Mistral AI provides a Data Protection Officer and a dedicated contact form for users who want to exercise their privacy rights, such as accessing, correcting, or deleting their personal data.
This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
You have formal rights over your personal data held by Mistral AI, and the company has designated a DPO as a named point of contact, which is a meaningful accountability mechanism under GDPR.
The updated policy now explicitly includes data accessed through third-party services and integrations users connect to Mistral AI Products as 'Input' data subject to collection and use. The policy removed its prior statement that Input and Output data are not used to train AI models when using Le Chat Enterprise or paid versions of Mistral APIs. This creates operational ambiguity: users of paid services and Enterprise customers no longer have a documented commitment that their data will be excluded from model training, though the privacy policy does not affirmatively state that model training now occurs. The policy also changed language describing product improvement from 'aggregated and anonymous statistics' to 'aggregated or anonymous datasets or statistics,' broadening the stated scope of what can be collected for improvement purposes.
View change record →Provision name expanded from 'Data Subject Rights Under GDPR' to 'Data Subject Rights and DPO Contact'; removed specific enumeration of data categories; added detailed DPO contact information (contact form and postal address).
View full change record →Users can exercise data subject rights including access, erasure, and objection by contacting Mistral AI's DPO through a dedicated privacy request form or by mail, with the company legally obligated to respond under GDPR.
How other platforms handle this
You can always contact your local data protection authority if you have concerns regarding your rights under local law.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
If you are an end user in a Workspace not owned by you and wish to update, delete, or receive any information we have about you, you may do so by contacting the organization who owns your ClickUp Workspace.
"To reply to your requests to exercise your rights on your personal data [...] Our legal obligation to reply to your requests. [...] How to contact our Data Protection Officer (DPO): By using the 'Privacy Requests' contact form available here. By sending us a letter at Mistral AI, Attn: DPO, Mistral AI, 15 rue des Halles, 75001 Paris, France.Excerpt from Mistral AI's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
You have formal rights over your personal data held by Mistral AI, and the company has designated a DPO as a named point of contact, which is a meaningful accountability mechanism under GDPR.
Users can exercise data subject rights including access, erasure, and objection by contacting Mistral AI's DPO through a dedicated privacy request form or by mail, with the company legally obligated to respond under GDPR.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.