Data Use & Privacy Overview — September 3, 2026 (saved en-US page)

Retention & Deletion · Restriction or exception

Even with Privacy Mode on, abuse detection may cause your data to be stored for investigation

With Privacy Mode on, the page says model providers, including Cursor, may run risk classifiers, subject to their policies, to detect violations of terms and usage policies. If your prompts or conversations trigger abuse detectors, your data may be stored for investigation and deleted in accordance with their retention policies. This qualifies the statement that providers will not store your data.

Supporting quotations

However, please note that subject to their policies, model providers (including Cursor) may run risk classifiers to detect violations of terms and usage policies, and if your prompts or conversations trigger abuse detectors your data may be stored for investigation and deleted in accordance with their retention policies.

AI model providers will not store or train on your data.

Not stated here

• How long data stored for investigation is kept, and who can access it, are determined by the providers' retention policies, which are not supplied here.
• Whether data stored under this exception may be used for training is not stated.

Retention & Deletion · Company practice

With Privacy Mode on, non-ZDR models are labeled as such or need an admin to opt in for your workspace

With Privacy Mode on, the page says non-ZDR models will be designated as such or require an admin to opt in to enable the model for your workspace. This indicates some models are not covered by zero data retention agreements.

Supporting quotations

Non-ZDR models will be designated as such or require an admin to opt-in to enable the model for your workspace.

Not stated here

• Which models are non-ZDR, and how an individual (non-workspace) user is told, are not stated here.

Retention & Deletion · Company practice

File contents are cached temporarily on Cursor's servers, encrypted, and never used as training data in privacy mode

Cursor temporarily caches file contents on its servers to reduce latency and network usage. The files are encrypted using unique client-generated keys, and those keys exist on its servers only for the duration of a request. All cached file contents are temporary, never permanently stored, and never used as training data when privacy mode is enabled. The page does not say whether cached contents may be used for training when privacy mode is off.

Supporting quotations

We temporarily cache file contents on our servers to reduce latency and network usage.

The files are encrypted using unique client-generated keys, and these encryption keys only exist on our servers for the duration of a request.

All cached file contents are temporary, never permanently stored, and never used as training data when privacy mode is enabled.

Qualifications & exceptions

• The no-training statement is made for when privacy mode is enabled.

Not stated here

• How long “temporary” is for cached file contents is not stated.
• Whether cached contents may be used for training when privacy mode is off is not stated.