“If you're on a paid plan, you can opt out at any time on the Data Controls settings page. After you opt out, your data will not be used for training and Zero Data Retention will be enabled with our model providers.”
This analysis describes what Windsurf's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause establishes that the default model training data use is reversible for paid plan users, and that opting out triggers both a training exclusion and a Zero Data Retention arrangement with model providers.
Interpretive note: The Zero Data Retention consequence is a secondary independent legal effect recorded in omitted_material; it was included in the canonical claim because it is directly triggered by the opt-out action and is not separable from the primary proposition without material loss of accuracy.
The updated terms establish a default permission for Windsurf to use customer data for model training to improve services. Previously, the company required explicit opt-in before any training use. Paid plan users can now opt out at any time through the Data Controls settings page, after which their data will not be used for training and Zero Data Retention will be enabled with model providers. Enterprise customers must provide express prior written consent before any training use occurs. Teams plan users cannot opt out individually; only administrators can exercise this right.
View change record →Paid plan readers may stop their data from being used for model training at any time by opting out in Data Controls, which also activates Zero Data Retention with Windsurf's model providers.
How other platforms handle this
You can opt out of third parties collecting your Personal Information for targeted advertising purposes in the United States by visiting the National Advertising Initiative's (NAI) opt-out page...
Covered individuals are able to exercise certain choices under the EU-U.S. DPF, UK DPF Extension, and the Swiss-U.S. DPF regarding how some of their personal information is used and shared, and may access, correct, or delete certain personal information...
You may exercise the abovementioned rights free of charge by contacting us at the contact details in the "Contact Information" section of this Policy.
"If you're on a paid plan, you can opt out at any time on the Data Controls settings page. After you opt out, your data will not be used for training and Zero Data Retention will be enabled with our model providers.Excerpt from Windsurf's Security at Cognition
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This clause establishes that the default model training data use is reversible for paid plan users, and that opting out triggers both a training exclusion and a Zero Data Retention arrangement with model providers.
Paid plan readers may stop their data from being used for model training at any time by opting out in Data Controls, which also activates Zero Data Retention with Windsurf's model providers.
ConductAtlas has identified this type of provision across 277 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Windsurf.