What I have learned
The key questions are purpose, retention, access, training use and the human who can stop a bad output. A privacy promise is weak if the workflow cannot enforce it.
What I would do
I would classify the data, test with non-sensitive examples, restrict access, review vendor terms and document a deletion path. Only then would I expand to higher-risk use cases.