Cursor data terms: training, retention, opt-out
Cursor editor · 3 pages watched · last change Sep 21, 2026
What the terms say
| Question, answer and clauseAnswer and clause | |
|---|---|
| Does it train on API and business data? | Does it train on API and business data?Not stated on the watched pages. |
| Does it train on consumer app data? | Does it train on consumer app data?Yes, unless Privacy Mode is on(Uses your data)“If you choose to turn off "Privacy Mode": we may use and store codebase data, prompts, editor actions, code snippets, and other code data and actions to improve our AI features and train our models.” Data Use and Privacy Overview On the page Sep 24, 2026 |
| How long are API inputs kept? | How long are API inputs kept?Not stated on the watched pages. |
| How do you opt out of training? | How do you opt out of training?Privacy Mode(Protective)“If you enable " Privacy Mode " in Cursor's settings: Customer Data will not be used for training by Cursor.” Data Use and Privacy Overview On the page Sep 24, 2026 |
| Is zero data retention available? | Is zero data retention available?ZDR with model providers(Protective)“Cursor maintains zero data retention (ZDR) agreements with all providers, and AI model providers will not store or train on your data.” Data Use and Privacy Overview On the page Sep 24, 2026 |
| Is there a public subprocessor list? | Is there a public subprocessor list?Published on trust portal(Protective)“Our list of subprocessors is published on our trust portal .” Security On the page Sep 24, 2026 |
| Where is data processed and stored? | Where is data processed and stored?No infrastructure in China(Protective)“Cursor does not use or maintain any infrastructure in China.” Security On the page Sep 24, 2026 |
Changes
| Change | |||
|---|---|---|---|
| Sep 21, 2026Archive | Data Use and Privacy OverviewIf you enable " Privacy Mode " in Cursor's settings: Customer Data will not be used for training by Cursor. Cursor maintains zero data retention (ZDR) agreements with all providers, and AI model providers will not store or train on your datSep 21, 2026 (archive) · +2 / -4 paragraphs | +2 / -4 | View |
| Sep 15, 2026Archive | SecurityCursor holds AIUC-1, ISO/IEC 27001:2022, and ISO/IEC 42001:2023 certifications, along with a SOC 2 Type II attestation. Certificates and reports are available on request at trust.cursor.com .Sep 15, 2026 (archive) · +3 / -3 paragraphs | +3 / -3 | View |
| Jul 4, 2026Archive | Data Use and Privacy OverviewIf you enable "Privacy Mode" in Cursor's settings: Customer Data will not be used for training by Cursor. Cursor maintains zero data retention (ZDR) agreements with all providers, and AI model providers will not store or train on your data.Jul 4, 2026 (archive) · +1 / -2 paragraphs | +1 / -2 | View |
| Jun 3, 2026Archive | SecurityPlease submit potential vulnerabilities via email to security-reports@cursor.com . For any other security-related questions, contact us at security@cursor.com .Jun 3, 2026 (archive) · +15 / -57 paragraphs | +15 / -57 | View |
| Mar 6, 2026Archive | SecurityAWS Sees and stores code data : Our infrastructure is primarily hosted on AWS. Our primary servers are in the US, with some latency critical services in Europe and Singapore.Mar 6, 2026 (archive) · +3 / -1 paragraphs | +3 / -1 | View |
| Jan 1, 2026Archive | SecurityPlease submit potential vulnerabilities via email to security-reports@cursor.com .Jan 1, 2026 (archive) · +19 / -42 paragraphs | +19 / -42 | View |
| Nov 4, 2025Archive | Data Use and Privacy OverviewIf you choose to turn off "Privacy Mode": we may use and store codebase data, prompts, editor actions, code snippets, and other code data and actions to improve our AI features and train our models. Prompts and limited telemetry may also beNov 4, 2025 (archive) · +2 / -1 paragraphs | +2 / -1 | View |
| Oct 1, 2025Archive | SecurityExplore how each mode affects how data is sent and stored.Oct 1, 2025 (archive) · +31 / -18 paragraphs | +31 / -18 | View |
| Jul 1, 2025Archive | SecurityWe use Cloudflare as a reverse proxy in front of parts of our API and website in order to improve performance and security.Jul 1, 2025 (archive) · +6 / -6 paragraphs | +6 / -6 | View |
| Apr 25, 2025Archive | SecurityCursor is SOC 2 Type II certified. Please visit trust.cursor.com to request a copy of the report.Apr 25, 2025 (archive) · +12 / -10 paragraphs | +12 / -10 | View |
| Feb 1, 2025Archive | SecurityKeeping your source code and developer environment secure is important to us. This page outlines how we approach security for Cursor.Feb 1, 2025 (archive) · +43 / -42 paragraphs | +43 / -42 | View |
| Nov 10, 2024Archive | SecurityWhile we have several large organizations already trusting Cursor, please note that we are still in the journey of growing our product and improving our security posture. If you're working in a highly sensitive environment, you should be caNov 10, 2024 (archive) · +7 / -7 paragraphs | +7 / -7 | View |
Watched pages
| Page | Changed | ||
|---|---|---|---|
| Data Use and Privacy Overviewcursor.com | Privacy policy | Sep 21, 20263 recorded | Todaylive page |
| Securitycursor.com | Documentation | Sep 15, 20269 recorded | Todaylive page |
| Terms of Servicecursor.com | Terms | No change seen | Todaylive page |
About Cursor
Cursor (Cursor editor). Answers quote Cursor's own public pages; a contract, order form or data processing addendum can say more. Company facts live on companies.fru.dev.