Provision record
Windsurf · Security at Cognition · View original document ↗

Feedback and interaction data retained at Cognition's discretion

High severity High confidence Common · 268 of 352 platforms

Key Facts · in the document’s own words

How long does Windsurf retain Feedback Data and User Interaction Data?
“Any Feedback Data and User Interaction Data are retained as long as needed and as determined by Cognition.”
Version CA-V-007341, captured Oct. 4, 2026 · live source ↗
Our reading, not the document’s words
Windsurf retains Feedback Data and User Interaction Data for as long as needed, as determined by Windsurf.
Stay ahead of the changes
Track Windsurf and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Windsurf's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This clause establishes that Windsurf holds unilateral discretion over the retention period for Feedback Data and User Interaction Data, with no defined maximum retention limit.

Recent Activity

This document changed recently

High Jul 6, 2026

The updated terms establish a default permission for Windsurf to use customer data for model training to improve services. Previously, the company required explicit opt-in before any training use. Paid plan users can now opt out at any time through the Data Controls settings page, after which their data will not be used for training and Zero Data Retention will be enabled with model providers. Enterprise customers must provide express prior written consent before any training use occurs. Teams plan users cannot opt out individually; only administrators can exercise this right.

View change record →

Consumer impact (what this means for users)

Readers have no specified endpoint for Windsurf's retention of their Feedback Data and User Interaction Data; the duration is determined solely by Windsurf.

How other platforms handle this

Uber Medium

if you are involved in an incident while using Uber that may lead to litigation or an insurance claim, we will retain the data that is potentially relevant to such litigation or insurance claim.

Stripe Medium

This biometric data is retained for one year.

Robinhood Medium

underlying trade data is retained by the originating Robinhood financial entity as required by law

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Any Feedback Data and User Interaction Data are retained as long as needed and as determined by Cognition.

Excerpt from Windsurf's Security at Cognition

Applicable regulations

CCPA/CPRA
California, USA
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN

Provision details

Document information
Document
Security at Cognition
Entity
Windsurf
Tracking information
First captured by ConductAtlas
May 11, 2026
Text quoted from version
CA-V-007341, captured Oct. 4, 2026
Record ID
CA-P-061029
Document ID
CA-D-000783
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-007341)
05edda171cc1c200c61b6089b90d27db45537319bc10f5fd8fdfa1a5caaa27fe
Analysis generated
July 9, 2026 07:22 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-007341, captured Oct. 4, 2026 (checked Oct. 5, 2026)
Citation Record
Entity: Windsurf
Document: Security at Cognition
Record ID: CA-P-061029
Version: CA-V-007341
Captured: 2026-10-04 00:59:06 UTC
SHA-256: 05edda171cc1c200…
URL: https://conductatlas.com/platform/windsurf/security-at-cognition/provision/CA-P-061029/feedback-and-interaction-data-retained-at-cognitions-discretion/
Accessed: Oct. 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Windsurf's Feedback and interaction data retained at Cognition's discretion clause do?

This clause establishes that Windsurf holds unilateral discretion over the retention period for Feedback Data and User Interaction Data, with no defined maximum retention limit.

How does this clause affect you?

Readers have no specified endpoint for Windsurf's retention of their Feedback Data and User Interaction Data; the duration is determined solely by Windsurf.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 268 platforms. See the full comparison.

Is ConductAtlas affiliated with Windsurf?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Windsurf.