In a generative AI systems, who always controls user data, regardless of application scope?

Explanation

Customers and end users always retain control over the data they input into the system.  Application providers may control other types of data, but not user inputs.  The cloud provider hosts infrastructure but doesn't control user data.  Data annotation teams label training data but don't control user-generated inputs.