Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
Windsurf's privacy policy explains what the company does with your information when you use its Services. If you signed up with a work email, your employer may be told you have an account, and enterprise account administrators can access and control your account content. Your content is also used to train Windsurf's AI models, and your personal information is shared with third-party service providers that help run the platform.
This privacy policy establishes Windsurf's data collection, sharing, retention, and use practices governing users of its Services. Windsurf may share account information with an employer or organization when a corporate email address is used at registration, and administrators of enterprise or business accounts hold access and control rights over user accounts and User Content. Windsurf uses User Content to train, fine-tune, and improve the AI models powering its Services, and shares personal information with third-party service providers as well as in the event of corporate transactions such as acquisitions or mergers. Security measures are characterized as commercially reasonable and not an absolute guarantee, with residual risk expressly allocated to users.
If you use a work email to sign up, Windsurf may share the fact that you have an account and certain account details with your employer without asking for your consent at that moment. On enterprise or business accounts, your employer's administrators can access your User Content and control your account. Your submitted content contributes to the training and improvement of Windsurf's AI models. Windsurf does not sell or share personal information with third parties for targeted advertising. Voice audio is deleted after transcription unless Windsurf states otherwise. Windsurf instructs users under 18 to stop accessing its Services.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
6 important changes detected
9 versions captured · Last updated: August 2026
Windsurf updated its privacy policy footer to add a link to a 'Service Level Agreement' document between the Data Processing Addendum and Privacy Policy. This change adds a document reference …
View change record →Windsurf's privacy policy was updated on June 21, 2026 to change the company website URL from www.cognition.ai to cognition.com in the opening paragraph. This is a technical correction reflecting the …
View change record →Windsurf reordered the navigation links in their privacy policy footer on June 12, 2026. The 'Privacy Policy' link moved from its original position to appear after the 'Data Processing Addendum' …
View change record →Windsurf removed the 'Windsurf' navigation link from the header menu in their privacy policy document on June 2, 2026. The updated privacy policy header now omits the redundant Windsurf link …
View change record →Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Windsurf has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Employer Account Sharing for Corporate Email Users and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.