This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This scope exclusion establishes that the Privacy Policy's protections and obligations apply only to non-business use cases. For commercial users processing personal data, the data controller-processor relationship is governed by separate data processing agreements rather than this Privacy Policy, affecting which legal frameworks and contractual terms establish the parties' data handling responsibilities.
The updated policy now explicitly includes data accessed through third-party services and integrations users connect to Mistral AI Products as 'Input' data subject to collection and use. The policy removed its prior statement that Input and Output data are not used to train AI models when using Le Chat Enterprise or paid versions of Mistral APIs. This creates operational ambiguity: users of paid services and Enterprise customers no longer have a documented commitment that their data will be excluded from model training, though the privacy policy does not affirmatively state that model training now occurs. The policy also changed language describing product improvement from 'aggregated and anonymous statistics' to 'aggregated or anonymous datasets or statistics,' broadening the stated scope of what can be collected for improvement purposes.
View change record →Individual consumers using Mistral AI Products for personal purposes operate under this Privacy Policy's stated terms and protections. Commercial or business users processing personal data operate under a different contractual framework where they assume the role of data controller and Mistral AI assumes the role of data processor.
Cross-platform context
See how other platforms handle Scope Exclusion for Commercial/Business Users and similar clauses.
Compare across platforms →"Scope of this Privacy Policy. This Privacy Policy does not apply if you use our Mistral AI Products to process personal data in the context of your business activities. In this case, you are the data controller, and Mistral AI is the data processor processing on your behalf.Excerpt from Mistral AI's Privacy Policy
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This scope exclusion establishes that the Privacy Policy's protections and obligations apply only to non-business use cases. For commercial users processing personal data, the data controller-processor relationship is governed by separate data processing agreements rather than this Privacy Policy, affecting which legal frameworks and contractual terms establish the parties' data handling responsibilities.
Individual consumers using Mistral AI Products for personal purposes operate under this Privacy Policy's stated terms and protections. Commercial or business users processing personal data operate under a different contractual framework where they assume the role of data controller and Mistral AI assumes the role of data processor.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.