When you type code, questions, or other content into Cursor and receive AI responses, both what you typed and the AI's response are collected. If your code or messages include personal information about anyone, that information is also collected and may appear in AI-generated responses.
This analysis describes what Cursor's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy states that personal data included in Inputs will be collected and may be reproduced in Suggestions, which is relevant for users who include third-party personal data, credentials, API keys, or sensitive business information in their coding sessions.
Any personal data or external content embedded in code, prompts, or other Inputs submitted to Cursor is collected and may reappear in AI-generated Suggestions. Users who include sensitive information in their Inputs should be aware of this collection.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
"Inputs and Suggestions: The Service allows you to submit content ("Inputs"), which generate responses ("Suggestions") based on your Inputs. If you include personal data or reference external content in your Inputs, we will collect that information and it may be reproduced in the Suggestions we provide.Excerpt from Cursor's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages GDPR principles where users include third-party personal data in Inputs, as Anysphere would be processing that data.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The policy states that personal data included in Inputs will be collected and may be reproduced in Suggestions, which is relevant for users who include third-party personal data, credentials, API keys, or sensitive business information in their coding sessions.
Any personal data or external content embedded in code, prompts, or other Inputs submitted to Cursor is collected and may reappear in AI-generated Suggestions. Users who include sensitive information in their Inputs should be aware of this collection.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cursor.