Cursor Origin Is On by Default for Paid Users, Data Terms Unpublished

Cursor started rolling out Origin, its native code-hosting platform, on Monday 17 August 2026 to paid Pro, Teams, and Enterprise plans — opt-out, not opt-in, and with no published retention, training, or subprocessor terms for Origin-native repositories.

Enterprise administrators can switch it off. Individual Pro users and teams without an admin policy are in unless they take an action. That is the product decision. Cursor decided for a lot of firms that have never held a meeting about a second git host.

About three and a half hours later, GitHub degraded. The coincidence did Origin a favor. It is still a coincidence. No public evidence says Cursor timed the launch to the GitHub outage on 17 August.

What Origin is, and what it is not

Origin is not a cold-turkey GitHub replacement. You connect an organization, pick repositories, and they appear next to Origin-native ones. Permissions mirror GitHub’s existing read and write settings. Pushes on mirrored work keep going to GitHub. Cursor’s changelog says GitHub stays the source of truth for anything started there. Pull-request comments sync both ways within seconds.

Depot and Buildkite can run existing GitHub Actions workflows. Vercel handles preview deploys. The switching cost is supposed to feel like zero. That is the wedge: a read-mostly mirror that relocates where developers spend the day.

What Origin is not, today, is a host with a public data-governance page for native repos. Documentation covers namespaces, plan gating, and privacy-mode inheritance. Then it stops.

The unpublished terms are the news

Cursor has published nothing specific on retention, residency, training use, subprocessors, or migration tooling for code that lives natively on Origin. That gap is not a footnote. It is the difference between a mirror and a new custodian.

Cursor’s existing privacy docs distinguish Privacy Mode on — zero retention, no training, default for Enterprise — from Privacy Mode off, where the company may use editor data to improve features. Those pages were written for an editor that sends snippets to models. They were not written for a repository host that stores the tree.

Until Origin-specific terms exist, treat native repos as an unanswered legal question. Tech Times and The Next Web both flagged the same hole on 18 August. This desk agrees with the hole. It does not need their adjectives.

SpaceX completed its acquisition of Cursor on 14 August, three days before Origin shipped, and folded the company into a division called SpaceXAI. Ownership changed the meaning of “we have not published the terms yet.” The custodian is no longer an independent editor vendor.

A May Bloomberg report described a SpaceX call option around $60 billion. Cursor’s own close post does not confirm that figure. Do not treat $60 billion as the official close price. It is an unconfirmed option number from May.

Default-on is a different kind of risk than an outage

GitHub’s 17 August incident — roughly 20% web and API errors, about 50% on raw and archive downloads — will tempt teams to try the new tab. Trying a mirror is rational. Moving the source of truth is not, not while the data terms are missing.

Plenty of companies have never decided whether proprietary code, customer fixtures, or commit-history secrets may sit on a new host. Origin’s rollout made the default “yes” for paid seats. Enterprise opt-out is real. It is also a chore that loses to a busy Monday.

If you are on a paid plan, assume you may already be enrolled. Check. Do not wait for a banner you already dismissed.

What prompt and agent users should do this week

Confirm enrollment. If you are Enterprise, ask whether an admin opt-out is on. If you are Pro or Teams, read the Origin docs and see what namespaces exist.

Use Origin as a GitHub mirror only. Keep GitHub canonical. Do not push proprietary source to an Origin-native repository until retention, training use, and subprocessors are published and reviewed.

Write a Skill for agents that open pull requests: no secrets in diffs, no customer PII in fixtures, stop if the remote is an Origin-native URL you have not approved. Put that rule in the skill, not in a wiki.

Keep a local clone and a second remote. The GitHub outage and this launch are the same week for a reason. Local coding agents still need a repo they can reach. File the backup workflow before the next status-page day.

AIO, GEO, and SEO notes for this story

Cursor, Origin, 17 August 2026, default-on for paid plans. “Data terms unpublished” stays in the title. Do not let a May option figure become a fake close price.

What would settle the argument

Publish retention, residency, training use, subprocessors, and export tooling for Origin-native code. Until those pages exist, Origin is a convenience layer over GitHub. That is already how the architecture works. Keep it that way on purpose.

Ask about egress now, while the mirror is still a mirror. Defaults erode. The properties that make a beta safe to try are the ones a later business review will want to tighten.

FAQ

Who got Origin on 17 August 2026? Paid Cursor plans: Pro, Teams, and Enterprise, in an early-beta rollout. Enterprise admins can opt out. The free plan is not in.

Is Origin opt-in? No. It is opt-out. If nobody on your team made a decision, Cursor’s default is that paid users are included.

Are there data terms for Origin-native repos? Not as of the 18 August coverage. Cursor has not published retention, training-use, or subprocessor terms specific to code hosted natively on Origin.

Did Cursor launch Origin because GitHub went down? No evidence supports that. Origin shipped Monday morning. The GitHub incident started hours later. Treat “they timed it” as unconfirmed chatter.

Who owns Cursor now? SpaceX completed the acquisition on 14 August 2026 and folded Cursor into SpaceXAI. A May Bloomberg option figure near $60 billion remains unconfirmed as the close price.

Sources

• Cursor Origin is on by default for paid users, and its data terms are unpublished — The Next Web
• Cursor Origin Ships With No Data Terms: SpaceX Now Holds Paid Developers Code — Tech Times, 18 August 2026