Chat widget allegedly fed data to third party, which used it to train AI without telling customers