LLM Providers · LLM Provider / AI Assistant · Private litigation
Mistral AI (Le Chat)
Headline
The most striking thing about Mistral is how ordinary its terms look next to the rest of this tab - and that is the finding.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
The most striking thing about Mistral is how ordinary its terms look next to the rest of this tab - and that is the finding. It is the only provider here headquartered in the EU, a French data controller natively subject to GDPR with EU data residency by default and no US-style mandatory arbitration or class action waiver, which means an actual regulator with actual enforcement power stands behind your rights rather than a private arbitrator you waived your way into. The catch is the tier split, stated more plainly than most competitors manage: the free Le Chat tier trains on your conversations by default and you must go turn it off, while Enterprise customers are opted out by default - the price difference is largely the privacy difference. And Zero Data Retention, which Mistral offers only for pay-as-you-go API use on approved request, is not available on its chat product regardless of plan.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Case status. Private litigation; no sources are on file yet, so no legal tier is assigned.
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
French entity (Mistral AI SAS), EU-governed terms - no US-style mandatory consumer arbitration or class action waiver of the kind that dominates the rest of this tab. GDPR data-subject rights and EU supervisory authorities are the live recourse mechanism instead. No confirmed regulatory action or major litigation against Mistral found this pass.
Data sharing
Tier split is the core story. Consumer/free use: prompts and responses may be used for model training by default, subject to an opt-out in account settings. Enterprise customers are opted out of training by default; business use where the customer is the controller falls outside the consumer privacy policy (the default for pay-as-you-go API use was not confirmed this pass). Standard API retains input/output for 30 rolling days for abuse monitoring, then deletes, unless Zero Data Retention is activated (per Mistral's help center, ZDR is available only on pay-as-you-go, on approved request, and only for stateless API endpoints - not agents, conversations, libraries or files - and is not available for its chat products regardless of plan); Agents API input/output is kept until account termination and fine-tuning data until deleted. Memory/Knowledge Base feature relies on explicit consent for sensitive data and can be turned off.
Fees and billing
Free tier, Pro/Student consumer tiers, paid API tiers, Enterprise. The meaningful fee finding is structural rather than punitive: the free tier is the tier that trains on you by default, while Enterprise is opted out by default (other paid tiers' defaults not confirmed this pass).
Contacts
Privacy contact. No published address-free email; written requests to the Paris address above
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Mistral AI, Attn: Privacy Team, 15 rue des Halles, 75001 Paris, France (French company no. 952 418 325; DPO reachable at the same address, Attn: DPO)
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy https://legal.mistral.ai/terms/privacy-policy | Not fetched yet | N |
| Terms of service https://mistral.ai/terms | Not fetched yet | N |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.