This analysis describes what Windsurf's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Your actual coding questions, code snippets, and AI conversations may become training data, potentially including sensitive or proprietary code you did not intend to share beyond the immediate session.
Interpretive note: The policy does not specify whether this training use is opt-in, opt-out, or applied universally, and does not clarify whether anonymization is applied before prompts enter training pipelines, creating ambiguity about the practical scope of this use.
The policy states that prompts submitted to Windsurf and the AI-generated outputs may be collected and used to train and improve the company's AI and machine learning models, meaning code, queries, or other text entered into the tool may be retained and used beyond the immediate session. If you use Windsurf through an employer or enterprise account, the policy states that account administrators may be able to access your prompts and output information and control your account. You can request review, update, or deletion of your personal data by contacting privacy@windsurf.com.
How other platforms handle this
Writer does not use Customer Data to train its AI models without explicit customer permission. Customer Data means the data, content, and information that customers and their end users submit to or through the Services.
We may use the content you provide to us, including prompts and generated images, to train and improve our AI models and services.
Data publicly available on the Internet. Our artificial intelligence models are trained on data that is publicly available on the Internet by third parties, which may contain personal data, even if we use good practices to filter out such personal data. [...] Training Datasets. In some cases, we acc...
Monitoring
Windsurf has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"To train, develop, and improve the artificial intelligence, machine learning, and models that we use to support our Services. We may use your Log and Usage Information and Prompts and Outputs Information for this purpose.— Excerpt from Windsurf's Windsurf Privacy Policy
How 10 AI platforms describe the use of user data for model training, improvement, and development, based on archived governance provisions.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Your actual coding questions, code snippets, and AI conversations may become training data, potentially including sensitive or proprietary code you did not intend to share beyond the immediate session.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Windsurf.