Cursor — privacy & data policy

Provider: Anysphere. PromptPrivacy score: 66/100. Last verified November 01, 2026.

What happens to your data?

Cursor collects your account details, usage logs, and code inputs to provide and maintain the software. Your code inputs and suggestions are not used to train AI models by default. Information may be shared with operational service providers or as required to meet legal obligations.

Does it train on your data?

Does not train on your content. Anysphere does not use user inputs or generated suggestions to train its models, nor does it allow third parties to do so, unless the content is flagged for security review, submitted as feedback, or the user explicitly consents.

Can you opt out?

Not applicable. User inputs and suggestions are not used to train models by default, so no training opt-out is necessary.

Data retention

Not specified with explicit time limits. Anysphere retains data for as long as necessary to provide the service and fulfill legitimate business needs like legal compliance and dispute resolution. Personal data is deleted, erased, or anonymized when no longer required.

Encryption & security

The policy notes that commercially reasonable technical and organizational measures are implemented to protect personal data, but specific encryption protocols (such as TLS or AES) and security standards are not specified.

Is it safe for work?

Yes. Cursor does not train models on code inputs by default, and enterprise or workplace accounts operate under separate commercial agreements where Anysphere acts as a data processor.

Source policy: https://cursor.com/privacy