Cursor procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | medium | “Anysphere processes your personal data for the purposes described in this Privacy Policy on servers located in various jurisdictions, including in the United States. While data protection laws vary by country, we apply the protections outlined in this policy to your personal data regardless of where it is processed, and we only transfer data in accordance with legally valid transfer mechanisms. For users in the European Economic Area, (“EEA”), when you access our Service, your personal data may be transferred to our United States servers to other countries outside the EEA and the UK. Where information is transferred outside the EEA or the UK, we require an adequate level of data protection.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Anysphere retains your personal data only for as long as necessary to operate the Service effectively and to support legitimate business needs such as legal compliance, safety, dispute resolution, and enforcement of our agreements. The appropriate retention period varies depending on the purpose for which the personal data was collected, its sensitivity, potential risks associated with its use or exposure, and any applicable legal requirements.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ When personal data is no longer needed, Anysphere and its service providers will follow procedures to delete, erase, de-identify, or anonymize it in compliance with applicable laws.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Deletion of personal data collected from you in connection with your use of the Service, subject to certain exceptions.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Your settings may also influence how long we keep certain types of data. For instance, some temporary interactions with the Service may not appear in your history and could be stored for a limited duration for purposes related to safety and system monitoring.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Service Providers and Business Partners: We may disclose personal data to third-party vendors and service providers who support our business operations and help us deliver and improve the Service. This includes third-party hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our and your instructions and applicable law.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We may disclose your personal data in the following circumstances:” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ To comply with legal obligations and protect the rights, safety, privacy, and property of users, Anysphere, or third parties.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 4.3. Payment Processing. To facilitate payment for the Service via bank account, credit card, or debit card, we use Stripe, Inc. and its affiliates (“ Stripe ”), a third-party payment processor. These payment processing services are provided by Stripe and are subject to the Stripe terms and conditions and other policies available at https://stripe.com/legal and Stripe’s Global Privacy Policy available at: https://stripe.com/privacy (collectively, the " Stripe Agreements "). By agreeing to these Terms, users that use the payment functions of the Service also agree to be bound by the Stripe Agreements, as the same may be modified by Stripe from time to time. You hereby authorize Stripe to store and continue billing your specified payment method even after such payment method has expired, to avoid interruptions in payment for your use of the Service. Please contact Stripe for more information. Anysphere assumes no liability or responsibility for any payments you make through the Service.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Legal Compliance and Protection of Rights: We may disclose personal data to government authorities or other third parties if we believe doing so is necessary to: (i) comply with applicable laws, regulations, or legal processes, (ii) respond to lawful requests or investigations, (iii) protect the safety, rights, or property of any person, (iv) prevent fraud, security incidents, or other unlawful activity, (v) enforce our Terms of Service or other legal rights, or (vi) protect Anysphere against legal liability.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ 6. Third-Party Services. The Service may include or incorporate optional third-party services, including without limitation extensions and plug-ins that you may install yourself (“ Third-Party Services ”). Anysphere will clearly indicate such content or features as Third-Party Services via prominent notices or descriptions in the Service. If you elect, in your sole discretion, to access or use a Third-Party Service, your access and use of the Third-Party Service is subject to the terms provided by that Third-Party Service, and you remain responsible for complying with those terms. Anysphere does not make any representations or warranties with respect to Third-Party Services.” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ With Your Consent: We may disclose personal data when you give us permission to do so, including through features of the Service that are designed to share information.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Third-Party Services and Integrations: The Service may include integrations with or links to third-party websites, applications, or services. If you choose to interact with these third parties, your personal data may be disclosed to them directly and governed by their own terms and privacy policies. Our linking or integrating with a third party does not imply endorsement or affiliation.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Subprocessors: For commercial uses of the Service where Anysphere acts as a data processor, you can review the third parties we engage on at trust.cursor.com/subprocessors .” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Affiliates: We may share personal data with affiliates, meaning an entity that controls, is controlled by, or is under common control with, us. They may use personal data in a manner consistent with this Privacy Policy.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Other Users and Third Parties You Share Information With: Certain features of the Service may allow you to share Inputs, Suggestions, or other content with other users or third-party applications. Any information you voluntarily share with those parties is subject to their respective terms and privacy policies.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Business Transfers: In the event of a merger, acquisition, restructuring, bankruptcy, or other corporate transaction, personal data may be disclosed to counterparties and advisers as part of due diligence or transferred as part of the transaction.” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ 4.4. Subscription Service. The Service may include certain subscription-based plans with automatically recurring payments for periodic charges (“ Subscription Service ”). The “ Subscription Billing Date ” is the date when you purchase your first subscription to the Service. The Subscription Service will begin on the Subscription Billing Date and continue for the subscription period that you select on your account (such period, the “ Initial Subscription Period ”), and will automatically renew for successive periods of the same duration as the Initial Subscription Period (the Initial Subscription Period and each such renewal period, each a “ Subscription Period ”) unless you cancel the Subscription Service or we terminate it. If you activate a Subscription Service, then you authorize Anysphere or its third-party payment processors to periodically charge, on a going-forward basis and until cancellation of the Subscription Service, all accrued sums on or before the payment due date. Information on the recurring fee charged by Anysphere for access to the Subscription Service during each Subscription Period (“ Subscription Fee ”), is available on our Pricing Page , or otherwise described in the Service. Your account will be charged automatically on the Subscription Billing Date and thereafter on the renewal date of your Subscription Service for all applicable fees and taxes for the next Subscription Period. You must cancel your Subscription Service at least 24 hours before it renews in order to avoid billing of the next periodic Subscription Fee to your account. ” | Captured 2026-08-14Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ 4.5. Add-On and Usage-Based Features . You may purchase additional products, services or features that are not individually essential for the functioning of the Service, but that Anysphere makes available to its users for enhanced capabilities on a supplemental basis, including usage-based pricing features that are described in the Service (" Add-Ons "). Add-Ons are deemed part of the Service and governed by these Terms. Fees for Add-Ons include our model-based pricing features, available here , or as otherwise described in the Service.” | Captured 2026-08-14Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ 4.2. Pricing. Anysphere reserves the right to determine pricing for the Service. Anysphere will make reasonable efforts to keep pricing information published on the Service up to date. We encourage you to check our pricing page periodically for current pricing information. Anysphere may change the fees for any feature of the Service, including additional fees or charges, if Anysphere gives you advance notice of changes before they apply through the Service user interface, a pop-up notice, email, or through other reasonable means. Your continued use of the Service after the price change becomes effective constitutes your agreement to pay the changed amount. You will be responsible for all taxes associated with the Service, other than taxes based on Anysphere’s net income. Anysphere, at its sole discretion, may make promotional offers with different features and different pricing to any of Anysphere’s customers. These promotional offers, unless made to you, will not apply to your offer or these Terms.” | Captured 2026-08-14Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ 4.1. Paid Services. Certain features of the Service may require you to pay fees. Before you pay any fees, you will have an opportunity to review and accept the fees that you will be charged. Unless otherwise specifically provided for in these Terms, all fees are in U.S. Dollars and are non-refundable, except as required by law. The pricing and payment terms in this Section 4 are subject to any pricing and payment terms set forth in an Order Form.” | Captured 2026-08-14Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ 1.6. Beta Services . From time to time, Anysphere may make Beta Services available to you. Beta Services shall be clearly designated as beta, pilot, limited release, non-production, early access, evaluation or a similar description. You may choose to use or not use such Beta Services in your sole discretion. Beta Services are intended for evaluation purposes and not for production use, are not fully supported, and may be subject to additional terms that may be presented to you. Beta Services are provided on an "as-is" and "as available" basis without any warranty, support, maintenance, or storage of any kind. Anysphere may discontinue Beta Services at any time in its sole discretion and may never make them generally available. ANYSPHERE SHALL HAVE NO LIABILITY WHATSOEVER ARISING OUT OF OR IN CONNECTION WITH BETA SERVICES - USE AT YOUR OWN RISK.” | Captured 2026-08-14Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ 4.6. Delinquent Accounts. Anysphere may suspend or terminate access to the Service, including fee-based portions of the Service, for any account for which any amount is due but unpaid. In addition to the amount due for the Service, a delinquent account will be charged with fees or charges that are incidental to any chargeback or collection of any unpaid amount, including collection fees. If your payment method is no longer valid at the time a renewal Subscription Fee is due, then Anysphere reserves the right to delete your account and any information associated with your account without any liability to you.” | Captured 2026-08-14Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “Anysphere or its third-party payment processor will bill the periodic Subscription Fee to the payment method associated with your account or that you otherwise provide to us. You may cancel the Subscription Service by using the cancellation functionality made available in your billing menu or by contacting us at hi@cursor.com . YOUR CANCELLATION MUST BE RECEIVED BEFORE THE RENEWAL DATE IN ORDER TO AVOID CHARGE FOR THE NEXT SUBSCRIPTION PERIOD.” | Captured 2026-08-14Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.