With Privacy Mode on, Cursor says Customer Data is not used for training and providers will not store or train on it
If you enable Privacy Mode in Cursor's settings, the page says Customer Data will not be used for training by Cursor. It says Cursor maintains zero data retention (ZDR) agreements with all providers and that AI model providers will not store or train on your data. The same paragraph adds exceptions for risk classifiers and abuse detection and for non-ZDR models, recorded in the next two cards.
Supporting quotations
If you enable
settings: Customer Data will not be used for training by Cursor.
Cursor maintains zero data retention (ZDR) agreements with all providers, and AI model providers will not store or train on your data.
Qualifications & exceptions
Applies when Privacy Mode is enabled; subject to the abuse-detection storage and non-ZDR model statements in the same paragraph.
Not stated here
“Customer Data” is not defined on this page.
Whether the commitment covers every product and plan, and how it relates to the training statements in other Cursor documents, is not stated here.
Use & Processing · Company practice
With Privacy Mode off, Cursor may use and store code data, prompts and editor actions to improve and train its models
If you choose to turn off Privacy Mode, the page says Cursor may use and store codebase data, prompts, editor actions, code snippets and other code data and actions to improve its AI features and train its models. How this relates to the training preferences described in other Cursor documents is not stated on this page.
Supporting quotations
If you choose to turn off
we may use and store codebase data, prompts, editor actions, code snippets, and other code data and actions to improve our AI features and train our models.
Not stated here
The text says “may use and store”; it does not say whether data is used in every case or how long it is kept.
How the Privacy Mode setting interacts with the explicit-agreement and other training rules described in other Cursor documents is not stated on this page.
Use & Processing · Company practice
Requests go through Cursor's backend even if you use your own API key
Even if you use your own API key, your requests still go through Cursor's backend, where it does its final prompt building.
Supporting quotations
Even if you use your API key, your requests will still go through our backend!
where we do our final prompt building.
Not stated here
What Cursor's backend retains of such requests is not stated in this note; the Privacy Mode statements above address training and storage.