If you download a Mistral AI model from the Hugging Face platform, Mistral AI collects your Hugging Face username and email address for license enforcement and to send you product communications.
This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Developers and researchers who download Mistral AI models from Hugging Face should be aware that doing so triggers personal data collection by Mistral AI, even if they have not created a direct Mistral AI account.
Hugging Face users who download Mistral AI models have their username and email address collected by Mistral AI for license enforcement and communications purposes, creating a data relationship with Mistral AI outside of a direct account signup.
How other platforms handle this
When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...
American does not knowingly collect personal information directly from children – persons under the age of 13, or another age if required by applicable law – other than when required to comply with the law or for safety and security reasons. Due to the nature of our Services, we may collect travel i...
We may collect information about your location, including precise geolocation information, when you use our Services. We use this information to provide location-based services, such as showing you products available in your area, and for other purposes described in this Privacy Policy.
Monitoring
Mistral AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Hugging Face. If you download our artificial intelligence models on Hugging Face, we collect your username and email address to enforce our license and send you communications about our new models.— Excerpt from Mistral AI's Mistral AI Privacy Policy
1. REGULATORY LANDSCAPE: This provision engages GDPR insofar as Hugging Face users in the EU whose data is collected by Mistral AI are entitled to the same data subject rights as direct Mistral AI users. The lawful bases for this collection (license enforcement and communications) should be documented. CNIL may evaluate whether the notice provided to Hugging Face users at the point of data collection is adequate under GDPR transparency requirements. 2. GOVERNANCE EXPOSURE: Low to Medium. The collection is limited in scope (username and email) and serves specified purposes. The primary governance question is whether Hugging Face users receive adequate notice and consent opportunity for marketing communications before their email is used for that purpose, given that marketing communications require consent under GDPR and ePrivacy rules. 3. JURISDICTION FLAGS: EU and EEA Hugging Face users have GDPR rights with respect to data collected through this mechanism. US users may have CCPA rights depending on California residency. The indirect nature of data collection (through a third-party platform) may complicate notice and consent delivery. 4. CONTRACT AND VENDOR IMPLICATIONS: Mistral AI's data sharing arrangement with Hugging Face for user data transfer should be governed by appropriate data processing or data sharing agreements. Procurement teams at organizations deploying Hugging Face-downloaded models should note that employee download activity may trigger data collection by Mistral AI. 5. COMPLIANCE CONSIDERATIONS: Legal teams should confirm that the mechanism for collecting Hugging Face user data complies with GDPR transparency requirements, including whether users receive a layered privacy notice at the point of download. Marketing communications sent to Hugging Face-sourced emails should be audited to confirm valid consent is obtained before sending.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Developers and researchers who download Mistral AI models from Hugging Face should be aware that doing so triggers personal data collection by Mistral AI, even if they have not created a direct Mistral AI account.
Hugging Face users who download Mistral AI models have their username and email address collected by Mistral AI for license enforcement and communications purposes, creating a data relationship with Mistral AI outside of a direct account signup.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.