Personal data may be disclosed to service providers and business partners, including model and payment providers
Anysphere says it may disclose personal data to third-party vendors and service providers that support its business operations and help it deliver and improve the Service. The listed types include hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services and IT providers. It says these parties process personal data only as necessary to perform services on its behalf, consistent with its and your instructions and applicable law.
Details
Who
Anysphere
What it covers
personal data
What it does
may disclose to vendors and service providers
Why
support operations and deliver and improve the Service
Condition
providers process only as necessary to perform services on Anysphere's behalf
Exception
no third-party training on Inputs or Suggestions except the stated conditions
Supporting quotations
We may disclose personal data to third-party vendors and service providers who support our business operations and help us deliver and improve the Service.
This includes third-party hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers.
These parties process personal data only as necessary to perform services on our behalf, consistent with our and your instructions and applicable law.
or permit third parties to use them for training
Qualifications & exceptions
Stated as "may" disclose.
Providers are said to process data only as necessary to perform services on Anysphere's behalf, consistent with Anysphere's and your instructions and applicable law.
Section 2 states that Anysphere does not permit third parties to use Inputs or Suggestions for training, subject to three exceptions.
Not stated here
No providers are named in this section, and the list of subprocessors linked in this policy is for commercial uses.
The policy does not say which personal data, for example Inputs, are disclosed to model providers.
The policy does not say what "your instructions" refers to.
Personal data may be disclosed or transferred in a merger, acquisition or similar transaction
In a merger, acquisition, restructuring, bankruptcy or other corporate transaction, the policy says personal data may be disclosed to counterparties and advisers as part of due diligence, or transferred as part of the transaction.
Details
Condition
merger, acquisition, restructuring, bankruptcy or other corporate transaction
What it does
may be disclosed to counterparties and advisers or transferred
Supporting quotations
In the event of a merger, acquisition, restructuring, bankruptcy, or other corporate transaction, personal data may be disclosed to counterparties and advisers as part of due diligence or transferred as part of the transaction.
Qualifications & exceptions
Triggered by a merger, acquisition, restructuring, bankruptcy or other corporate transaction.
Disclosure to counterparties and advisers is described as part of due diligence.
Not stated here
The policy does not say whether you would be notified or given any choice, or whether the recipient must follow this policy.
Sharing & Disclosure · Company practice
Personal data may be disclosed to authorities or others when Anysphere believes it is necessary for six listed reasons
Anysphere says it may disclose personal data to government authorities or other third parties if it believes doing so is necessary to: comply with laws, regulations or legal processes; respond to lawful requests or investigations; protect the safety, rights or property of any person; prevent fraud, security incidents or other unlawful activity; enforce its Terms of Service or other legal rights; or protect Anysphere against legal liability.
Details
Who
Anysphere
What it does
may disclose personal data to government authorities or other third parties
Condition
Anysphere believes disclosure is necessary for one of six listed reasons
Supporting quotations
We may disclose personal data to government authorities or other third parties if we believe doing so is necessary to: (i) comply with applicable laws, regulations, or legal processes, (ii) respond to lawful requests or investigations, (iii) protect the safety, rights, or property of any person, (iv) prevent fraud, security incidents, or other unlawful activity, (v) enforce our Terms of Service or other legal rights, or (vi) protect Anysphere against legal liability.
Qualifications & exceptions
The test is Anysphere's belief that disclosure is necessary.
Recipients are government authorities or other third parties.
Six listed reasons, including protecting Anysphere against legal liability.
Not stated here
The Terms of Service are linked but their text is not supplied here, so what enforcement of them covers is unknown.
The policy does not say whether you are notified of such disclosures or whether Anysphere requires a legal request before disclosing.
Sharing & Disclosure · Company practice
Personal data may be shared with affiliates, which may use it consistently with this policy
Anysphere says it may share personal data with affiliates, meaning entities that control, are controlled by, or are under common control with it. The policy says they may use personal data in a manner consistent with this Privacy Policy.
Details
Who
Anysphere
What it does
may share personal data with affiliates
Condition
affiliates' use consistent with this Privacy Policy
Supporting quotations
We may share personal data with affiliates, meaning an entity that controls, is controlled by, or is under common control with, us. They may use personal data in a manner consistent with this Privacy Policy.
Qualifications & exceptions
Affiliate is defined as an entity that controls, is controlled by, or is under common control with Anysphere.
Affiliates' use is described as consistent with this Privacy Policy.
Not stated here
The policy does not name affiliates or say where they are located.
Sharing & Disclosure · Company practice
If you choose to interact with third-party integrations, your data may be disclosed to them under their own terms
The Service may include integrations with or links to third-party websites, applications or services. If you choose to interact with these third parties, the policy says your personal data may be disclosed to them directly and governed by their own terms and privacy policies. Linking or integrating with a third party does not imply endorsement or affiliation.
Details
Condition
you choose to interact with the third party
What it does
personal data may be disclosed directly
What it covers
governed by the third party's own terms and privacy policies
Supporting quotations
If you choose to interact with these third parties, your personal data may be disclosed to them directly and governed by their own terms and privacy policies.
Our linking or integrating with a third party does not imply endorsement or affiliation.
Qualifications & exceptions
Applies if you choose to interact with the third party.
Disclosure may be direct, and the third party's own terms and privacy policies govern.
Linking or integrating does not imply endorsement or affiliation.
Not stated here
The third parties' terms and privacy policies are not part of this document.
Sharing & Disclosure · Company practice
With an organization email or business account, details may go to the organization and admins may manage your use
If you create an account using an email associated with an organization, such as your employer, Anysphere says it may disclose account-related information, such as your email address and account status, to that organization. If you are part of a business or enterprise account, administrators may access and manage your use of the Service.
Details
Condition
account created with an organization-associated email
What it covers
account-related information such as email address and account status
Who
business or enterprise account administrators
What it does
may access and manage your use of the Service
Supporting quotations
If you create an account using an email associated with an organization (e.g., your employer), we may disclose account-related information (such as your email address and account status) to that organization.
If you're part of a business or enterprise account, administrators may access and manage your use of the Service.
Qualifications & exceptions
First statement applies to accounts created with an email associated with an organization.
Second statement applies to business or enterprise accounts.
Disclosed items are "account-related information (such as your email address and account status)".
Not stated here
The policy does not say what "access and manage your use" covers, for example whether administrators can see Inputs or Suggestions.
The introduction says the policy does not apply where Anysphere acts as a data processor for commercial customers, for example an employer-provisioned account; the policy does not say how that exclusion relates to this statement.
Cross-references
contrast (model-proposed): Policy does not apply where Anysphere processes data as a processor for commercial customers — Section 3 says account information may be disclosed to an employer organization and that business account administrators may manage your use, while the introduction excludes data Anysphere processes for commercial customers, such as an employer-provisioned account. The policy does not say which applies to a given account.
Sharing & Disclosure · Context
Information you share with other users or third-party applications is subject to their terms
Certain features of the Service may let you share Inputs, Suggestions or other content with other users or third-party applications. The policy says any information you voluntarily share with those parties is subject to their respective terms and privacy policies.
Details
Who
You
What it does
share Inputs, Suggestions or other content
What it covers
other users or third-party applications
Supporting quotations
Certain features of the Service may allow you to share Inputs, Suggestions, or other content with other users or third-party applications. Any information you voluntarily share with those parties is subject to their respective terms and privacy policies.
Qualifications & exceptions
Applies to information you voluntarily share through sharing features.
Recipients' own terms and privacy policies apply.
Not stated here
The policy does not name the features that allow sharing or say what Anysphere keeps about such sharing.
Sharing & Disclosure · Company practice
Personal data may be disclosed when you give permission
Anysphere says it may disclose personal data when you give it permission to do so, including through features of the Service that are designed to share information.
Details
Condition
you give permission
What it does
may disclose personal data
Supporting quotations
We may disclose personal data when you give us permission to do so, including through features of the Service that are designed to share information.
Qualifications & exceptions
Requires your permission.
Includes features designed to share information.
Not stated here
The policy does not describe how permission is given or withdrawn for this kind of sharing.
Sharing & Disclosure · Procedure
For commercial uses where Anysphere is a processor, a subprocessor list is available at a linked address
For commercial uses of the Service where Anysphere acts as a data processor, the policy says you can review the third parties it engages at a trust.cursor.com subprocessors page. The list itself is not part of this document.
Details
Condition
commercial uses where Anysphere acts as a data processor
What it does
review the third parties engaged
Supporting quotations
For commercial uses of the Service where Anysphere acts as a data processor, you can review the third parties we engage on at
Qualifications & exceptions
Applies to commercial uses where Anysphere acts as a data processor.
Not stated here
The subprocessor list is on a linked page that is not part of this document, so the named third parties are unknown.
The policy does not say whether a comparable list exists for uses outside the commercial processor case.