Names, IDs, cards, addresses and secrets are replaced before a message or document leaves. Models see [PERSON_1]; you read the real answer.
Originals are encrypted per account. Only anonymized text is ever indexed or sent to a model.