Mistral Vibe (formerly Le Chat)
Is Mistral’s Le Chat safe?
- Made by
- Mistral AI
- Company based in
- France
- Trains on your chats
- Yes, unless you opt out
- People can read chats
- Limited
- Temporary chat mode
- No
- Chats used for ads
- Not stated
- Minimum age
- 13
- Regulator actions listed
- 1
- Checked on
Mistral AI renamed Le Chat to Vibe on May 28, 2026; it runs at the same address, chat.mistral.ai. Mistral is a French company and hosts data in the European Union by default, with temporary transfers to listed subprocessors under standard contractual clauses. It states SOC 2 Type II, ISO 27001 and ISO 27701 compliance and AES-256 encryption at rest.
Free-plan chats, including uploaded documents, may be used to train Mistral’s models unless you turn training off. Anything you rate with thumbs up or down is used for training even after you opt out. Mistral’s documents disagree on paid plans: its docs say Pro, Team and Enterprise chats are not used by default, while its help center makes no plan distinction. Enterprise customers are opted out by default. Chats are kept until you delete them or your account; there is no temporary chat mode.
Italy’s competition authority closed a case over missing hallucination warnings in February 2026 with commitments from Mistral and no finding of infringement.
- Company responsible for your data
- Mistral AI (Paris, France)
- What is used for training
- Your inputs and outputs, including uploaded documents, may be used to train Mistral's models on the basis of 'legitimate interest', 'subject to your opt-out'. Anything you rate with thumbs up or down is used for training, together with the related input and output, even if you have opted out. Third-party web-search content, connector data and Libraries documents are not used for training.
- How to turn training off
- Web: Admin panel → Manage → Vibe → Privacy → turn off "Allow your interactions to be used to train our models". iOS/Android app: Settings → Account → Data & Account Controls → untick "Enable data sharing". The Vibe and API toggles are separate.
- Business and API plans
- Enterprise customers are opted out by default. Team admins can turn training off for the whole organisation. Mistral's docs say 'Vibe (Pro, Team, Enterprise): conversations aren't used for model training by default' and that API data isn't used for training. The help center and the DPA, however, describe an API opt-out toggle ('Anonymous improvement data') and training 'unless Customer is or has opted-out'.
- How long chats are kept
- 'We keep your Input and Output until you delete your account or until you delete the conversation from Vibe.' After an account is deleted, Mistral keeps account data for 1 year, civil identity data for 5 years and technical logs for 1 rolling year. Team and Enterprise admins can set automatic chat deletion (30 days to 1 year).
- After you delete a chat or account
- Deleting a chat is final on your side. Conversations are removed from Mistral's systems 'typically after a short grace period to prevent accidental data loss, and for monitoring and legal retention purposes'. Some data may be kept longer under the privacy policy. Deleting your account is 'permanent and irreversible'.
- Human review
- Limited. 'People other than yourself may occasionally view your conversations', for example authorized, competent team members when you report content. The privacy policy says authorized team members access data 'strictly to perform their jobs'. The Terms say automated moderation tools support 'human review where required by law'. Mistral may also use your data for 'debugging, assessing, reviewing' performance.
- Where data is stored
- 'By default, your data is hosted in the European Union.' Depending on the feature, data may be temporarily transferred outside the EU to the subprocessors listed in the Trust Center, under SCCs. API users can choose a US endpoint.
- Age rules
- 13, with parental or guardian permission where required for minors (EEA consumer Terms).
- Ads
- The privacy policy doesn't say whether chat content is used for ads. Its US section says Mistral has not 'sold,' 'shared,' or engaged in 'targeted advertising' with consumers' personal data in the preceding 12 months.
- Security and certifications
- Complies with SOC 2 Type II and ISO 27001/27701 (help center). Encrypts data at rest with AES-256 and in transit with TLS 1.2+. Trust Center: trust.mistral.ai.
- Regulator actions
Date Authority Action Source 2026-02-17 Autorità Garante della Concorrenza e del Mercato (Italy, consumer protection) Closed case PS12968, opened 3 June 2025 over insufficient warnings about hallucinations in Le Chat. The case ended with binding commitments and no finding of infringement: permanent Italian disclaimers and translated Terms. The closure was announced on 30 April 2026. https://en.agcm.it/en/media/press-releases/2024/4/PS12942-PS12968-PS12973 - Privacy policy
- legal.mistral.ai
- Terms
- legal.mistral.ai
- Data controls help page
- help.mistral.ai
- Sources
Page URL Mistral AI Privacy Policy (effective July 27, 2026) https://legal.mistral.ai/terms/privacy-policy Terms of Service for consumers in the EEA (effective Aug 7, 2026) https://legal.mistral.ai/terms/eu-consumers-terms-of-service/ Help: Can I opt out of my input or output data being used for training? https://help.mistral.ai/en/articles/455207-can-i-opt-out-of-my-input-or-output-data-being-used-for-training Docs: Privacy and data controls https://docs.mistral.ai/admin/monitor-comply/privacy-data-controls Help: Can I activate Zero Data Retention (ZDR)? https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr Help: Can I delete a chat conversation? https://help.mistral.ai/en/articles/347613-can-i-delete-a-chat-conversation Help: Can other people view my conversations? https://help.mistral.ai/en/articles/347632-can-other-people-view-my-conversations Help: Where do you store my data? https://help.mistral.ai/en/articles/347629-where-do-you-store-my-data-or-my-organization-s-data Help: Do you have SOC 2 or ISO 27001 certification? https://help.mistral.ai/en/articles/347638-do-you-have-soc-2-or-iso-27001-certification Help: Encryption in transit and at rest https://help.mistral.ai/en/articles/347626-how-does-mistral-ensure-that-my-data-remains-encrypted-and-secure-in-transit-and-at-rest Data Processing Addendum https://legal.mistral.ai/terms/data-processing-addendum/ Help: Le Chat is now Vibe https://help.mistral.ai/en/articles/682992-le-chat-is-now-vibe Mistral news: Vibe gets to work (May 28, 2026) https://mistral.ai/news/vibe-agent/ Mistral Trust Center https://trust.mistral.ai/ Security advisory MAI-2026-002 https://docs.mistral.ai/resources/security-advisories/MAI-2026-002 AGCM press release 30 Apr 2026 https://en.agcm.it/en/media/press-releases/2024/4/PS12942-PS12968-PS12973 AGCM decision no. 31864 (PS12968, Mistral) https://agcm.it/dotcmsCustom/tc/2031/3/getDominoAttach?urlStr=81.126.91.44%3A8080%2FC12560D000291394%2F0%2F845CF99A210DABE4C1258DB50035CA71%2F%24File%2Fp31864.pdf
