If they generate an AI model based on your data and allow anyone else to use that model, you should assume that the user will also be able to query data about you.

So really it all hinges on if the AI is only used in house, or if it is accessible by the general public.