If you download a Mistral AI model from the Hugging Face platform, Mistral AI collects your Hugging Face username and email address for license enforcement and to send you product communications.
This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Developers and researchers who download Mistral AI models from Hugging Face should be aware that doing so triggers personal data collection by Mistral AI, even if they have not created a direct Mistral AI account.
Hugging Face users who download Mistral AI models have their username and email address collected by Mistral AI for license enforcement and communications purposes, creating a data relationship with Mistral AI outside of a direct account signup.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.
We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.
Monitoring
Mistral AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Hugging Face. If you download our artificial intelligence models on Hugging Face, we collect your username and email address to enforce our license and send you communications about our new models.— Excerpt from Mistral AI's Mistral AI Privacy Policy
1. REGULATORY LANDSCAPE: This provision engages GDPR insofar as Hugging Face users in the EU whose data is collected by Mistral AI are entitled to the same data subject rights as direct Mistral AI users. The lawful bases for this collection (license enforcement and communications) should be documented. CNIL may evaluate whether the notice provided to Hugging Face users at the point of data collection is adequate under GDPR transparency requirements. 2. GOVERNANCE EXPOSURE: Low to Medium. The collection is limited in scope (username and email) and serves specified purposes. The primary governance question is whether Hugging Face users receive adequate notice and consent opportunity for marketing communications before their email is used for that purpose, given that marketing communications require consent under GDPR and ePrivacy rules. 3. JURISDICTION FLAGS: EU and EEA Hugging Face users have GDPR rights with respect to data collected through this mechanism. US users may have CCPA rights depending on California residency. The indirect nature of data collection (through a third-party platform) may complicate notice and consent delivery. 4. CONTRACT AND VENDOR IMPLICATIONS: Mistral AI's data sharing arrangement with Hugging Face for user data transfer should be governed by appropriate data processing or data sharing agreements. Procurement teams at organizations deploying Hugging Face-downloaded models should note that employee download activity may trigger data collection by Mistral AI. 5. COMPLIANCE CONSIDERATIONS: Legal teams should confirm that the mechanism for collecting Hugging Face user data complies with GDPR transparency requirements, including whether users receive a layered privacy notice at the point of download. Marketing communications sent to Hugging Face-sourced emails should be audited to confirm valid consent is obtained before sending.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Developers and researchers who download Mistral AI models from Hugging Face should be aware that doing so triggers personal data collection by Mistral AI, even if they have not created a direct Mistral AI account.
Hugging Face users who download Mistral AI models have their username and email address collected by Mistral AI for license enforcement and communications purposes, creating a data relationship with Mistral AI outside of a direct account signup.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.