Cursor collects technical logs and data about how you use the Service (but not your actual code or AI suggestions) and may share this usage information with third parties, provided it is aggregated or de-identified so it does not identify you individually.
This analysis describes what Cursor's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision distinguishes Usage Data from Content (code inputs and suggestions), authorizing Anysphere to collect and process interaction and log data for business purposes and to share it with third parties in aggregated or de-identified form.
Interpretive note: The scope of 'learnings' within the Usage Data definition is not exhaustively defined, and whether aggregated or de-identified disclosures satisfy GDPR or CCPA standards depends on the technical de-identification methodology applied, which is not described in the document.
Under this provision, Anysphere may collect technical logs and interaction data about how users use the Service and share that data with third parties in aggregated or de-identified form; the definition of Usage Data expressly excludes Content (Inputs and Suggestions), so code and AI outputs are not covered by this sharing authorization unless the user opts in to training under Section 1.3.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"Anysphere may: (i) collect, analyze, and otherwise process Usage Data internally for its business purposes, including for security and analytics, to enhance the Service, and for other development and corrective purposes; and (ii) disclose Usage Data to third parties only in an aggregated and/or de-identified form and in a manner that does not identify you. "Usage Data" means technical logs, data, and learnings about Customer's use of and interactions with the Service, but excludes Content.Excerpt from Cursor's Terms of Service
REGULATORY LANDSCAPE: The collection and disclosure of Usage Data engages GDPR Articles 5 and 6 (lawful basis and data minimization), CCPA provisions governing the sale or sharing of personal information, and FTC guidance on de-identification …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision distinguishes Usage Data from Content (code inputs and suggestions), authorizing Anysphere to collect and process interaction and log data for business purposes and to share it with third parties in aggregated or de-identified form.
Under this provision, Anysphere may collect technical logs and interaction data about how users use the Service and share that data with third parties in aggregated or de-identified form; the definition of Usage Data expressly excludes Content (Inputs and Suggestions), so code and AI outputs are not covered by this sharing authorization unless the user opts in to training under …
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cursor.