Cursor's privacy policy was updated in an update detected on July 16, 2026, with changes to how it describes data sharing with inference providers and model documentation references. The updated policy removes specific naming of inference providers (Baseten, Together AI, Fireworks) and replaces the statement about data sharing with model providers when they are explicitly selected with a more general statement that inference providers may temporarily access and store inputs and outputs for performance improvement, with deletion after use. The policy also adds SpaceXAI to the list of providers whose documentation users should review.
The updated policy revises how Cursor describes data handling by inference providers. Previously, the policy named specific providers (Baseten, Together AI, Fireworks) and stated that prompts and telemetry may be shared with model providers when explicitly selected. The updated language generalizes this to state that inference providers may temporarily access and store model inputs and outputs to improve inference performance, with data deleted after use. The policy also adds SpaceXAI to the external documentation references. These changes clarify data handling procedures without materially altering the stated protections around temporary access and deletion.
Specific vendor names removed; language generalized to 'inference providers' without explicit identification of which parties access data.
SpaceXAI added to list of providers whose documentation users should review for retention policies.
Removed condition limiting data sharing to accounts created before October 15, 2025; scope of this condition now undefined.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
This change represents a policy clarification rather than a substantive rights shift. Cursor has removed specific vendor names from its privacy disclosures and generalized the language describing inference provider data access. For organizations relying on …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003739.
Cursor removed the word 'indexing' from its description of backend functionality in an update detected on August 29, 2026. Previously, …
Cursor removed two sentences from its Data Use & Privacy Overview that previously described how codebase embeddings and metadata are …
Cursor expanded its security certifications section in an update detected on August 27, 2026. Previously, the policy listed only SOC …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.