It is whatever their API privacy policy is, i.e. private by default.