Cursor
Anysphere
Careful
Cursor says that with Privacy Mode on, your data is not used for training and model providers are under zero-data-retention agreements, with a carve-out if abuse detectors fire. With Privacy Mode off, Cursor may store code and prompts and train on them. The pages describe how to turn Privacy Mode on. They do not say a brand-new personal account starts with it on. Turn it on, or have an admin force it, before you open a private repository.
Last checked 2026-11-10
Data-safety checklist
Trains on your data by default
Unknown
If Privacy Mode is enabled, customer data is not used for training. If it is turned off, Cursor may use codebase data, prompts, and code snippets to train its models. The default for a new personal account is not stated.How to opt out
Steps
Enable Privacy Mode in settings. A team or enterprise admin can set it, and new members inherit the team's setting. Even with your own API key, requests still go through Cursor's backend.Data retention
What they keep
With Privacy Mode on, Cursor says providers do not store or train on your data, except that abuse-detected prompts may be stored for investigation. Cached file contents are temporary and are not training data while Privacy Mode is on. A day count for ordinary prompts is not stated.BAA / HIPAA
Unknown
The security and data-use pages do not mention a business associate agreement.Certifications
4 listed
- SOC 2 Type II
- ISO/IEC 27001:2022
- ISO/IEC 42001:2023
- AIUC-1
Enterprise and admin controls
Controls
Team and enterprise admins can enforce Privacy Mode. New team members inherit it. Reports are requested through trust.cursor.com.Sources
3 pages