If your employer or another organization set up your Cursor account, this privacy policy may not apply to you. Instead, how your data is handled is governed by the contract between Anysphere and that organization.
This analysis describes what Cursor's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Employees or users whose accounts are provisioned by an organization may not have the same rights or protections described in this policy; their data rights depend entirely on the terms of the agreement between their employer and Anysphere.
The policy states it does not govern data processing for employer-provisioned accounts; those users' data rights depend on the employer's customer agreement with Anysphere, which the employee may not have direct access to.
How other platforms handle this
Where ZipRecruiter processes your Personal Data in the capacity of a service provider (data processor), and you seek access, or want to correct, amend, or delete your Personal Data...we will provide you with the data controller's contact information, so you can contact them directly.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"Please note that this Privacy Policy does not apply where Anysphere acts as a data processor and processes personal data on behalf of commercial customers using our commercial services, for example, if your employer has provisioned a Cursor account for you to use at work. Our use of that data is governed by our customer agreements covering access to and use of those offerings.Excerpt from Cursor's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 28 (processor obligations) for EEA users, as commercial customer agreements must include Data Processing Agreement terms meeting GDPR requirements.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Employees or users whose accounts are provisioned by an organization may not have the same rights or protections described in this policy; their data rights depend entirely on the terms of the agreement between their employer and Anysphere.
The policy states it does not govern data processing for employer-provisioned accounts; those users' data rights depend on the employer's customer agreement with Anysphere, which the employee may not have direct access to.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cursor.