Cursor

“We do not use Inputs or Suggestions to train our models, or permit third parties to use them for training, unless: (1) they are flagged for security review (in which case we may analyze them to improve our ability to detect and enforce our Terms of Service), (2) you explicitly report them to us (for example, as Feedback), or (3) you’ve explicitly agreed to their use for such training purposes.”

“At Customer’s written direction, Vendor shall delete or return all Personal Data to Customer as requested at the end of the provision of the Service, within thirty (30) days of such request, unless retention of the Personal Data is required by law, and upon request shall provide written certification thereof.”

“Anysphere processes your personal data for the purposes described in this Privacy Policy on servers located in various jurisdictions, including in the United States.”

“If Vendor appoints a new subprocessor or intends to make any changes concerning the addition or replacement of any subprocessor, it shall provide Customer with thirty (30) business days’ prior written notice by posting updates at trust.cursor.com/subprocessors, during which time Customer can object to the appointment or replacement on reasonable and documented grounds related to the confidentiality or security of Personal Data or the subprocessor’s compliance with Privacy Laws (and if Customer does not so object, Vendor may proceed with the appointment or replacement).”