I have set it is as you have mentioned. Data contains list of Users (for signed up users) and list of text (emails of users not signed up on platform). Privacy rules for both.