Windsurf (formerly Codeium) — privacy & data policy

Provider: Cognition AI (formerly Exafunction). PromptPrivacy score: 38/100. Last verified July 26, 2026.

What happens to your data?

Cognition AI collects your account information, communications, and user content to operate and improve their services. Your data may be used to train their AI models and is shared with service providers, affiliates, and potentially your employer if you use a work email. They do not sell your data for advertising purposes.

Does it train on your data?

User content is used to train, fine-tune, and improve the models that power the services.

Can you opt out?

No, there is no self-serve opt-out for model training; you must contact privacy@cognition.ai to exercise rights regarding your data.

Data retention

Retained as needed to provide services, comply with legal obligations, or protect interests; deleted when no longer needed or upon user request.

Encryption & security

Mentions commercially reasonable technical, administrative, and organizational measures; no specific standards or certifications named.

Is it safe for work?

Use caution; while enterprise features exist, the policy explicitly states that administrators of enterprise accounts may access and control your user content.

Source policy: https://windsurf.ai/privacy-policy