they have a "legal basis called legitimate interests for using your information to develop and improve AI"

UK?

I much doubt that would wash.

Report to the ICO.