Windsurf updated their Windsurf Security & Data Handling on June 02, 2026. Change detected: 170 sentence(s) removed, 26 sentence(s) modified. Document contained 26 sentences after update.
Impact assessment pending documentation review.
Institutional analysis pending. This change has been verified and documented.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
New provision explicitly addresses account deletion and data retention practices, clarifying that zero-data retention applies by default for enterprise/team plans.
New provision adds plan-dependent disclosure of subprocessors and introduces Google Cloud Platform as a subprocessor with conditional code data storage.
Removal of transparency about internal tool access (Slack, Google Workspace, Retool) and debugging data discussions suggests either consolidation into other provisions or de-emphasis of internal data handling disclosures.
Removal of explicit HIPAA compliance and BAA availability statements removes transparency about healthcare data handling and regulatory compliance options.
Removal of Oracle Cloud from subprocessor list and restructuring of subprocessor disclosure format; Oracle Cloud's code data access capability is no longer explicitly disclosed.
Provision was renamed from 'AI Model Use Independent of User Selection' to 'Model Use Independent of User Selection' with identical content.
Changed detection methodology from 'line-by-line fuzzy matching algorithm of hashes' to 'Jaccardian edit-distance' and added explicit statement about sanitizing training data.
Severity was downgraded from 'medium' to 'low' while content remained identical.
2 provisions unchanged.
Cross-platform context
See how other platforms handle similar provisions across the ConductAtlas archive.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff β MonitorWindsurf reordered the navigation links in their privacy policy footer on June 12, 2026. The 'Privacy Policy' link moved from β¦
The Windsurf Terms of Service navigation header was updated on June 5, 2026 to add a 'Try Devin' button alongside β¦
Windsurf updated its Terms of Service on June 2, 2026, making primarily formatting and editorial changes. The substantive terms remain β¦
ConductAtlas detected a major restructuring of Metaβs privacy policy that removed detailed consumer rights disclosures and relocated them tβ¦
ConductAtlas tracked the restructuring, new disclosures, and entity changes that followed the largest privacy fine in EU history.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can doβ¦
Get alerted when this policy changes again β including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.