I understand that local comversations/agent runs are only stored locally. Notably meaning that any manually input data or tool call results which might contain my customer’s sensitive privacy data, is not stored in your cloud infra. It is processed when the agent runs, but
However, what about cloud agent or automation runs ? I only know that I can « archive » sessions, but don’t even see a way of deleting any session. Let alone define an entreprise policy on default retention periods. We have privacy mode enabled, of course. But there doesn’t seem to be information on that either way.
So: how long are agent sessions stored for, and how can I even delete them ? For customer privacy reasons, we’d like to implement in our entreprise some short retention periods for any session that might contain customer sensitive data. And to make cursor much more useful, we’d like to provide it with tools to access most of our entreprise data, including possible prod/customer data. We don’t see a need for long session retention periods, for example deleting everything after a month or even two weeks seems like a good tradeoff if it enables us to give much wider accesses to enable the agent to do much more.
But to do this, we need more information on how we can manage the one point that seems unclear from the privacy policy, trust center or Data Processing Agreement: what about agent sessions data themselves ? How long are they kept ? How can we delete them ?
Thanks !