Privacy Policy — September 29, 2026 (saved en-US page)

Cursor · agreement dated September 29, 2026 · Official agreement

Read the agreement

6 of 44 cards in Use & Processing

Use & Processing · Restriction or exception

The policy does not apply where Anysphere processes data for commercial customers, such as your employer

The Privacy Policy does not apply where Anysphere acts as a data processor and processes personal data on behalf of commercial customers using its commercial services, for example if your employer provisioned a Cursor account for you to use at work. Anysphere says its use of that data is governed by its customer agreements covering access to and use of those offerings.

Details
Who
Anysphere acting as a data processor for commercial customers
Exception
The Privacy Policy does not apply; customer agreements govern
Condition
Personal data is processed on behalf of commercial customers using commercial services, for example an employer-provisioned account

Supporting quotations

this Privacy Policy does not apply where Anysphere acts as a data processor and processes personal data on behalf of commercial customers using our commercial services, for example, if your employer has provisioned a Cursor account for you to use at work
Our use of that data is governed by our customer agreements covering access to and use of those offerings.

Not stated here

  • The customer agreements that govern that data are not supplied, so what they permit is not stated here.
  • Whether data from an employer-provisioned account is always treated as processed on the employer's behalf is not stated beyond the “for example”.

Use & Processing · Company practice

Anysphere may use personal data to run the Service, manage your account and payments, and communicate with you

Anysphere says it may use personal data to provide and maintain the Service, including optional features; to create, manage and administer your account, including facilitating payments and responding to inquiries; and to communicate with you, including sending updates, information about the Service and events. The list is introduced by “may use ... for the following purposes”.

Details
Who
Anysphere
Why
Provide and maintain the Service; create, manage and administer your account including payments and inquiries; communicate updates, information and events

Supporting quotations

We may use personal data for the following purposes:
To provide and maintain the Service, including optional features that enhance functionality and user experience.
To create, manage, and administer your account, including facilitating payments and responding to inquiries.
To communicate with you, including sending updates, information about the Service, and events.

Not stated here

  • Which categories of personal data are used for each purpose is not stated in this list.

Use & Processing · Company practice

Anysphere may use personal data to improve and develop the Service and conduct research

Anysphere says it may use personal data to improve and develop the Service and conduct research, including debugging and identifying or repairing issues that impair functionality. This general purpose is read together with the separate rule that Inputs and Suggestions are not used to train its models unless listed exceptions apply.

Details
Who
Anysphere
Why
Improve and develop the Service, conduct research, debug and repair issues
Exception
Inputs and Suggestions are not used to train Anysphere's models unless an exception applies

Supporting quotations

To improve and develop the Service and conduct research, including debugging and identifying or repairing issues that impair functionality.
We do not use Inputs or Suggestions to train our models, or permit third parties to use them for training, unless

Not stated here

  • Whether personal data other than Inputs and Suggestions may be used to train models is not stated in this list.
Also annotated in the same passage (4)

Use & Processing · Company commitment

Anysphere does not train models on Inputs or Suggestions unless flagged for security, reported by you, or you agree

Anysphere says it does not use Inputs or Suggestions to train its models, or permit third parties to, unless: (1) they are flagged for security review, in which case it may analyze them to improve its ability to detect and enforce its Terms of Service; (2) you explicitly report them to Anysphere, for example as Feedback; or (3) you have explicitly agreed to their use for such training. It says you can find instructions in the Service for managing your preferences about using Inputs and Suggestions for training. The security-review exception says Anysphere may analyze flagged items to improve detection and enforcement; the policy does not say whether that analysis involves training models.

Details
Who
Anysphere and any third party
What it does
Train models on Inputs or Suggestions
Exception
Flagged for security review; you explicitly report them; you explicitly agreed to their use for training

Supporting quotations

We do not use Inputs or Suggestions to train our models, or permit third parties to use them for training, unless: (1) they are flagged for security review (in which case we may analyze them to improve our ability to detect and enforce our
(2) you explicitly report them to us (for example, as Feedback), or (3)
explicitly agreed to their use for such training purposes.
You can find instructions in the Service on how to manage your preferences regarding the use of Inputs and Suggestions for training.

Not stated here

  • Whether the security-review analysis involves training models is not stated.
  • How and where a user gives or withdraws agreement, and any default setting, are described only as instructions in the Service.
  • The note at the top of the policy points to a separate Privacy Overview for training information; that document is not part of this source.
Also annotated in the same passage (4)

Use & Processing · Company commitment

Anysphere may aggregate or de-identify personal data for its purposes and says it will not re-identify it

Anysphere says it may aggregate or de-identify personal data so it no longer identifies you, and use that information for the purposes described above, such as analyzing how the Service is used, improving or adding features and conducting research. It says it will keep de-identified information in that form and will not attempt to re-identify it, except as required by law.

Details
Who
Anysphere
What it does
Aggregate or de-identify personal data; not re-identify it
Exception
Re-identification only as required by law

Supporting quotations

We may aggregate or de-identify personal data so that it no longer identifies you, and use that information for the purposes described above, such as analyzing how the Service is used, improving or adding features, and conducting research.
We will maintain de-identified information in its de-identified form and will not attempt to reidentify it, except as required by law.

Not stated here

  • The de-identification standard Anysphere applies is not stated.
Also annotated in the same passage (1)