Does your organization use Cursor? One sensor, and Openwake watches it on its own: the documents re-read daily, every moved clause told.Start free
Trains on customer data
Training posture: does not train
for the product and account type the quoted document covers
“We do not use Inputs or Suggestions to train our models, or permit third parties to use them for training, unless: (1) they are flagged for security review (in which case we may analyze them to improve our ability to detect and enforce our Terms of Service), (2) you explicitly report them to us (for example, as Feedback), or (3) you’ve explicitly agreed to their use for such training purposes.”
Opt-out mechanism
none described
Not stated in the documents we could read. An absence here is an unknown, not a no.
AI features
none stated
Not stated in the documents we could read. An absence here is an unknown, not a no.
Model providers named
none named
Not stated in the documents we could read. An absence here is an unknown, not a no.
Retention
30 days
“At Customer’s written direction, Vendor shall delete or return all Personal Data to Customer as requested at the end of the provision of the Service, within thirty (30) days of such request, unless retention of the Personal Data is required by law, and upon request shall provide written certification thereof.”
Hosting regions
United States
“Anysphere processes your personal data for the purposes described in this Privacy Policy on servers located in various jurisdictions, including in the United States.”
Subprocessor notice
30 days
“If Vendor appoints a new subprocessor or intends to make any changes concerning the addition or replacement of any subprocessor, it shall provide Customer with thirty (30) business days’ prior written notice by posting updates at trust.cursor.com/subprocessors, during which time Customer can object to the appointment or replacement on reasonable and documented grounds related to the confidentiality or security of Personal Data or the subprocessor’s compliance with Privacy Laws (and if Customer does not so object, Vendor may proceed with the appointment or replacement).”
Downstream
Who's behind Cursor, as listed in its own subprocessor documents. No subprocessors identified · coverage incomplete: no subprocessor document is on file; the names below come from other documents, if any.
Model providers
- none listed
Hyperscalers
- none listed
Other subprocessors
- none listed
Reviewer notes
Extracted by deterministic rules (rules/v1), no language model. Coverage is limited to recognisable clauses and a gazetteer of common subprocessors; absent values mean 'not matched', not 'not present'.
Documents read
- privacy policy https://cursor.com/privacyHTTP 200 · 2026-10-13
- dpa https://cursor.com/terms/dpaHTTP 200 · 2026-09-05
Document changes
- low 2026-10-13 · privacy policy +8 / −9 lines
show diff
+ INTRODUCTION+ 1. PERSONAL DATA WE COLLECT+ 2. HOW WE USE PERSONAL DATA+ 3. HOW WE SHARE PERSONAL DATA+ 4. RETENTION+ 6. YOUR RIGHTS AND CHOICES+ 7. PRIVACY POLICY CHANGES+ 8. CONTACTING US− #INTRODUCTION− #1. PERSONAL DATA WE COLLECT− #2. HOW WE USE PERSONAL DATA− #3. HOW WE SHARE PERSONAL DATA− #4. RETENTION− #5. SECURITY− #6. YOUR RIGHTS AND CHOICES− #7. PRIVACY POLICY CHANGES− #8. CONTACTING US - low 2026-10-12 · privacy policy +2 / −2 lines
show diff
+ Last updated October 11, 2026+ * Payment Information: We collect your payment information if you seek to access any paid products and services, or initiate payment for products and services.− Last updated September 29, 2026− * Payment Information: We collect your payment information if you seek to access any paid Anysphere products and services. - medium 2026-10-01 · privacy policy +4 / −6 lines
show diff
+ Last updated September 29, 2026+ * We do not process sensitive personal data for the purposes of inferring characteristics about a consumer.+ #7. PRIVACY POLICY CHANGES+ #8. CONTACTING US− Last updated October 6, 2025− * No sale or targeted advertising: We do not “sell” or “share” personal data for cross-contextual behavioral advertising, and we do not process personal data for “targeted advertising” purposes (as those terms are defined under applicable US state privacy laws). We also do not process sensitive personal data for the purposes of inferring characteristics about a consumer.− #7. JURISDICTION-SPECIFIC DISCLOSURES− Some jurisdictions require specific disclosures regarding how we handle your personal data. The table below supplements this Privacy Policy by providing additional details about the purpose of data collection, type of data collected, and legal basis. For more information, see “Personal data we collect,” “How we use personal data,” and “Retention” above.− #8. PRIVACY POLICY CHANGES− #9. CONTACTING US
Fact changes
No changes recorded yet. Changes appear here when a later reading differs from an earlier one.
Corrections
No correction requests. Anyone may dispute a fact with a source; requests and resolutions are public and ledger-entered.
Facts are as stated in Cursor's public documents on the date read. This is a record, not legal advice. Work for Cursor? Claim this profile · Something wrong? Request a correction.