[ayi]

Looks like the correct page is this: https://windsurf.com/security

It says:

Zero-data retention mode is the default for any user on a team or enterprise plan and can be enabled by any individual from their profile page.

With zero-data retention mode enabled, code data is not persisted at our servers or by any of our subprocessors. The code data is still visible to our servers in memory for the lifetime of the request, and may exist for a slightly longer period (on the order of minutes to hours) for prompt caching The code data submitted by zero-data retention mode users will never be trained on. Again, zero-data retention mode is on by default for teams and enterprise customers.