Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document establishes the terms of service for Windsurf, an AI coding assistant provided by Exafunction, Inc., covering individual and Pro user accounts and the Autocomplete and Chat features. The agreement authorizes Windsurf to use Chat User Content to train generative and discriminative AI models by default, with personally identifiable information subject to anonymization procedures. Users may modify this authorization through the User Settings pane in their profile, which disables Chat Services when the data use permission is withdrawn.
This document governs use of the Windsurf (Exafunction, Inc.) Individual and Pro tier coding assistant platform, establishing the contractual basis for access to AI-powered code generation tools including Autocomplete, Chat/Cascade, and related features. The agreement states that users grant Exafunction a perpetual, irrevocable, royalty-free license to exploit user Feedback in any manner; authorizes use of Chat User Content to train generative and discriminative machine learning models (with opt-out available, but opt-out disables Chat Services access); and permits use of Autocomplete User Content for discriminative model training with opt-out available without service loss. Section 20 establishes mandatory binding individual arbitration with class action and jury trial waiver, and Section 10.2 creates an operationally distinct trade-off where opting out of Chat data training disables Chat Service access entirely, a condition less commonly observed than simple opt-out mechanisms that preserve full functionality. The agreement engages U.S. federal frameworks including the FTC Act (consumer protection, unfair or deceptive practices), COPPA (minimum age set at 13), and DMCA (Section 512 safe harbor procedures); EU and California residents should evaluate applicability of GDPR and CCPA respectively, as the document does not explicitly address those frameworks, creating potential compliance gaps depending on jurisdiction and enforcement context.
Institutional analysis available with Compliance
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.
Start Compliance free trial2 important changes detected
4 versions captured · Last updated: June 2026
Monitoring
Windsurf has updated this document before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
Compliance Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Compliance free trialCross-platform context
See how other platforms handle Account Deletion on Payment Lapse Without Liability and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.