Privacy Policy

If you have any questions or feedback, please email us at hi@cursor.com!

TLDR

If you enable "Privacy Mode" in Cursor's settings, none of your code will ever be stored by us or any third-party (except for OpenAI and Anthropic, which persist the prompts we send to them for 30 days for trust and safety. Business plan users' data will not be retained at all by OpenAI.)
If you choose to keep Privacy Mode off, we may save prompts / collect telemetry data to improve the product. If you use Copilot++, Fireworks (our inference provider) may also collect prompts to improve Copilot++ inference speed.

Even if you use your API key, your requests will still go through our backend! That's where we do our final prompt building.
If you choose to index your codebase, Cursor will upload your codebase in small chunks to our server to compute embeddings, but all plaintext code ceases to exist after the life of the request. The embeddings and metadata about your codebase (hashes, file names) may be stored in our database, but none of your code is.