Does Cursor train on your data?
Anysphere · AI code editor · official site ↗
Depends on your planZDR / DPA on enterpriseOpt-out available
Does Cursor train its models on your data?
It depends — Cursor trains on consumer/free-tier data by default but excludes business, enterprise and API tiers.
Cursor's Privacy Mode determines training: with Privacy Mode on, none of your code is ever trained on by Cursor or third parties and ZDR is enabled with providers; with Privacy Mode off, Cursor may store and train on your codebase data. Privacy Mode is forced on for teams/Business.
Can you opt out?
Enable Privacy Mode in settings to stop all training and trigger zero-data retention with model providers. Privacy Mode is enabled by default for team members and can be enforced org-wide by Business admins; individual Free/Pro users must opt in.
Zero retention / DPA
Turning on Privacy Mode enables zero data retention with model providers; Cursor may still store some code data to power features but never trains on it. Business plan enforces Privacy Mode org-wide. Without Privacy Mode, providers like OpenAI/Anthropic may retain prompts up to ~30 days for trust & safety.
What the listicles get wrong
The nuance content farms miss: 'Cursor doesn't train on your code' is only true with Privacy Mode ON — with it off, your codebase, prompts and edits can train Cursor's models. Privacy Mode ON is default only for teams; solo Free/Pro users must enable it. Even with Privacy Mode, third-party providers may hold non-Business prompts ~30 days for abuse monitoring.
Verdict by plan tier
Free / Pro (Privacy Mode OFF)Trains unless you opt outWithout Privacy Mode, Cursor may use and store codebase data, prompts, editor actions and code snippets to improve its AI features and train its models.
Privacy Mode ON (any plan)No trainingZero data retention enabled with providers; none of your code is ever trained on by Cursor or any third party.
Business / TeamsNo trainingPrivacy Mode is enabled by default and can be enforced org-wide by admins, so code is neither stored for training nor used by providers.
Get notified when this changes
We track Cursor's data-training and retention policy. Leave your email and we'll send one note if it changes.
Frequently asked questions
Does Cursor train its AI models on my data?
It depends — Cursor trains on consumer/free-tier data by default but excludes business, enterprise and API tiers. Cursor's Privacy Mode determines training: with Privacy Mode on, none of your code is ever trained on by Cursor or third parties and ZDR is enabled with providers; with Privacy Mode off, Cursor may store and train on your codebase data. Privacy Mode is forced on for teams/Business.
Can I opt out of Cursor training on my data?
Enable Privacy Mode in settings to stop all training and trigger zero-data retention with model providers. Privacy Mode is enabled by default for team members and can be enforced org-wide by Business admins; individual Free/Pro users must opt in.
Does Cursor offer zero data retention (ZDR) or a DPA?
Turning on Privacy Mode enables zero data retention with model providers; Cursor may still store some code data to power features but never trains on it. Business plan enforces Privacy Mode org-wide. Without Privacy Mode, providers like OpenAI/Anthropic may retain prompts up to ~30 days for trust & safety.
Is Cursor safe to use with confidential or proprietary data?
It depends on your plan tier. Free / Pro (Privacy Mode OFF): Without Privacy Mode, Cursor may use and store codebase data, prompts, editor actions and code snippets to improve its AI features and train its models. Privacy Mode ON (any plan): Zero data retention enabled with providers; none of your code is ever trained on by Cursor or any third party. Business / Teams: Privacy Mode is enabled by default and can be enforced org-wide by admins, so code is neither stored for training nor used by providers. Always confirm current terms with Anysphere before sending confidential data — this is cited public information, not legal advice.
Sources
https://cursor.com/data-use
https://cursor.com/security
This page is cited public information, not legal or compliance advice. Whether Cursor trains on your data, and any zero-retention or DPA option, can depend on your specific plan, region and contract. Always confirm current terms with Anysphere before sending confidential or proprietary data.