Generated by a model from the captured document; not read by a person
HighNegative for users
Affected users
All usersPaid plan subscribersEnterprise customersTeams plan administrators
Windsurf changed its default data handling for model training. Previously, the company did not use customer data for model training unless users explicitly opted in. Under the updated terms, the company may use customer data for model training by default to improve services. Paid plan users can opt out at any time, and Enterprise customers require express written consent before any training use.
2 new obligations1 obligation expanded1 protection removed
Consumers: Your data will be used to train AI models unless you go to settings and turn it off.
Enterprise customers: Windsurf can now train on your data if you give written permission, whereas before they never could.
Consumers: The company no longer needs your permission before using your data for AI training by default.
Teams plan users: If you are on a Teams plan, your admin decides whether your data trains AI models; you cannot opt out individually.
Stay ahead of the changes
Track Windsurf and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Generated by a model from the captured document; not read by a person
The updated terms establish a default permission for Windsurf to use customer data for model training to improve services. Previously, the company required explicit opt-in before any training use. Paid plan users can now opt out at any time through the Data Controls settings page, after which their data will not be used for training and Zero Data Retention will be enabled with model providers. Enterprise customers must provide express prior written consent before any training use occurs. Teams plan users cannot opt out individually; only administrators can exercise this right.
What you can do
→ Paid plan users can opt out of data use for model training by visiting the Data Controls settings page.
→ After opting out, Zero Data Retention will be enabled with Windsurf's model providers.
→ Enterprise customers should confirm with Windsurf that express written consent has been obtained before any model training use occurs.
Key Clauses Affected
Generated by a model from the captured document; not read by a person
Default data use for model training
Reversed from opt-in to opt-out; paid users must actively disable training use in settings.
Enterprise consent requirement
Enterprise customers now require express prior written consent for any model training use, replacing prior blanket prohibition.
Teams plan administrator control
Only administrators can opt out; individual team members have no independent opt-out right.
Full clause-by-clause analysis available with Insight.
ⓘ
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Wording edits to this record that do not change what it claims. Changes to a claim are published as corrections.
2026-10-11 · Feed summary edited · summary regenerated by summarize_events
Previous text Shifts model training default from opt-in to opt-out for all users; paid plans can opt out on Data Controls page.
2026-10-11 · Impact summary edited · summary regenerated by summarize_events
Previous text The updated terms establish a default policy permitting Windsurf to use customer data for model training purposes to improve services. Previously, the company required explicit opt-in before any training use. Under the revised policy, data training occurs automatically for free and paid users unless they affirmatively opt out through the Data Controls settings page. Once disabled, the terms state your data will not be used for training and Zero Data Retention will be enabled with model providers. Enterprise customers operate under a different standard, requiring express prior written consent before any training use occurs.
2026-10-11 · Summary edited · summary regenerated by summarize_events
Previous text Windsurf changed its default data use policy for model training. Previously, the company stated it would not use customer data for model training unless users explicitly opted in. The updated policy states the company may use customer data for model training by default. Paid plan users can now opt out on the Data Controls settings page, and Enterprise customers require express written consent before any training use. Teams plan administrators control the opt-out setting for their organization.
2026-10-07 · Change line edited · change line rewritten to the 2026-10-07 template: no detection date, no sentence counts
Previous text Windsurf updated their Windsurf Security & Data Handling on July 06, 2026. Change detected: 3 sentence(s) added, 2 sentence(s) modified. Document contained 40 sentences after update.
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
For legal and compliance teams
Institutional Analysis
Generated by a model from the captured document; not read by a person
Assessment
This change reverses the default consent model for AI training data from opt-in to opt-out for most users, while imposing a higher consent bar (express written consent) for Enterprise customers. Organizations using Windsurf must evaluate …
🔒Full institutional analysis
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-003485.
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Stay ahead of the changes
Track Windsurf policy changes
Get alerted when this policy changes again, including what changed and why it matters.