AI tool privacy · Anysphere
Cursor and your company’s data
By David Michaelson, MS Last checked October 23, 2026
The short answer
With Privacy Mode on, Cursor says your code is never used for training by Cursor or its AI model providers; with it off, Cursor may store and train on your code and prompts. Privacy Mode is on by default for team members.
Safer setup: Use a Cursor Teams or Enterprise account and have an admin enforce Privacy Mode for everyone, so no one can turn it off.
Plan by plan
Each answer comes from Anysphere’s own policy or help pages, with the link and the date we read it. Setting names are quoted exactly as Anysphere writes them.
We could not confirm 2 answers on Anysphere’s own pages. Those answers say so in plain words and link to the page we checked.
| Question | Free, Pro, and other individual accounts | Teams and Enterprise |
|---|---|---|
| Trains on your data by default? | Only if Privacy Mode is off. Cursor says that with Privacy Mode off, it may store and use your code, prompts, and editor actions to train its models. Privacy Mode is available on free and Pro accounts. The pages we read do not say whether it starts on or off for individual accounts. Read on October 23, 2026 Source: cursor.com | No, by default. Cursor says Privacy Mode is on by default for team members, and Teams and Enterprise admins can enforce it so members cannot turn it off. With Privacy Mode on, your code is never used for training. Read on October 23, 2026 Source: cursor.com |
| How long your data is kept | With Privacy Mode on, Cursor says its AI model providers keep nothing under zero data retention agreements, and cached file contents are temporary and never stored permanently. Some models that need provider retention are off by default and need admin approval. Read on October 23, 2026 Source: cursor.com | With Privacy Mode on, Cursor says its AI model providers keep nothing under zero data retention agreements, and cached file contents are temporary and never stored permanently. Some models that need provider retention are off by default and need admin approval. Read on October 23, 2026 Source: cursor.com |
| Who can see it | Cursor staff, on a least-privilege basis. Cursor says infrastructure access follows the principle of least privilege, with multi-factor authentication and activity monitoring. Read on October 23, 2026 Source: cursor.com | Cursor staff, on a least-privilege basis. Cursor says infrastructure access follows the principle of least privilege, with multi-factor authentication and activity monitoring. Read on October 23, 2026 Source: cursor.com |
| Where data is stored | The pages we read do not say where Cursor stores your data. Page checked: cursor.com, October 23, 2026 | The pages we read do not say where Cursor stores your data. Page checked: cursor.com, October 23, 2026 |
| How to delete | Delete your account at any time from the Settings dashboard, or contact Cursor support for help. Read on October 23, 2026 Source: cursor.com | Delete your account at any time from the Settings dashboard, or contact Cursor support for help. Read on October 23, 2026 Source: cursor.com |
Safer setup, step by step
- Have a Teams or Enterprise admin enforce Privacy Mode for the whole organization in the Cursor dashboard, so members cannot turn it off. Source: cursor.com for this step
- Leave models that require provider data retention turned off unless an admin has reviewed them. They are off by default. Source: cursor.com for this step
- On any individual account used for work, turn on Privacy Mode in Cursor’s settings. Source: cursor.com for this step
What to write in your policy
Developers use Cursor only through our company Teams account with Privacy Mode enforced. Customer data and secrets stay out of prompts.
Building your own approved tools list? The SafeStart Handbook includes one, with company accounts and safer privacy settings.