Considering it is using GPT-4 API, you can take for granted that at least OpenAI is collecting your data. Not sure how Microsoft deal with OpenAI works, but it is possible they also have access to it.