Cursor collects technical logs and data about how you use the Service (but not your actual code or AI suggestions) and may share this usage information with third parties, provided it is aggregated or de-identified so it does not identify you individually.
This analysis describes what Cursor's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision distinguishes Usage Data from Content (code inputs and suggestions), authorizing Anysphere to collect and process interaction and log data for business purposes and to share it with third parties in aggregated or de-identified form.
Interpretive note: The scope of 'learnings' within the Usage Data definition is not exhaustively defined, and whether aggregated or de-identified disclosures satisfy GDPR or CCPA standards depends on the technical de-identification methodology applied, which is not described in the document.
Under this provision, Anysphere may collect technical logs and interaction data about how users use the Service and share that data with third parties in aggregated or de-identified form; the definition of Usage Data expressly excludes Content (Inputs and Suggestions), so code and AI outputs are not covered by this sharing authorization unless the user opts in to training under Section 1.3.
How other platforms handle this
Introduction If the CCPA is applicable, you have the right to know and understand how we collect, use, disclose, and share your Data, to access your Data, to request that we delete specific Data, to exercise your rights to opt-out...
"Anysphere may: (i) collect, analyze, and otherwise process Usage Data internally for its business purposes, including for security and analytics, to enhance the Service, and for other development and corrective purposes; and (ii) disclose Usage Data to third parties only in an aggregated and/or de-identified form and in a manner that does not identify you. "Usage Data" means technical logs, data, and learnings about Customer's use of and interactions with the Service, but excludes Content.Excerpt from Cursor's Terms of Service
REGULATORY LANDSCAPE: The collection and disclosure of Usage Data engages GDPR Articles 5 and 6 (lawful basis and data minimization), CCPA provisions governing the sale or sharing of personal information, and FTC guidance on de-identification …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This provision distinguishes Usage Data from Content (code inputs and suggestions), authorizing Anysphere to collect and process interaction and log data for business purposes and to share it with third parties in aggregated or de-identified form.
Under this provision, Anysphere may collect technical logs and interaction data about how users use the Service and share that data with third parties in aggregated or de-identified form; the definition of Usage Data expressly excludes Content (Inputs and Suggestions), so code and AI outputs are not covered by this sharing authorization unless the user opts in to training under …
ConductAtlas has identified this type of provision across 277 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cursor.