Mistral AI uses your data including your conversations, feedback, and identity data to conduct research and improve its products, relying on 'legitimate interest' rather than your consent as the legal justification.
Your Inputs, Outputs, and Feedback can be used for product research and improvement without your consent, and you must actively exercise your GDPR right to object (Art. 21) to stop this processing.
Cross-platform context
See how other platforms handle Legitimate Interest as Lawful Basis for Product Improvement and similar clauses.
Compare across platforms →Using legitimate interest as a basis for processing conversation data for product improvement means users are not asked to consent — they must proactively object if they disagree with this use.
(1) REGULATORY FRAMEWORK: GDPR Art. 6(1)(f) permits processing based on legitimate interests where not overridden by data subject interests or fundamental rights. This requires a documented Legitimate Interest Assessment (LIA). GDPR Art. 21 grants data subjects the right to object to processing on legitimate interest grounds, and the controller must cease processing unless it can demonstrate compelling legitimate grounds. French CNIL's guidelines on legitimate interest require proactive documentation and data subject notification. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.