Mistral AI is legally obligated to respond to requests from users who want to access, correct, delete, export, or restrict their personal data, and has a DPO contactable via a web form or by post.
You can formally request access to, correction of, deletion of, or a copy of your personal data held by Mistral AI by contacting their Data Protection Officer via the Privacy Requests form, and Mistral AI is legally required to respond.
Cross-platform context
See how other platforms handle Data Subject Rights Under GDPR and similar clauses.
Compare across platforms →EU and UK users have strong legal rights to control their personal data held by Mistral AI, including the right to delete their account data and object to model training use.
(1) REGULATORY FRAMEWORK: This provision fulfils Mistral AI's obligations under GDPR Arts. 15–22, encompassing rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), and rights related to automated decision-making (Art. 22). GDPR Art. 12 requires responses within one month, extendable to three months for complex requests, with no fee for routine requests. The French Loi Informatique et Libertés provides equivalent rights. California CPRA §§1798.100–1798.125 provides parallel rights for California residents. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.