Ollama vs. Windsurf: data protection per plan
Ollama (5 plans) and Windsurf (5 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.
Last updated: (latest review date of the tools shown)
At a glance
Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.
All plans: each value is listed with the plans it applies to.
| Feature | Ollama | Windsurf |
|---|---|---|
| Provider based in | Ollama Inc. | Cognition AI, Inc., 550 Third Street, San Francisco, CA 94107, USA |
| Plans recorded | 5 | 5 |
| Hosting | mixed: all 5 plans | US only: Free, Pro, Max, Teamsnot documented: Enterprise |
| Training on inputs | no: all 5 plans | yes: Freeopt-out available: Pro, Max, Teamsno: Enterprise |
| DPA | not documented: all 5 plans | yes: all 5 plans |
| As of | 18 Oct 2026 | 18 Oct 2026 |
Plans compared
Comparing: Ollama Team vs. Windsurf Teams
| Feature | OllamaTeam (Early Access) | WindsurfTeams |
|---|---|---|
| differs by plan | not publicly documented | yes |
| Details: DPA available | not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller) | yes (Platform Terms 4.2: where personal data is processed, the Data Processing Addendum at cognition.ai/dpa applies; EU SCCs Module Two/Three, UK Addendum) Provider’s DPA |
| differs by plan | no | opt-out available |
| Details: Training on inputs | Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses. | Platform Terms (as of 2026-06-30) 3.3.1: Cognition may use Customer Data for model training and to improve the Services. On paid plans, an opt-out is available; after that, the data is not used for any other purpose including training, and Zero Data Retention (ZDR) is enabled with the model providers. On the Teams plan, only an administrator can exercise the opt-out. Default according to the documentation: training enabled. Exceptions under 3.3.3: ZDR does not preclude retention or disclosure of data flagged by abuse-detection classifiers, needed for safety, security and AUP compliance review, or compelled by law. |
| differs by plan | mixed | US only |
| Details: Data residency | Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device. | DPA (as of 2026-07-23), Appendix C: all named sub-processors for core processing, profile data, logs and model inference are located in the United States; support workflow via Agumbe (Cognition India) in India. Privacy Policy (as of 2026-03-09): Cognition and its service providers may transfer and process data throughout the world, including the EU, UK and US. A selectable EU region is not documented. |
| list available | list available | |
| Details: List published |
|
|
| differs by plan | Privacy Policy | DPA |
| Details: Data retention | Privacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented. | DPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. After opt-out: Zero Data Retention with model providers (data not persistently stored and deleted once the output is generated, Platform Terms 1.8). Without opt-out, specific retention periods not publicly documented. |
| differs by plan | from 500 USD/mo | 80 USD/mo… (further prices in the details) |
| Details: Price | from 500 USD per month (pricing page); usage beyond the included credits is billed from a shared team balance as you go. According to the FAQ, Ollama creates a separate team account on joining. The customer is responsible for taxes (Terms). | 80 USD per month for the team plan plus 40 USD per month per full dev seat (pricing page, no information on taxes); up to 200 users. |
| yes | yes | |
| Details: AI features included | yes (Pro plus unlimited users, 1,000 USD of usage credits per month shared across the team, centralised billing and administration, priority support, 10 concurrent requests; shared projects "coming soon" according to the pricing page) | yes (Pro plus up to 200 users, sharing and collaboration, centralised billing, admin dashboard with analytics, priority support; according to the FAQ, Devin Desktop only with a full seat, each full seat with 40 USD of usage per month across all Devin products) |
| 4 sources | 6 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by plan
- Ollama Teamnot publicly documented
- Windsurf Teamsyes
- Ollama Team
not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller)
Windsurf Teamsyes (Platform Terms 4.2: where personal data is processed, the Data Processing Addendum at cognition.ai/dpa applies; EU SCCs Module Two/Three, UK Addendum)
Provider’s DPA
Training
- differs by plan
- Ollama Teamno
- Windsurf Teamsopt-out available
- Ollama Team
Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses.
Windsurf TeamsPlatform Terms (as of 2026-06-30) 3.3.1: Cognition may use Customer Data for model training and to improve the Services. On paid plans, an opt-out is available; after that, the data is not used for any other purpose including training, and Zero Data Retention (ZDR) is enabled with the model providers. On the Teams plan, only an administrator can exercise the opt-out. Default according to the documentation: training enabled. Exceptions under 3.3.3: ZDR does not preclude retention or disclosure of data flagged by abuse-detection classifiers, needed for safety, security and AUP compliance review, or compelled by law.
Hosting
- differs by plan
- Ollama Teammixed
- Windsurf TeamsUS only
- Ollama Team
Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device.
Windsurf TeamsDPA (as of 2026-07-23), Appendix C: all named sub-processors for core processing, profile data, logs and model inference are located in the United States; support workflow via Agumbe (Cognition India) in India. Privacy Policy (as of 2026-03-09): Cognition and its service providers may transfer and process data throughout the world, including the EU, UK and US. A selectable EU region is not documented.
Sub-processors
- Ollama Teamlist available
- Windsurf Teamslist available
- Ollama Team
- NVIDIA Cloud Providers (NCPs) for hosting open models, without names or locations (pricing page)
- Stripe (payment processing, according to the Terms and Privacy Policy)
- Cloud infrastructure and model inference providers according to the Privacy Policy, without names
- Sub-processor list: not publicly documented
Windsurf Teams- Microsoft Azure, AWS and Google Cloud: core processing, for AWS and Google Cloud also profile data, logs and indices (United States)
- Auth0 (profile data); Hex, Sentry and Datadog (system logs) (United States)
- Zendesk and Pylon (support contacts), Decagon (support chatbot) (United States); Agumbe (Cognition India, support workflow) (India)
- Model providers, to the extent inputs contain personal data: OpenAI, Anthropic, Microsoft/Azure, Google/Vertex (United States); Databricks, xAI, Snowflake only if enabled in Devin Desktop (United States)
Retention
- differs by plan
- Ollama TeamPrivacy Policy
- Windsurf TeamsDPA
- Ollama TeamPrivacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented.Windsurf TeamsDPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. After opt-out: Zero Data Retention with model providers (data not persistently stored and deleted once the output is generated, Platform Terms 1.8). Without opt-out, specific retention periods not publicly documented.
Price
- differs by plan
- Ollama Teamfrom 500 USD/mo
- Windsurf Teams80 USD/mo… (further prices in the details)
- Ollama Team
from 500 USD per month (pricing page); usage beyond the included credits is billed from a shared team balance as you go. According to the FAQ, Ollama creates a separate team account on joining. The customer is responsible for taxes (Terms).
Windsurf Teams80 USD per month for the team plan plus 40 USD per month per full dev seat (pricing page, no information on taxes); up to 200 users.
- Ollama Teamyes
- Windsurf Teamsyes
- Ollama Team
yes (Pro plus unlimited users, 1,000 USD of usage credits per month shared across the team, centralised billing and administration, priority support, 10 concurrent requests; shared projects "coming soon" according to the pricing page)
Windsurf Teamsyes (Pro plus up to 200 users, sharing and collaboration, centralised billing, admin dashboard with analytics, priority support; according to the FAQ, Devin Desktop only with a full seat, each full seat with 40 USD of usage per month across all Devin products)
Evidence
- Ollama Team4 sources
- Windsurf Teams6 sources
- Ollama Team
- PricingPricing page, retrieved 18 Oct 2026
- Terms of Service (Last updated: May 2026)Terms and conditions, retrieved 18 Oct 2026
- Privacy Policy (Last updated: March 2026)Privacy notice, retrieved 18 Oct 2026
- Docs: CloudDocumentation, retrieved 18 Oct 2026
Windsurf Teams- Plans and Pricing (windsurf.com/pricing redirects here)Pricing page, retrieved 18 Oct 2026
- Docs: Devin Desktop FAQ (transition from Windsurf)Documentation, retrieved 18 Oct 2026
- Platform Terms of Service (Last updated: 2026-06-30)Terms and conditions, retrieved 18 Oct 2026
- Data Processing Addendum (Last updated: 2026-07-23, with sub-processor list in Appendix C)DPA, retrieved 18 Oct 2026
- Privacy Policy (Last updated: 2026-03-09)Privacy notice, retrieved 18 Oct 2026
- Docs: Security at Cognition (windsurf.com/security redirects here)Documentation, retrieved 18 Oct 2026
| Feature | Ollama | Windsurf |
|---|---|---|
| differs by tool | not publicly documentedall 5 plans | yesall 5 plans |
| Details: DPA available |
|
|
| differs by tool | noall 5 plans |
|
| Details: Training on inputs |
|
|
| differs by tool | mixedall 5 plans |
|
| Details: Data residency |
|
|
| list availableall 5 plans | list availableall 5 plans | |
| Details: List published |
|
|
| differs by tool | Privacy Policyall 5 plans | DPAall 5 plans |
| Details: Data retention |
|
|
| differs by tool |
|
|
| Details: Price |
|
|
| yesall 5 plans | yesall 5 plans | |
| Details: AI features included |
|
|
| 4 sources | 8 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by tool
- Ollamanot publicly documentedall 5 plans
- Windsurfyesall 5 plans
- Ollama
- Free
not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller)
- Pro
not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller)
- Max
not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller)
- Team (Early Access)
not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller)
- Enterprise
not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller)
Windsurf- Free
yes (Platform Terms 4.2: where personal data is processed, the Data Processing Addendum at cognition.ai/dpa applies; EU SCCs Module Two/Three, UK Addendum)
Provider’s DPA - Pro
yes (Platform Terms 4.2: where personal data is processed, the Data Processing Addendum at cognition.ai/dpa applies; EU SCCs Module Two/Three, UK Addendum)
Provider’s DPA - Max
yes (Platform Terms 4.2: where personal data is processed, the Data Processing Addendum at cognition.ai/dpa applies; EU SCCs Module Two/Three, UK Addendum)
Provider’s DPA - Teams
yes (Platform Terms 4.2: where personal data is processed, the Data Processing Addendum at cognition.ai/dpa applies; EU SCCs Module Two/Three, UK Addendum)
Provider’s DPA - Enterprise
yes (Enterprise Terms 4.3: the Data Processing Addendum at cognition.com/dpa is incorporated into the agreement; EU SCCs Module Two/Three, UK Addendum)
Provider’s DPA
- Free
Training
- differs by tool
- Ollamanoall 5 plans
- Windsurf
- yesFree
- opt-out availablePro, Max, Teams
- noEnterprise
- Ollama
- Free
Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses.
- Pro
Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses.
- Max
Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses.
- Team (Early Access)
Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses.
- Enterprise
Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses.
Windsurf- Free
Platform Terms (as of 2026-06-30) 3.3.1: Cognition may use Customer Data for model training and to improve the Services. An opt-out is only available on paid plans ("If you subscribe to a paid Service Tier, you may opt out of this use"); no opt-out is documented for Free. Exceptions under 3.3.3: ZDR does not preclude retention or disclosure of data flagged by abuse-detection classifiers, needed for safety, security and AUP compliance review, or compelled by law.
- Pro
Platform Terms (as of 2026-06-30) 3.3.1: Cognition may use Customer Data for model training and to improve the Services. On paid plans, an opt-out is available; after that, the data is not used for any other purpose including training, and Zero Data Retention (ZDR) is enabled with the model providers. Default according to the documentation: training enabled, opt-out at any time in the Data Controls settings. Exceptions under 3.3.3: ZDR does not preclude retention or disclosure of data flagged by abuse-detection classifiers, needed for safety, security and AUP compliance review, or compelled by law.
- Max
Platform Terms (as of 2026-06-30) 3.3.1: Cognition may use Customer Data for model training and to improve the Services. On paid plans, an opt-out is available; after that, the data is not used for any other purpose including training, and Zero Data Retention (ZDR) is enabled with the model providers. Default according to the documentation: training enabled, opt-out at any time in the Data Controls settings. Exceptions under 3.3.3: ZDR does not preclude retention or disclosure of data flagged by abuse-detection classifiers, needed for safety, security and AUP compliance review, or compelled by law.
- Teams
Platform Terms (as of 2026-06-30) 3.3.1: Cognition may use Customer Data for model training and to improve the Services. On paid plans, an opt-out is available; after that, the data is not used for any other purpose including training, and Zero Data Retention (ZDR) is enabled with the model providers. On the Teams plan, only an administrator can exercise the opt-out. Default according to the documentation: training enabled. Exceptions under 3.3.3: ZDR does not preclude retention or disclosure of data flagged by abuse-detection classifiers, needed for safety, security and AUP compliance review, or compelled by law.
- Enterprise
Enterprise Terms (as of 2026-06-08) 3.3: Cognition does not use, or permit any third party to use, Customer Data to train AI models without the customer's express prior written consent; Usage Data may be used for internal analytics. Documentation: "If you are an Enterprise customer, we will never train on your data without your express prior written consent." DPA (as of 2026-07-23) section 4: sub-processors are subject to equivalent restrictions.
- Free
Hosting
- differs by tool
- Ollamamixedall 5 plans
- Windsurf
- US onlyFree, Pro, Max, Teams
- not publicly documentedEnterprise
- Ollama
- Free
Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device.
- Pro
Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device.
- Max
Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device.
- Team (Early Access)
Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device.
- Enterprise
Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device.
Windsurf- Free
DPA (as of 2026-07-23), Appendix C: all named sub-processors for core processing, profile data, logs and model inference are located in the United States; support workflow via Agumbe (Cognition India) in India. Privacy Policy (as of 2026-03-09): Cognition and its service providers may transfer and process data throughout the world, including the EU, UK and US. A selectable EU region is not documented.
- Pro
DPA (as of 2026-07-23), Appendix C: all named sub-processors for core processing, profile data, logs and model inference are located in the United States; support workflow via Agumbe (Cognition India) in India. Privacy Policy (as of 2026-03-09): Cognition and its service providers may transfer and process data throughout the world, including the EU, UK and US. A selectable EU region is not documented.
- Max
DPA (as of 2026-07-23), Appendix C: all named sub-processors for core processing, profile data, logs and model inference are located in the United States; support workflow via Agumbe (Cognition India) in India. Privacy Policy (as of 2026-03-09): Cognition and its service providers may transfer and process data throughout the world, including the EU, UK and US. A selectable EU region is not documented.
- Teams
DPA (as of 2026-07-23), Appendix C: all named sub-processors for core processing, profile data, logs and model inference are located in the United States; support workflow via Agumbe (Cognition India) in India. Privacy Policy (as of 2026-03-09): Cognition and its service providers may transfer and process data throughout the world, including the EU, UK and US. A selectable EU region is not documented.
- Enterprise
Standard SaaS according to DPA Appendix C (as of 2026-07-23) with sub-processors in the United States, support workflow in India. Pricing page: Enterprise with "Dedicated deployment option" and deployment in the customer's own VPC; documentation: FedRAMP deployment on AWS GovCloud. Regions of the dedicated or VPC deployment not publicly documented; an EU region is not documented.
- Free
Sub-processors
- Ollamalist availableall 5 plans
- Windsurflist availableall 5 plans
- Ollama
- Free
- NVIDIA Cloud Providers (NCPs) for hosting open models, without names or locations (pricing page)
- Stripe (payment processing, according to the Terms and Privacy Policy)
- Cloud infrastructure and model inference providers according to the Privacy Policy, without names
- Sub-processor list: not publicly documented
- Pro
- NVIDIA Cloud Providers (NCPs) for hosting open models, without names or locations (pricing page)
- Stripe (payment processing, according to the Terms and Privacy Policy)
- Cloud infrastructure and model inference providers according to the Privacy Policy, without names
- Sub-processor list: not publicly documented
- Max
- NVIDIA Cloud Providers (NCPs) for hosting open models, without names or locations (pricing page)
- Stripe (payment processing, according to the Terms and Privacy Policy)
- Cloud infrastructure and model inference providers according to the Privacy Policy, without names
- Sub-processor list: not publicly documented
- Team (Early Access)
- NVIDIA Cloud Providers (NCPs) for hosting open models, without names or locations (pricing page)
- Stripe (payment processing, according to the Terms and Privacy Policy)
- Cloud infrastructure and model inference providers according to the Privacy Policy, without names
- Sub-processor list: not publicly documented
- Enterprise
- NVIDIA Cloud Providers (NCPs) for hosting open models, without names or locations (pricing page)
- Stripe (payment processing, according to the Terms and Privacy Policy)
- Cloud infrastructure and model inference providers according to the Privacy Policy, without names
- Sub-processor list: not publicly documented
Windsurf- Free
- Microsoft Azure, AWS and Google Cloud: core processing, for AWS and Google Cloud also profile data, logs and indices (United States)
- Auth0 (profile data); Hex, Sentry and Datadog (system logs) (United States)
- Zendesk and Pylon (support contacts), Decagon (support chatbot) (United States); Agumbe (Cognition India, support workflow) (India)
- Model providers, to the extent inputs contain personal data: OpenAI, Anthropic, Microsoft/Azure, Google/Vertex (United States); Databricks, xAI, Snowflake only if enabled in Devin Desktop (United States)
- Pro
- Microsoft Azure, AWS and Google Cloud: core processing, for AWS and Google Cloud also profile data, logs and indices (United States)
- Auth0 (profile data); Hex, Sentry and Datadog (system logs) (United States)
- Zendesk and Pylon (support contacts), Decagon (support chatbot) (United States); Agumbe (Cognition India, support workflow) (India)
- Model providers, to the extent inputs contain personal data: OpenAI, Anthropic, Microsoft/Azure, Google/Vertex (United States); Databricks, xAI, Snowflake only if enabled in Devin Desktop (United States)
- Max
- Microsoft Azure, AWS and Google Cloud: core processing, for AWS and Google Cloud also profile data, logs and indices (United States)
- Auth0 (profile data); Hex, Sentry and Datadog (system logs) (United States)
- Zendesk and Pylon (support contacts), Decagon (support chatbot) (United States); Agumbe (Cognition India, support workflow) (India)
- Model providers, to the extent inputs contain personal data: OpenAI, Anthropic, Microsoft/Azure, Google/Vertex (United States); Databricks, xAI, Snowflake only if enabled in Devin Desktop (United States)
- Teams
- Microsoft Azure, AWS and Google Cloud: core processing, for AWS and Google Cloud also profile data, logs and indices (United States)
- Auth0 (profile data); Hex, Sentry and Datadog (system logs) (United States)
- Zendesk and Pylon (support contacts), Decagon (support chatbot) (United States); Agumbe (Cognition India, support workflow) (India)
- Model providers, to the extent inputs contain personal data: OpenAI, Anthropic, Microsoft/Azure, Google/Vertex (United States); Databricks, xAI, Snowflake only if enabled in Devin Desktop (United States)
- Enterprise
- Microsoft Azure, AWS and Google Cloud: core processing, for AWS and Google Cloud also profile data, logs and indices (United States)
- Auth0 (profile data); Hex, Sentry and Datadog (system logs) (United States)
- Zendesk and Pylon (support contacts), Decagon (support chatbot) (United States); Agumbe (Cognition India, support workflow) (India)
- Model providers, to the extent inputs contain personal data: OpenAI, Anthropic, Microsoft/Azure, Google/Vertex (United States); Databricks, xAI, Snowflake only if enabled in Devin Desktop (United States)
- Free
Retention
- differs by tool
- OllamaPrivacy Policyall 5 plans
- WindsurfDPAall 5 plans
- Ollama
- FreePrivacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented.
- ProPrivacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented.
- MaxPrivacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented.
- Team (Early Access)Privacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented.
- EnterprisePrivacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented.
Windsurf- FreeDPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. Without opt-out, ZDR with model providers is not committed; specific retention periods for prompts and code not publicly documented.
- ProDPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. After opt-out: Zero Data Retention with model providers (data not persistently stored and deleted once the output is generated, Platform Terms 1.8). Without opt-out, specific retention periods not publicly documented.
- MaxDPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. After opt-out: Zero Data Retention with model providers (data not persistently stored and deleted once the output is generated, Platform Terms 1.8). Without opt-out, specific retention periods not publicly documented.
- TeamsDPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. After opt-out: Zero Data Retention with model providers (data not persistently stored and deleted once the output is generated, Platform Terms 1.8). Without opt-out, specific retention periods not publicly documented.
- EnterpriseDPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. Specific retention periods for prompts and code in Enterprise agreements not publicly documented.
Price
- differs by tool
- Ollama
- 0 USD… (further prices in the details)Free
- 20 USD/mo… (further prices in the details)Pro
- 100 USD/moMax
- from 500 USD/moTeam (Early Access)
- customEnterprise
- Windsurf
- 0 USD/moFree
- 20 USD/moPro
- 200 USD/moMax
- 80 USD/mo… (further prices in the details)Teams
- customEnterprise
- Ollama
- Free
0 USD (pricing page). Additional usage credits at token prices per million tokens, e.g. gpt-oss:120b 0.15 USD input and 0.60 USD output; off-peak prices outside 12:00–18:00 UTC on weekdays and all day at weekends. Purchased credits expire after one year; the customer is responsible for taxes (Terms).
- Pro
20 USD per month or 200 USD per year (16.67 USD per month billed annually) (pricing page); one account per person. The customer is responsible for taxes (Terms).
- Max
100 USD per month (pricing page); one account per person. The customer is responsible for taxes (Terms).
- Team (Early Access)
from 500 USD per month (pricing page); usage beyond the included credits is billed from a shared team balance as you go. According to the FAQ, Ollama creates a separate team account on joining. The customer is responsible for taxes (Terms).
- Enterprise
Custom (pricing page: "Custom", volume usage pricing; contact via sales)
Windsurf- Free
0 USD per month (pricing page)
- Pro
20 USD per month (pricing page, no information on taxes); extra usage at API pricing. Quotas refresh daily and weekly (FAQ).
- Max
200 USD per month (pricing page, no information on taxes); extra usage at API pricing.
- Teams
80 USD per month for the team plan plus 40 USD per month per full dev seat (pricing page, no information on taxes); up to 200 users.
- Enterprise
Price on request (pricing page: "Let's talk")
- Free
- Ollamayesall 5 plans
- Windsurfyesall 5 plans
- Ollama
- Free
yes (cloud models with starter usage credits and access to starter models; all cloud models after buying usage credits; local models unlimited; 1 concurrent request)
- Pro
yes (Free plus 60 USD of usage credits per month, larger pro models, several models concurrently, 3 concurrent requests; Fast mode "coming soon" according to the pricing page)
- Max
yes (Pro plus 300 USD of usage credits per month, early access to the newest models, 10 concurrent requests)
- Team (Early Access)
yes (Pro plus unlimited users, 1,000 USD of usage credits per month shared across the team, centralised billing and administration, priority support, 10 concurrent requests; shared projects "coming soon" according to the pricing page)
- Enterprise
yes (Team plus model access controls, cost budgets for users and API keys, private Slack channel with dedicated support, custom security questionnaires)
Windsurf- Free
yes (light quota for agents, limited model availability, unlimited inline edits and Tab completions)
- Pro
yes (Free plus higher quotas with frontier models from OpenAI, Claude, Gemini and SpaceXAI as well as open-source models, full model availability, SWE-2, cloud agents (Devin Cloud), extra usage at API pricing)
- Max
yes (Pro plus significantly higher quotas)
- Teams
yes (Pro plus up to 200 users, sharing and collaboration, centralised billing, admin dashboard with analytics, priority support; according to the FAQ, Devin Desktop only with a full seat, each full seat with 40 USD of usage per month across all Devin products)
- Enterprise
yes (highest priority support, dedicated account management, SAML/OIDC SSO, centralised enterprise admin controls, teamspace isolation, dedicated deployment option or deployment in the customer's VPC, custom terms)
- Free
Evidence
- Ollama4 sources
- Windsurf8 sources
- Ollama
- PricingPricing page, retrieved 18 Oct 2026
- Terms of Service (Last updated: May 2026)Terms and conditions, retrieved 18 Oct 2026
- Privacy Policy (Last updated: March 2026)Privacy notice, retrieved 18 Oct 2026
- Docs: CloudDocumentation, retrieved 18 Oct 2026
Windsurf- Plans and Pricing (windsurf.com/pricing redirects here)Pricing page, retrieved 18 Oct 2026
- Docs: Devin Desktop FAQ (transition from Windsurf)Documentation, retrieved 18 Oct 2026
- Platform Terms of Service (Last updated: 2026-06-30)Terms and conditions, retrieved 18 Oct 2026
- Enterprise Terms of Service (Last updated: 2026-06-08)Terms and conditions, retrieved 18 Oct 2026
- Data Processing Addendum (Last updated: 2026-07-23, with sub-processor list in Appendix C)DPA, retrieved 18 Oct 2026
- Privacy Policy (Last updated: 2026-03-09)Privacy notice, retrieved 18 Oct 2026
- Docs: Security at Cognition (windsurf.com/security redirects here)Documentation, retrieved 18 Oct 2026
- Docs: FedRAMP Security Admin Guide (Devin Desktop)Documentation, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.
More comparisons
Ollama compared with
Individual pages: Ollama, Windsurf. All tools in the category: Software development.