AI vendors and your data

146 vendors · 427 answers

Cursor data terms: training, retention, opt-out

Cursor editor · 3 pages watched · last change Sep 21, 2026

What the terms say

Trains on API dataNot stated
Does it train on API and business data?
Not stated on the watched pages.
Trains on app dataUses your data
Does it train on consumer app data?
Yes, unless Privacy Mode is on(Uses your data)
“If you choose to turn off "Privacy Mode": we may use and store codebase data, prompts, editor actions, code snippets, and other code data and actions to improve our AI features and train our models.”

Data Use and Privacy Overview On the page Sep 24, 2026

RetentionNot stated
How long are API inputs kept?
Not stated on the watched pages.
Opt-outProtective
How do you opt out of training?
Privacy Mode(Protective)
“If you enable " Privacy Mode " in Cursor's settings: Customer Data will not be used for training by Cursor.”

Data Use and Privacy Overview On the page Sep 24, 2026

Zero retentionProtective
Is zero data retention available?
ZDR with model providers(Protective)
“Cursor maintains zero data retention (ZDR) agreements with all providers, and AI model providers will not store or train on your data.”

Data Use and Privacy Overview On the page Sep 24, 2026

SubprocessorsProtective
Is there a public subprocessor list?
Published on trust portal(Protective)
“Our list of subprocessors is published on our trust portal .”

Security On the page Sep 24, 2026

ResidencyProtective
Where is data processed and stored?
No infrastructure in China(Protective)
“Cursor does not use or maintain any infrastructure in China.”

Security On the page Sep 24, 2026

Changes

Small editArchiveSep 21, 2026
Data Use and Privacy Overview
Removed 4 paragraphs and added 2.New text: “If you enable " Privacy Mode " in Cursor's settings: Customer Data will not be used for training by Cursor. Cursor maintains zero data retention (ZDR) agreements with all providers, and AI model providers will not store or train on your dat”
View the diff
Small editArchiveSep 15, 2026
Security
Rewrote 3 paragraphs.New text: “Cursor holds AIUC-1, ISO/IEC 27001:2022, and ISO/IEC 42001:2023 certifications, along with a SOC 2 Type II attestation. Certificates and reports are available on request at trust.cursor.com .”
View the diff
Small editArchiveJul 4, 2026
Data Use and Privacy Overview
Removed 2 paragraphs and added 1.New text: “If you enable "Privacy Mode" in Cursor's settings: Customer Data will not be used for training by Cursor. Cursor maintains zero data retention (ZDR) agreements with all providers, and AI model providers will not store or train on your data.”
View the diff
Large editArchiveJun 3, 2026
Security
Removed 57 paragraphs and added 15.New text: “Please submit potential vulnerabilities via email to security-reports@cursor.com . For any other security-related questions, contact us at security@cursor.com .”
View the diff
Small editArchiveMar 6, 2026
Security
Added 3 paragraphs and removed 1.New text: “AWS Sees and stores code data : Our infrastructure is primarily hosted on AWS. Our primary servers are in the US, with some latency critical services in Europe and Singapore.”
View the diff
Large editArchiveJan 1, 2026
Security
Removed 42 paragraphs and added 19.New text: “Please submit potential vulnerabilities via email to security-reports@cursor.com .”
View the diff
Small editArchiveNov 4, 2025
Data Use and Privacy Overview
Added 2 paragraphs and removed 1.New text: “If you choose to turn off "Privacy Mode": we may use and store codebase data, prompts, editor actions, code snippets, and other code data and actions to improve our AI features and train our models. Prompts and limited telemetry may also be”
View the diff
Large editArchiveOct 1, 2025
Security
Added 31 paragraphs and removed 18.New text: “Explore how each mode affects how data is sent and stored.”
View the diff
Large editArchiveJul 1, 2025
Security
Rewrote 6 paragraphs.New text: “We use Cloudflare as a reverse proxy in front of parts of our API and website in order to improve performance and security.”
View the diff
Large editArchiveApr 25, 2025
Security
Added 12 paragraphs and removed 10.New text: “Cursor is SOC 2 Type II certified. Please visit trust.cursor.com to request a copy of the report.”
View the diff
Large editArchiveFeb 1, 2025
Security
Added 43 paragraphs and removed 42.New text: “Keeping your source code and developer environment secure is important to us. This page outlines how we approach security for Cursor.”
View the diff
Large editArchiveNov 10, 2024
Security
Rewrote 7 paragraphs.New text: “While we have several large organizations already trusting Cursor, please note that we are still in the journey of growing our product and improving our security posture. If you're working in a highly sensitive environment, you should be ca”
View the diff

Watched pages

About Cursor