Cursor Data Transfer & Retention Practices

If a user has indexing enabled and and doesn’t have privacy mode enabled, can you confirm what data Cursor collects from their users? Is it just embeddings and meta data?

Also, how long do you retain that information?

I know indexing can be disabled and privacy mode can be enabled, but you can’t always rely upon users to enable those configurations.