If I use it I also make sure it’s something completely non-core business, like an arcane piece of sorting or ugly rxjs construction.
I get the IP angst, but some companies think their GetGenericObjectFromDB() REST bs is secret sauce.
To the average VC a computer switching on is secret sauce enough, the rest is really just an implementation detail.
The policy is to not send any "sensitive company data" into ChatGPT, which I 100% agree with. How we implement a given Vue component or a particular API isn't sensitive or particularly novel so if I strip the business logic out I do honestly believe I'm complying with the spirit of the policy.
I ask because we are about to produce a similar policy at work. We can see the advantages of it, but likewise, we can't have company data held in their systems.