Windsurf collects data about how you use the platform — not your code itself, but behavioral and performance data — and owns it outright, including any new products or insights derived from it.
Usage behavioral data — including how, when, and in what patterns you use Windsurf — is collected, owned by Exafunction, and used to develop new commercial products, with users having no claim to the value generated from their collective behavioral data.
Cross-platform context
See how other platforms handle Broad Usage Data Ownership by Exafunction and similar clauses.
Compare across platforms →Windsurf claims full intellectual property ownership over all derived analytics and any products built using usage data, meaning insights from your collective behavior contribute directly to commercial products you have no share in.
(1) REGULATORY FRAMEWORK: Usage Data, even when excluded from direct personal data definitions, may constitute personal data under GDPR Art. 4(1) if it is reasonably linkable to an identified or identifiable natural person (e.g., through account identifiers). CCPA §1798.140 defines 'personal information' broadly to include inferences drawn from usage patterns. The IP ownership claim over 'know-how and analytical results' may implicate trade secret law (Defend Trade Secrets Act, 18 U.S.C. § 1836) if usage data includes information derived from user proprietary code inputs. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.