I checked out the entire site and there still seems to be some details missing whether the policies comply with GDPR fully. Also about the zero retention policy. Is the data not stored at any level ? How safe is it to use at your work ?
Hi @BhaveshY
Please take a look at the information on these pages.
Hi, I have read the docs but the GDPR part is still unclear for me and is it safe to use at Work ?
Asked GPT 4o about the GDPR compliance of the Cursor’s Security and Privacy policy docs:
Conclusion: Mostly GDPR Compliant but Needs Improvement
• GDPR compliance: Cursor is mostly compliant but needs specific improvements:
• Ensure explicit, informed consent is obtained for processing telemetry and usage data (especially when Privacy Mode is off).
• Clarify the retention period for different types of data (including telemetry and usage data) and ensure all unnecessary data is deleted after a defined period.
• Anonymize community posts after account deletion or give users the option to delete posts.
• Provide more transparency about subprocessors and the legal bases for sharing user data with them.
• Improve the cookie consent mechanism to ensure explicit opt-in for non-essential cookies before they are set.
• Include a data breach notification process to inform users within 72 hours if their personal data is compromised.
Exactly, the problem. Still doesn’t provide clarity on whether it’s safe to use at work.