Privacy Policy — September 29, 2026

Cursor · agreement dated October 11, 2026 · Official agreement

Read the agreement

3 of 56 cards in Retention & Deletion

Retention & Deletion · Company practice

Personal data is kept only as long as necessary for operating the Service and legitimate business needs

Anysphere says it retains personal data only for as long as necessary to operate the Service effectively and to support legitimate business needs such as legal compliance, safety, dispute resolution and enforcement of its agreements. It says the appropriate retention period varies with the purpose for which the data was collected, its sensitivity, the potential risks of its use or exposure, and any applicable legal requirements.

Details
Who
Anysphere
What it does
retains personal data only as long as necessary
Why
operate the Service and legitimate business needs
Condition
period varies by purpose, sensitivity, risk and legal requirements

Supporting quotations

Anysphere retains your personal data only for as long as necessary to operate the Service effectively and to support legitimate business needs such as legal compliance, safety, dispute resolution, and enforcement of our agreements.
The appropriate retention period varies depending on the purpose for which the personal data was collected, its sensitivity, potential risks associated with its use or exposure, and any applicable legal requirements.

Qualifications & exceptions

  • Business needs named are examples ("such as").
  • Period varies by purpose, sensitivity, risk and legal requirements.

Not stated here

  • The policy gives no specific retention periods for any category of data, including Inputs, Suggestions, Feedback or logs.

Retention & Deletion · Company practice

Some temporary interactions may be stored briefly for safety and monitoring and not appear in your history

The policy says your settings may influence how long certain data is kept. For instance, some temporary interactions with the Service may not appear in your history and could be stored for a limited duration for purposes related to safety and system monitoring.

Details
Condition
your settings may influence retention
What it covers
some temporary interactions not shown in history
Why
safety and system monitoring

Supporting quotations

Your settings may also influence how long we keep certain types of data.
some temporary interactions with the Service may not appear in your history and could be stored for a limited duration for purposes related to safety and system monitoring

Qualifications & exceptions

  • Given as an instance of settings influencing retention; "some" and "could be" are not definite.
  • Stated purposes are safety and system monitoring.

Not stated here

  • The policy does not say which interactions are temporary, which settings affect retention, or what the "limited duration" is.

Retention & Deletion · Company commitment

Data no longer needed is deleted, erased, de-identified or anonymized under procedures Anysphere and providers follow

Anysphere says that when personal data is no longer needed, it and its service providers will follow procedures to delete, erase, de-identify or anonymize it, in compliance with applicable laws. Section 2 says de-identified information may be kept and used for the purposes described there.

Details
Who
Anysphere and its service providers
What it does
follow procedures to delete, erase, de-identify or anonymize
Condition
personal data is no longer needed
Exception
de-identified information may still be used

Supporting quotations

When personal data is no longer needed, Anysphere and its service providers will follow procedures to delete, erase, de-identify, or anonymize it in compliance with applicable laws.
We may aggregate or de-identify personal data so that it no longer identifies you, and use that information for the purposes described above

Qualifications & exceptions

  • Triggered when personal data is no longer needed.
  • Four outcomes are listed: delete, erase, de-identify or anonymize.
  • Carried out in compliance with applicable laws.
  • De-identified information may continue to be used under section 2.

Not stated here

  • The procedures and timing are not described.
  • The policy does not say which of the four outcomes applies to which data.

Cross-references

Also annotated in the same passage (1)