They say they train on your “deidentified data”

Passing your output through a second model and telling it to remove identifying data would count as “deidentified”

So they could scrape all the IP in your company as long as they take the names out first…

But they can’t do this unless you agree to enable training on your data. They would never train on raw user data. Only people who have consented and only after de identification.