User data is typically private on business plans, at least if you stick to the core services. Plenty of companies use O365, GSuite, or whatever to facilitate this kind of thing and I’m sure they would be pitching a huge fit if their user data was being collected.