Yes, it’s the full transcript including whatever data you upload. It’s pretty trivial to prompt an LLM to regurgitate its training data, especially the largest models. Even if it is rare, single dicument instance. You might get some word substitutions, but certainly the gist of the original will come through. Not high entropy passwords, but full documents? Yes.