When the service ends, Mistral AI will delete or return your personal data. After 30 days from termination, the data will no longer be accessible.
This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The 30-day post-termination accessibility window defines a hard cutoff after which data retrieval or portability may not be possible, which customers must account for in their own data retention and business continuity planning. The provision defers to Mistral AI's internal deletion policies and procedures rather than specifying a deletion standard, which may limit customer visibility into the actual deletion process.
Business customers must complete any data export or retrieval within 30 days of service termination. The agreement states that deletion is conducted in accordance with Mistral AI's internal policies, which are referenced but not fully detailed in the DPA itself.
How other platforms handle this
If you use your Roblox ID to sign in to a non-Roblox website or service, and later delete your Roblox account, you may lose access to that website or service.
You agree to (a) provide accurate, current, and complete information as may be prompted by the registration forms via the Site ("Registration Data")...
Use another user's account or share your account with another person;
"After the end of the provision of the Mistral AI Products, Mistral AI will delete or return to Customer all Personal Data Processed on Customer's behalf, in accordance with Mistral AI's deletion policies and procedures. Customer acknowledges that the Personal Data will no longer be accessible upon the expiry of a thirty (30) days period following the termination of the Customer's access to and use of the Mistral AI Products.Excerpt from Mistral AI's Data Processing Addendum
(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 28(3)(g), which requires processor agreements to address data deletion or return at the end of services.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The 30-day post-termination accessibility window defines a hard cutoff after which data retrieval or portability may not be possible, which customers must account for in their own data retention and business continuity planning. The provision defers to Mistral AI's internal deletion policies and procedures rather than specifying a deletion standard, which may limit customer visibility into the actual deletion process.
Business customers must complete any data export or retrieval within 30 days of service termination. The agreement states that deletion is conducted in accordance with Mistral AI's internal policies, which are referenced but not fully detailed in the DPA itself.
ConductAtlas has identified this type of provision across 265 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.