Windsurf changed its default data handling for model training. Previously, the company did not use customer data for model training unless users explicitly opted in. Under the updated terms, the company may use customer data for model training by default to improve services. Paid plan users can opt out at any time, and Enterprise customers require express written consent before any training use.
Consumers: Your data will be used to train AI models unless you go to settings and turn it off.
Enterprise customers: Windsurf can now train on your data if you give written permission, whereas before they never could.
Consumers: The company no longer needs your permission before using your data for AI training by default.
Teams plan users: If you are on a Teams plan, your admin decides whether your data trains AI models; you cannot opt out individually.
The updated terms establish a default permission for Windsurf to use customer data for model training to improve services. Previously, the company required explicit opt-in before any training use. Paid plan users can now opt out at any time through the Data Controls settings page, after which their data will not be used for training and Zero Data Retention will be enabled with model providers. Enterprise customers must provide express prior written consent before any training use occurs. Teams plan users cannot opt out individually; only administrators can exercise this right.
→ Paid plan users can opt out of data use for model training by visiting the Data Controls settings page.
→ After opting out, Zero Data Retention will be enabled with Windsurf's model providers.
→ Enterprise customers should confirm with Windsurf that express written consent has been obtained before any model training use occurs.
Reversed from opt-in to opt-out; paid users must actively disable training use in settings.
Enterprise customers now require express prior written consent for any model training use, replacing prior blanket prohibition.
Only administrators can opt out; individual team members have no independent opt-out right.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Wording edits to this record that do not change what it claims. Changes to a claim are published as corrections.
This change reverses the default consent model for AI training data from opt-in to opt-out for most users, while imposing a higher consent bar (express written consent) for Enterprise customers. Organizations using Windsurf must evaluate …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-003485.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.