Mistral Le Chat — privacy & data policy

Provider: Mistral AI. PromptPrivacy score: 74/100. Last verified August 26, 2026.

What happens to your data?

Mistral AI collects your account information, prompts, generated outputs, feedback, and technical usage logs to deliver and improve its services. By default, inputs and outputs may be used to train AI models unless you opt out in your account settings. Data is shared with vetted service providers and authorities where legally required, but is not sold.

Does it train on your data?

Mistral AI trains its large language models on publicly available web data, third-party datasets, user feedback, and user inputs and outputs. Training on user inputs and outputs is subject to an opt-out setting available in account controls. Third-party content retrieved via web search features is not used to train models.

Can you opt out?

Yes. Users can opt out of having their input and output data used for model training directly in their account settings. Users can also disable or delete stored Memories, opt out of IP-based location customization, export their data, or delete their account.

Data retention

Chat inputs and outputs are retained until you delete the conversation or delete your account. For standard APIs, inputs and outputs are retained during generation and for 30 rolling days for abuse monitoring (unless zero data retention is activated). Fine-tuning data is kept until deleted or account termination. Identity, technical, and billing records are kept for longer statutory periods (ranging from 1 to 10 years) for legal compliance and dispute resolution.

Encryption & security

Not specified. The policy notes that security teams audit third-party providers against security standards and certifications, but it does not detail specific encryption measures such as TLS or encryption at rest.

Is it safe for work?

Use with caution for sensitive business data under the standard consumer terms. Consumer inputs and outputs are used for AI training by default unless opted out. For business and workplace activities involving personal data, Mistral specifies that a separate business arrangement where Mistral acts as a data processor applies.

Source policy: https://legal.mistral.ai/terms/privacy-policy?language=en-US