“If you're on a paid plan, you can opt out at any time on the Data Controls settings page. After you opt out, your data will not be used for training and Zero Data Retention will be enabled with our model providers.”
This analysis describes what Windsurf's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause establishes that the default model training data use is reversible for paid plan users, and that opting out triggers both a training exclusion and a Zero Data Retention arrangement with model providers.
Interpretive note: The Zero Data Retention consequence is a secondary independent legal effect recorded in omitted_material; it was included in the canonical claim because it is directly triggered by the opt-out action and is not separable from the primary proposition without material loss of accuracy.
The updated terms establish a default permission for Windsurf to use customer data for model training to improve services. Previously, the company required explicit opt-in before any training use. Paid plan users can now opt out at any time through the Data Controls settings page, after which their data will not be used for training and Zero Data Retention will be enabled with model providers. Enterprise customers must provide express prior written consent before any training use occurs. Teams plan users cannot opt out individually; only administrators can exercise this right.
View change record →Paid plan readers may stop their data from being used for model training at any time by opting out in Data Controls, which also activates Zero Data Retention with Windsurf's model providers.
How other platforms handle this
You can opt out of our use of cookies via our Cookie Preference Center.
Objection to Processing. You have the right to object to us processing your personal data, where the legal basis for processing that information is legitimate interest.
If you have opted-in for this kind of sharing of your Personal Information, then you may: (i) choose to opt-out of such sharing; and/or (ii) request certain information regarding our disclosure of your Personal Information to such non-affiliated third parties.
"If you're on a paid plan, you can opt out at any time on the Data Controls settings page. After you opt out, your data will not be used for training and Zero Data Retention will be enabled with our model providers.Excerpt from Windsurf's Security at Cognition
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This clause establishes that the default model training data use is reversible for paid plan users, and that opting out triggers both a training exclusion and a Zero Data Retention arrangement with model providers.
Paid plan readers may stop their data from being used for model training at any time by opting out in Data Controls, which also activates Zero Data Retention with Windsurf's model providers.
ConductAtlas has identified this type of provision across 277 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Windsurf.