If Windsurf is sold, merged, or acquired, all of your personal data — including your AI prompts, code, and account information — can be transferred to the acquiring company without your consent.
All personal data Windsurf holds about you, including your AI coding prompts and outputs, can be transferred to a new owner if Windsurf is sold or acquired, with no opt-out right provided in this policy.
Cross-platform context
See how other platforms handle Business Transfer Disclosure and similar clauses.
Compare across platforms →A merger or acquisition could result in your data being transferred to a company with completely different privacy practices, and this policy gives you no right to prevent or opt out of that transfer.
(1) REGULATORY FRAMEWORK: GDPR Article 6 requires a valid legal basis for data transfers in M&A transactions; a change in data controller typically triggers fresh notice obligations under Article 13/14 and may require new consent where original processing was consent-based. FTC Act Section 5 and CCPA/CPRA §1798.100 require that data use remain consistent with the purposes for which it was collected. The FTC has challenged M&A data transfers that contradict prior privacy commitments (In re Toysmart.com, 2000; FTC v. Cambridge Analytica settlement, 2019). (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.