Incident #D2FD57 · 27 MAY 2026notable
Codeium/Windsurf privacy policy rewritten under Cognition AI, with shorter text and new AI training wording
The privacy policy was replaced with a shorter version issued by Cognition AI, with new contact addresses and a table-based layout. It states that data is not sold or shared for targeted advertising and lists user rights, but drops the detailed cookie and Do-Not-Track sections, the profiling statement and the California notice reference. It also says that if local law does not provide a listed right, Cognition has 'absolute discretion' in providing it. AI model training on User Content is now described as depending on the terms that apply to your use of the Services.
Taken from you
- Rights are described as discretionary where local law does not provide them
- Stated retention practice is vaguer, with no explicit backup-archive isolation language
- The reference to a separate California Resident Privacy Notice was dropped, and requests now go to privacy@cognition.ai instead of data-subject-request@windsurf.com.
Won back
- Explicit statement that personal information is not sold or shared for targeted advertising in the past 12 months
- The right to lodge a complaint with a data protection authority is now stated without limiting it to EEA, UK or Swiss residents.
- Tabular mapping of each use of data to categories and legal basis
- Notice that shared Devin AI conversation links can be seen by others
Evidence · 4 of 4 quotes matched in source
To customize your experience with our Services and otherwise improve our Services including, depending on the terms that apply to your use of the Services, using User Content to train, fine tune and improve the models that power our Services.+ inserted · ✓ matched in source
If any of the rights listed below are not provided for under law for your jurisdiction, we have absolute discretion in providing these rights.+ inserted · ✓ matched in source
We do not sell or share your personal information with third parties for targeted advertising purposes, nor have we done so in the past 12 months.+ inserted · ✓ matched in source
Archived version ↗ · 7,820 words changed