They say they train on your “deidentified data”

Passing your output through a second model and telling it to remove identifying data would count as “deidentified”

So they could scrape all the IP in your company as long as they take the names out first…