Is Windsurf safe with your data?
Windsurf
Cognition AI, Inc.
Partial disclosure · high confidence
Windsurf earns a C (57/100) because it discloses its data practices only in part.
#68
of 211 apps ranked
57
score · Coding avg 47
+10
vs category average
Windsurf discloses a workable data framework with a defined Zero Data Retention mode and a clear no-sale commitment, but most of its strongest protections are gated behind paid tiers or hedged with discretionary language that weakens them for the default free user.
What Windsurf's privacy policy and terms of service say about your data
Training opt-out is paid-tier only
Cognition trains on Customer Data by default and the Opt-Out is available only to paid subscribers, with Teams requiring an administrator to exercise it, so free-tier users get no training choice at all.
Zero Data Retention is conditional, not default
ZDR is precisely defined as data not saved to disk and deleted on Output generation, but it is enabled only as a consequence of a paid-tier Opt-Out, so the retention ladder cannot be credited at the top value.
Privacy rights are hedged with absolute discretion
Every access, deletion, portability and correction right is framed as "you may have the right," and the policy states that where a right is not provided by local law, "we have absolute discretion in providing these rights.
Age gate contradicts itself across documents
The privacy policy says users must be at least 18 years old while the Platform Terms twice state "You must be at least 13 years old to use the Services," leaving the children's protection undefined in practice.
What the policy is silent or vague on
- Not stated: a deletion timeline after closure or request
- Not stated: breach notification
- Only partial: keeping user inputs out of model training
- Only partial: a way to opt out of training
Windsurf privacy rating
Details
- Category
- Coding
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-03-09
- Region scored
- Global / US-default
- Last assessed
- 2026-08-13
Documents examined
Other coding apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.