Cursor and its privacy mode

The document exists. The ledger fetched it at its publisher and quotes it.

Record ID

AVD-2026-0024

Kind

Business tier

Jurisdiction

United States

Last verified

15 September 2026

Added

15 September 2026

• The terms of service state that Cursor will not use content to train any AI models unless you have explicitly agreed.
• The data use page says customer data will not be used for training by Cursor and that zero data retention agreements are maintained with all providers.
• File contents are cached temporarily on Cursor servers and the encryption keys exist there only for the duration of a request.
• Where a customer supplies its own model provider key, data handling follows that provider's policy rather than Cursor's agreements.

Used for training by default, Retention period, Deletion on request, Storage region and residency, Subprocessor list published, Human review of content, Opt out available, DPA available, Persistent memory across sessions, Last change to the terms. Stated means the document you can open below says it; silent means the ledger read the document and it does not.

Used for training by defaultStated

No, and stated in the contract rather than a help page. The terms say Cursor will not use content to train any AI models unless you have explicitly agreed.Cursor terms of service, primary source, 3 September 2026.

Retention periodStated

Qualitative only. Cached file contents are described as temporary and never permanently stored, and no numeric retention period is printed on any page read.Cursor, how your data is used, primary source, 3 September 2026.

Deletion on requestStated

The privacy policy commits to a process without a deadline, and the terms reserve deletion as an option Cursor may exercise rather than an obligation it owes.Cursor terms of service, primary source, 3 September 2026.

Storage region and residencyStated

United States only data residency is offered to enterprise customers, against a default of processing in various jurisdictions, and no infrastructure is maintained in China.Cursor docs, enterprise privacy and data governance, primary source, 15 September 2026.

Subprocessor list publishedStated

A list is published on the trust portal, each subprocessor is under a data processing agreement and is reviewed annually, but the portal renders client side and the entries were unreadable.Cursor security, primary source, 25 August 2026.

Human review of contentStated

Inputs may be retained where flagged for security review, explicitly reported by the user, or where the user consents.Cursor privacy policy, primary source, 6 October 2025.

Opt out availableStated

Privacy mode is the control, it is available to every tier, and administrators can enforce it so members cannot disable it.Cursor security, primary source, 25 August 2026.

DPA availableStated

A data processing agreement with data protection commitments is offered for commercial relationships, though the terms of service point to the privacy policy rather than to it.Cursor docs, enterprise privacy and data governance, primary source, 15 September 2026.

Persistent memory across sessionsSilent

No memory or chat history retention statement appears on the pages read. Cloud agent data is described as stored while the agent runs and deleted when it completes, with no period.Cursor docs, enterprise privacy and data governance, primary source, 15 September 2026.

Last change to the termsStated

The data use page and the terms of service print Last updated 3 September 2026, the security page 25 August 2026, and the privacy policy 6 October 2025.Cursor, how your data is used, primary source, 3 September 2026.

This is the clearest no training commitment in the ledger because it sits in the contract and an administrator can lock it on. Two qualifications belong in the same paragraph. There is no numeric retention period anywhere, so a questionnaire asking how long code is held has no printed answer, and bringing your own provider key moves you outside the zero retention agreements that make the promise work.

1. Cursor securityPrimary · 25 August 2026
2. Cursor, how your data is usedPrimary · 3 September 2026
3. Cursor terms of servicePrimary · 3 September 2026
4. Cursor docs, enterprise privacy and data governancePrimary · 15 September 2026
5. Cursor privacy policyPrimary · 6 October 2025

• VerifiedBusiness tierAVD-2026-0025

  GitHub Copilot Business and Enterprise

  United States · verified 15 September 2026

  GitHub states it does not use Copilot Business or Copilot Enterprise customer data to train AI models.

• Open questionOpen questionAVD-2026-0030

  Does zero data retention survive an abuse investigation?

  Global · verified 15 September 2026

  OpenAI states a flagged image is retained for manual review even where zero data retention, modified abuse monitoring or eyes off is enabled.

• VerifiedAPI and platformAVD-2026-0026

  Amazon Bedrock

  United States · verified 15 September 2026

  Amazon Bedrock uses a zero data retention security model, so by default it does not store model inputs or outputs.

• VerifiedBusiness tierAVD-2026-0023

  Perplexity enterprise and the Sonar API

  United States · verified 15 September 2026

  The developer documentation states Perplexity does not use customer data to train its models or for any purpose beyond processing the immediate request.

• VerifiedConsumer tierAVD-2026-0022

  Perplexity on the free and paid consumer plans

  United States · verified 15 September 2026

  The privacy notice lists improving or creating services and products, including its AI models, among the uses of data collected.

• VerifiedAPI and platformAVD-2026-0017

  The Grok API and enterprise platform

  United States · verified 15 September 2026

  The enterprise FAQ states the vendor does not use business data, including inputs or outputs, to train its models.