Cursor updated its Privacy Policy date from September 29, 2026 to October 11, 2026. The policy also revised its payment information collection language to state it collects payment information when users 'seek to access any paid products and services, or initiate payment for products and services,' removing the specific reference to 'Anysphere' products. This broadens the stated scope of payment data collection to cover any payment initiation, not just access to named products.
Consumers: Cursor now collects payment data whenever you attempt to pay for anything, not just when you buy a specific product.
The updated policy now states that Cursor collects payment information whenever you 'initiate payment for products and services,' rather than only when accessing paid Anysphere products. This broadens the scope of payment data collection to cover any payment action, including partial transactions, payment attempts, or payments for services beyond the core Cursor platform. The policy does not specify what payment data is collected, how long it is retained, or with whom it may be shared; you can review Cursor's full Privacy Policy and Privacy Overview for additional details on payment data handling.
→ Review Cursor's Privacy Overview to understand what payment data is collected, how long it is retained, and whether it is shared with third parties
→ Check your Cursor account settings to see if any payment data collection preferences or opt-out options are available
ConductAtlas has recorded 2 material changes to this document (since October 2026).
Across all monitored documents, Cursor has made 3 significant changes.
2 of Cursor's significant changes have been classified as negative for consumers.
Expanded from collection when accessing paid Anysphere products to collection whenever users initiate payment for any products or services
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Cursor revised its payment information collection language to apply to any payment initiation, not just access to named paid products. This expands the stated scope of payment data collection. Organizations using Cursor should evaluate whether …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-005524.
Cursor's Privacy Policy removed its explicit statement that it does not 'sell' or 'share' personal data for cross-contextual behavioral advertising …
Cursor's Terms of Service now include a reference to Grok Bot, stating that if users enable or access Grok Bot, …
Cursor removed the word 'indexing' from its description of backend functionality. The previous text stated the app makes requests to …
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and lia…
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.