Major providers offer API terms where your data is not used for training, and enterprise tiers add residency and retention controls. The real risks are usually in your own plumbing: logging prompts with secrets in them, or sending more context than the task needs. Good integration design minimizes both.
Have a question specific to your product?
Share the context and I will reply with a practical next step.