# Question about Privacy Policy

**URL:** <https://forum.cursor.com/t/question-about-privacy-policy/18506>\
**Category:** Help\
**Created:** [September 24, 2024, 11:16am UTC](https://forum.cursor.com/t/question-about-privacy-policy/18506 "2024-09-24T11:16:33Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![shixiao11](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/shixiao11/32/6073_2.png) [@shixiao11](https://forum.cursor.com/u/shixiao11)\
**Post date:** [September 24, 2024, 11:16am UTC](https://forum.cursor.com/t/question-about-privacy-policy/18506/1 "2024-09-24T11:16:33Z")

</div>

Hello Cursor team,  
My team are trying to use cursor as our IDE to daily development.  
But we are curious about the policy of " \*Even if you use your API key, your requests will still go through our backend! That’s where we do our final prompt building."  
do you mean there is still some code or data will go to your backend side. I understand Cursor need user’s data to provide quality answer.  
But could you please explain how do you guarantee the security ? If I use the “privacy mode”, is there any user’s data will be store on your sever side? are you going to use dat to do the training?  
Because those questions was raised by the security department, we need to answer their concern to get approvement

thank you

---

<div class="post-metadata">

**Author:** ![litecode](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/litecode/32/2966_2.png) [@litecode](https://forum.cursor.com/u/litecode)\
**Post date:** [September 24, 2024, 11:21am UTC](https://forum.cursor.com/t/question-about-privacy-policy/18506/2 "2024-09-24T11:21:13Z")

</div>

Hi @shixiao11 ,

Have you seen these resources:

[https://docs.cursor.com/context/codebase-indexing](https://docs.cursor.com/context/codebase-indexing)

[https://docs.cursor.com/context/ignore-files](https://docs.cursor.com/context/ignore-files)

[https://docs.cursor.com/privacy/privacy](https://docs.cursor.com/privacy/privacy)

[https://www.cursor.com/privacy](https://www.cursor.com/privacy)

[https://www.cursor.com/security](https://www.cursor.com/security)

And a related post:

> [@Codebase Indexing](https://forum.cursor.com/t/codebase-indexing/36/11):
>
> Like this idea too. Right now, we have a local heuristic scrubber that blocks any secrets/key from being sent of your computer (both for indexing and chat and command + K). But would be good to allow for more control here.

You will probably need to read through these resources to get a better understanding of how the different security/privacy related components work together.

If you have a specific question that is not covered in these resources, please post back with more details about what you would like to know.

---

<div class="post-metadata">

**Author:** ![shixiao11](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/shixiao11/32/6073_2.png) [@shixiao11](https://forum.cursor.com/u/shixiao11)\
**Post date:** [September 24, 2024, 2:55pm UTC](https://forum.cursor.com/t/question-about-privacy-policy/18506/3 "2024-09-24T14:55:47Z")

</div>

thanks, I will take a look to understand better

---

<div class="post-metadata">

**Author:** ![system](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/system/32/99069_2.png) [@system](https://forum.cursor.com/u/system)\
**Post date:** [June 18, 2026, 10:16am UTC](https://forum.cursor.com/t/question-about-privacy-policy/18506/4 "2026-06-18T10:16:47Z")

</div>

Closed on June 18, 2026, 10:16am UTC