Cursive

Privacy policy

Who we are

This policy explains how Cursive AI Ltd (“Cursive”, “we”, “us”) collects and uses personal data when you visit cursive.ai, apply for a job with us, or are in business contact with us. It does not cover data our customers share with us when they use our services; that is governed by our agreements with them.

We are a company registered in England and Wales (company number 16099785), with our registered office at 128 City Road, London EC1V 2NX. For the personal data described in this policy, Cursive is the data controller. If you have a question about this policy or about your data, contact us at [email protected].

Personal data we collect

Website visitors

We do not use cookies, analytics or tracking on cursive.ai. Our hosting provider, Cloudflare, processes technical data such as your IP address in order to deliver the site and protect it from attacks. We rely on our legitimate interest in running a secure website.

Job applicants

When you apply through our careers pages we collect your name, email address, phone number, the links you share (such as LinkedIn or GitHub), your CV and any cover note. If we interview you, we also keep what you tell us and our interview notes. We use this to assess your application and contact you about it, as a step you have asked us to take before a possible employment contract, and in our legitimate interest in hiring.

Business contacts

For prospects, customers and partners we collect your name, work email, job title and company, which you give us or we find in public professional sources such as LinkedIn or your company website, together with the content of our emails and meetings. We use this to contact you about our services and manage our business relationship, based on our contract with you or our legitimate interest in running and growing our business. You can ask us to stop contacting you at any time.

We may also use personal data where we need to comply with a legal obligation, or to establish, exercise or defend legal claims.

Who we share it with

We share personal data only with service providers that help us run our business, and only as far as they need it to provide their service. They act on our instructions under written agreements. They include:

  • Cloudflare, which hosts our website and stores the CVs submitted through it;
  • email, document and communication tools, such as Google Workspace (where we keep application details in a spreadsheet) and Slack;
  • security and compliance tooling, such as Vanta;
  • Resend, which sends the emails confirming and forwarding job applications.

We may also share personal data with professional advisers, with authorities where the law requires it, or with a buyer or successor if our business is sold or reorganised.

International transfers

Some of our service providers process data outside the UK, including in the European Economic Area and the United States. When we transfer personal data outside the UK, we make sure it is protected, for example by relying on UK adequacy regulations or by using the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

How long we keep it

  • Job applications: for 12 months after we receive your application, unless you agree that we may keep your details for future roles.
  • Business contact data: for as long as we have a business relationship with you, or until you ask us to stop contacting you, and then for up to 6 years to meet our legal, tax and accounting obligations.

How we protect it

We use technical and organisational measures to protect personal data, including encryption, access controls limited to people who need access, and security monitoring. We are working towards SOC 2 and ISO 27001.

Your rights

Under UK data protection law, and the GDPR where it applies to you, you have the right to ask us for a copy of your personal data, and to ask us to correct it, delete it, restrict how we use it, or transfer it to you or someone else. You can object to our use of your data where we rely on legitimate interests, and you can withdraw consent at any time where we rely on it.

To exercise any of these rights, email [email protected]. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk), or to the data protection authority where you live. We would appreciate the chance to resolve your concern first.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page. This version was last updated on 5 November 2026.