“You agree not to process any medical information or sensitive personal data such as social security numbers, birth dates, passport information, bank account, and credit card numbers in using the Services.”
This analysis describes what Windsurf's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The prohibition shifts all risk of processing such data to the customer and establishes a usage boundary that, if violated, could trigger customer indemnification or termination obligations.
Interpretive note: The clause uses 'such as', indicating the listed data types are examples rather than an exhaustive list; the full scope of prohibited sensitive personal data may be broader than what is enumerated.
You are prohibited from inputting or processing medical information or sensitive personal data of the types listed when using Windsurf's Services.
How other platforms handle this
Apps may only display DUI checkpoints that are published by law enforcement agencies, and should never encourage drunk driving or other reckless behavior such as excessive speed.
Pesticides requiring application by a certified professional
You are purchasing the Product and Supplies for your own use. You will not sell, repackage, reformulate, trade, barter, export, or distribute for sale the Product or Supplies.
"You agree not to process any medical information or sensitive personal data such as social security numbers, birth dates, passport information, bank account, and credit card numbers in using the Services.Excerpt from Windsurf's Cognition Platform Terms of Service
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The prohibition shifts all risk of processing such data to the customer and establishes a usage boundary that, if violated, could trigger customer indemnification or termination obligations.
You are prohibited from inputting or processing medical information or sensitive personal data of the types listed when using Windsurf's Services.
ConductAtlas has identified this type of provision across 238 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Windsurf.