Your data is visible to you, and to anyone you have explicitly shared it with. Nothing is shared by default.
Data is encrypted at rest, and each account has its own key. Access on our side is limited by policy to the specific systems and people who need it to operate the service. That is a policy control, not a technical impossibility.
Your data is never sold, and no data brokers are involved.
You control what goes in, who you share it with, and whether it stays. You can revoke a share or delete your data at any time.