Privacy & what we store

Installation id, namespace, status, and job history (PR number, link, outcome).
If you connect one: your Cursor API key, encrypted with AES-256-GCM (random IV per record, installation-bound). We keep the last 4 characters to show you which key is connected.
Keys are never logged, decrypted only to launch an agent, and deleted on uninstall or when you click Remove.
We do not store your source code. PR titles and descriptions are sent to the model only to write the entry.