and fraud prevention. Where consent is required, we must obtain it before the relevant processing and allow withdrawal. For page and pricing measurement, we rely on legitimate interests in understanding service use and evaluating offers where permitted by law, and consent where required. You may object to processing based on legitimate interests by contacting us. When we process personal information in a business customer's projects solely on that customer's instructions, the customer is responsible for its own use of that information and we act on its behalf.

Children

Lottieditor is intended for people aged 13 or older, subject to any higher minimum age required where they live. Minors must have permission from a parent or legal guardian as described in our Terms. We do not knowingly collect personal information from children under 13. If you believe a child below the applicable minimum age has provided personal information, contact nextablesupport@gmail.com so we can investigate and take appropriate steps to remove it. Guardian permission does not override our minimum age.

Changes and contact

We will post updates here and change the effective date. For material changes, we will provide an appropriate notice, such as a notice in the service or an email. Where a change requires consent under applicable law, we will obtain it before making that use of information.

For privacy questions and requests, email nextablesupport@gmail.com.