57 Total
Stay ahead of the changes
Track Cursor and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Summary
Generated by a model from the captured document; not read by a person

This document sets out what personal data Cursor collects, how long it keeps it, and who it may share it with. Cursor will not use what you type into the service to train AI models unless you explicitly agree, and it does not sell your data for advertising. If your account is tied to a work email, your employer's administrators may access and manage your account information.

Analysis

Cursor's Privacy Policy establishes the conditions under which Cursor collects, uses, retains, shares, and protects personal data in connection with its Service. It prohibits using Inputs or Suggestions to train AI models absent explicit user agreement or a security-review flag, and commits to no automated decision-making with legally significant effects. Data sharing is authorized in defined circumstances: corporate transactions, legal compliance, and disclosure to organizations associated with a user's account email. Retention is limited to operational necessity and enumerated legitimate business purposes, and Cursor explicitly does not sell or share personal data for cross-contextual behavioral or targeted advertising. The Policy does not apply where Cursor acts as a data processor for commercial customers, whose data practices are governed solely by their customer agreements.

What this means for you

Your Inputs and any personal data embedded in them are collected by Cursor and may appear in the Suggestions returned to you, but Cursor will not use that content to train AI models unless you have explicitly agreed. If your account is linked to an organizational email address, Cursor may share your account information with that organization's administrators, who may manage your usage. Cursor treats your continued use of the Service after any Privacy Policy change as acceptance of that change. If you are a user of a commercial customer's deployment of Cursor, this Privacy Policy does not govern your data — your protections are determined by that customer's agreement with Cursor. To avoid model-training use of your content, do not affirmatively agree to training use when that option is presented.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

2 important changes detected

4 versions captured · Latest change detected by ConductAtlas: October 2026

What changed Cursor updated its Privacy Policy date from September 29, 2026 to October 11, 2026. The policy also revised its payment information collection language to state it collects payment information when users 'seek to access any paid products and services, or initiate payment for products and services,' removing the specific reference to 'Anysphere' products. This broadens the stated scope of payment data collection to cover any payment initiation, not just access to named products.
Why this matters The updated policy now states that Cursor collects payment information whenever you 'initiate payment for products and services,' rather than only when accessing paid Anysphere products. This broadens the scope of payment data collection to cover any payment action, including partial transactions, payment attempts, or payments for services beyond the core Cursor platform. The policy does not specify what payment data is collected, how long it is retained, or with whom it may be shared; you can review Cursor's full Privacy Policy and Privacy Overview for additional details on payment data handling.
View full change record →
What changed Cursor's Privacy Policy removed its explicit statement that it does not 'sell' or 'share' personal data for cross-contextual behavioral advertising or process data for 'targeted advertising' purposes. The updated policy now states only that it does not process sensitive personal data for inferring consumer characteristics. The policy also removed a section on jurisdiction-specific disclosures that previously provided details about data collection purposes, types, and legal basis.
Why this matters The updated policy removes the explicit statement that Cursor does not 'sell' or 'share' personal data for cross-contextual behavioral advertising and does not process personal data for 'targeted advertising' purposes. The revised language now states only that Cursor does not process sensitive personal data for inferring consumer characteristics, which is narrower in scope. The policy also removed jurisdiction-specific disclosures that previously detailed the purposes of data collection, types of data collected, and legal basis for processing.
View full change record →

Clauses withheld

We withheld clauses we had published from this document. Each withholding is recorded in our correction log:

Featured provisions
Generated by a model from the captured document; not read by a person

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

57 provisions
11 featured
12 clause types
AI / Automated Decision-Making 1
Disclosure and Transparency Requirements 1
Stay ahead of the changes

Monitoring

Cursor has updated this document before. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Business Account Admin Access to Data and similar clauses.

Compare across platforms →
Archival ProvenanceSource & Archival Record
This version captured October 12, 2026 00:58 UTC
Last successful capture October 17, 2026 00:42 UTC
Date stated by the document October 11, 2026 (as printed in this version)
Capture Method Automated scheduled archival capture
Document ID CA-D-000452
Version ID CA-V-007489
SHA-256 (extracted text, extractor v5) 27a349d2df01c7dfc0634f1122863f71a1d5d16353e2ff795e25bbfc97940b5b
Archived bytes SHA-256 (anchor) 9d2431cda6fe78401f79b556afd2698f833064900fd1ed2f950849a7d8643527
✓ Snapshot stored ✓ Archived bytes anchored (verified Oct. 12, 2026)

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 343 platforms.

Start monitoring → Compare plans