This analysis describes what Cursor's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
EEA and UK users have stronger data protection rights under GDPR and UK GDPR, and international transfers of their data require specific legal safeguards; this clause confirms transfers occur but does not name the specific transfer mechanisms used.
Interpretive note: The policy does not specify which legally valid transfer mechanisms are in use, such as Standard Contractual Clauses or the EU-US Data Privacy Framework, which limits the ability to independently verify compliance.
The policy states that Cursor collects code Inputs you submit and AI-generated Suggestions, along with IP addresses, device information, log data, and usage and browsing activity within the service. For users on workplace or enterprise accounts, the policy states that account-related information (including email address and account status) may be disclosed to the employer organization, and administrators may access and manage the user's service activity. You can manage your preferences regarding whether Inputs and Suggestions are used for model training through the settings available within the Service.
How other platforms handle this
Customer authorized Mistral AI to transfer Personal Data to any country deemed to have an adequate level of data protection by the European Commission. Customer also authorizes Mistral AI to perform International Data Transfers to (a) on the basis of adequate safeguards in accordance with Applicable...
Personal data collected by Unity may be transferred to and processed in countries outside of the European Economic Area, including the United States, where data protection laws may differ from those in your country. Where we transfer personal data from the EEA or the UK, we rely on appropriate safeg...
When we transfer personal data outside the European Economic Area, United Kingdom, or Switzerland, we use appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure your data is protected.
Monitoring
Cursor has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Anysphere processes your personal data for the purposes described in this Privacy Policy on servers located in various jurisdictions, including in the United States. While data protection laws vary by country, we apply the protections outlined in this policy to your personal data regardless of where it is processed, and we only transfer data in accordance with legally valid transfer mechanisms. For users in the European Economic Area, ("EEA"), when you access our Service, your personal data may be transferred to our United States servers to other countries outside the EEA and the UK. Where information is transferred outside the EEA or the UK, we require an adequate level of data protection.— Excerpt from Cursor's Cursor Privacy Policy
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
EEA and UK users have stronger data protection rights under GDPR and UK GDPR, and international transfers of their data require specific legal safeguards; this clause confirms transfers occur but does not name the specific transfer mechanisms used.
ConductAtlas has identified this type of provision across 49 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cursor.