For API users, Mistral AI keeps your prompts and AI responses for 30 days after generation to monitor for abuse, unless you have activated zero data retention. Agents API data is kept until you close your account.
This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The provision creates differentiated retention schedules across API product lines, with standard APIs subject to the 30-day rolling window while specialized APIs (Agents and Fine-Tuning) maintain longer retention periods tied to account lifecycle events. This structure establishes the operational framework for data lifecycle management across Mistral's API offerings.
If you or a business you use deploys Mistral AI's APIs, your conversation data is retained for up to 30 days for abuse monitoring unless the operator has enabled zero data retention — creating a window during which your data is accessible to Mistral AI.
How other platforms handle this
We will retain your Data for as long as necessary: (i) to achieve the purposes as set out in this Policy; (ii) as required by applicable laws and regulations, including any mandated retention periods...
After you submit a request to delete your account, we initiate a deletion process to safely and completely remove your data from our servers or retain it only in anonymized form.
We will promptly destroy personal information at the end of the retention period, as described above. When we destroy personal information, we do so in a way that prevents that information from being restored or reconstructed.
"Data we use to provide our APIs to you: Except for specific APIs, we keep your Input and Output for the period necessary to generate the Output and then for thirty (30) rolling days to monitor abuse (unless zero data retention is activated). If you use our Agents API, we keep your Input and Output until you terminate your account. If you use our Fine-Tuning API, we keep your fine-tuning data until you delete it from Mistral AI Studio or until you terminate your account.Excerpt from Mistral AI's Privacy Policy
(1) REGULATORY FRAMEWORK: This provision implicates GDPR Art.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The provision creates differentiated retention schedules across API product lines, with standard APIs subject to the 30-day rolling window while specialized APIs (Agents and Fine-Tuning) maintain longer retention periods tied to account lifecycle events. This structure establishes the operational framework for data lifecycle management across Mistral's API offerings.
If you or a business you use deploys Mistral AI's APIs, your conversation data is retained for up to 30 days for abuse monitoring unless the operator has enabled zero data retention — creating a window during which your data is accessible to Mistral AI.
ConductAtlas has identified this type of provision across 268 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.